dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ece5b861375b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "23639aabe426e7acdc0000000000000000fb80c92dc817d44dcdec00", [0x0, 0x2]})
ioctl$LOOP_CLR_FD(r0, 0x4c01)

16:46:40 executing program 1:
getpid()
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x760, 0x0)
memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x9, 0x0, 0x0, 0x9, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ece5b861375b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "23639aabe426e7acdc0000000000000000fb80c92dc817d44dcdec00", [0x0, 0x2]})
ioctl$LOOP_CLR_FD(r0, 0x4c01)

[  975.036854][T19224] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
16:46:40 executing program 1:
getpid()
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x760, 0x0)
memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x9, 0x0, 0x0, 0x9, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ece5b861375b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "23639aabe426e7acdc0000000000000000fb80c92dc817d44dcdec00", [0x0, 0x2]})
ioctl$LOOP_CLR_FD(r0, 0x4c01)

16:46:40 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x0, 0xe000000000000000}, [0x1f]}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x70, &(0x7f0000000040)={0x1, 0x5, 0x800, 0xb745, {0x28, 0x3, 0x10001, 0x3, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x5, 0x4]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

[  975.682678][T19224] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
16:46:40 executing program 1:
getpid()
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x760, 0x0)
r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x9, 0x0, 0x0, 0x9, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ece5b861375b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "23639aabe426e7acdc0000000000000000fb80c92dc817d44dcdec00", [0x0, 0x2]})
ioctl$LOOP_CLR_FD(r0, 0x4c01)

[  975.843982][T19227] hsr_slave_0: entered promiscuous mode
[  975.923422][T19227] hsr_slave_1: entered promiscuous mode
[  976.004890][T19227] debugfs: Directory 'hsr0' with parent 'hsr' already present!
16:46:41 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], 0x0, 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

[  976.046737][T19227] Cannot create hsr debugfs directory
16:46:41 executing program 1:
getpid()
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x760, 0x0)
r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x9, 0x0, 0x0, 0x9, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ece5b861375b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "23639aabe426e7acdc0000000000000000fb80c92dc817d44dcdec00", [0x0, 0x2]})
ioctl$LOOP_CLR_FD(r0, 0x4c01)

16:46:41 executing program 1:
getpid()
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x760, 0x0)
r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x9, 0x0, 0x0, 0x9, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ece5b861375b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "23639aabe426e7acdc0000000000000000fb80c92dc817d44dcdec00", [0x0, 0x2]})
ioctl$LOOP_CLR_FD(r0, 0x4c01)

16:46:42 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x0, 0xe000000000000000}, [0x1f]}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x70, &(0x7f0000000040)={0x1, 0x5, 0x800, 0xb745, {0x28, 0x3, 0x10001, 0x3, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x5, 0x4]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:46:42 executing program 1:
getpid()
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x760, 0x0)
r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0)
ioctl$LOOP_CLR_FD(r0, 0x4c01)

16:46:42 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], 0x0, 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:46:42 executing program 1:
getpid()
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x760, 0x0)
r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0)
ioctl$LOOP_CLR_FD(r0, 0x4c01)

[  977.557688][T19224] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  977.619227][T19224] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  977.718768][T19224] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  977.848639][T19224] netdevsim netdevsim4 netdevsim3: renamed from eth3
16:46:43 executing program 1:
getpid()
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x760, 0x0)
r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0)
ioctl$LOOP_CLR_FD(r0, 0x4c01)

[  978.267701][T19227] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
16:46:43 executing program 1:
getpid()
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x760, 0x0)
r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x9, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ece5b861375b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "23639aabe426e7acdc0000000000000000fb80c92dc817d44dcdec00", [0x0, 0x2]})
ioctl$LOOP_CLR_FD(r0, 0x4c01)

16:46:43 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80}, [0x1f]}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x70, &(0x7f0000000040)={0x1, 0x5, 0x800, 0xb745, {0x28, 0x3, 0x10001, 0x3, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x5, 0x4]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:46:43 executing program 1:
getpid()
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x760, 0x0)
r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x9, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ece5b861375b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "23639aabe426e7acdc0000000000000000fb80c92dc817d44dcdec00", [0x0, 0x2]})
ioctl$LOOP_CLR_FD(r0, 0x4c01)

16:46:44 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

[  979.008248][T19227] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
16:46:44 executing program 1:
getpid()
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x760, 0x0)
r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x9, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ece5b861375b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "23639aabe426e7acdc0000000000000000fb80c92dc817d44dcdec00", [0x0, 0x2]})
ioctl$LOOP_CLR_FD(r0, 0x4c01)

[  979.379766][T19227] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
16:46:44 executing program 1:
getpid()
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x760, 0x0)
r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x9, 0x0, 0x0, 0x0, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ece5b861375b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "23639aabe426e7acdc0000000000000000fb80c92dc817d44dcdec00", [0x0, 0x2]})
ioctl$LOOP_CLR_FD(r0, 0x4c01)

[  979.744954][T19227] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
16:46:45 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80}, [0x1f]}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x70, &(0x7f0000000040)={0x1, 0x5, 0x800, 0xb745, {0x28, 0x3, 0x10001, 0x3, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x5, 0x4]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:46:45 executing program 1:
getpid()
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x760, 0x0)
r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x9, 0x0, 0x0, 0x0, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ece5b861375b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "23639aabe426e7acdc0000000000000000fb80c92dc817d44dcdec00", [0x0, 0x2]})
ioctl$LOOP_CLR_FD(r0, 0x4c01)

[  980.330912][T19224] 8021q: adding VLAN 0 to HW filter on device bond0
16:46:45 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:46:45 executing program 1:
getpid()
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x760, 0x0)
r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x9, 0x0, 0x0, 0x0, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ece5b861375b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "23639aabe426e7acdc0000000000000000fb80c92dc817d44dcdec00", [0x0, 0x2]})
ioctl$LOOP_CLR_FD(r0, 0x4c01)

[  980.642634][T19224] 8021q: adding VLAN 0 to HW filter on device team0
[  980.829346][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state
[  980.837307][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state
[  981.041264][T19227] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  981.152451][T16255] bridge0: port 2(bridge_slave_1) entered blocking state
[  981.160464][T16255] bridge0: port 2(bridge_slave_1) entered forwarding state
16:46:46 executing program 1:
getpid()
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x760, 0x0)
r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x9, 0x0, 0x0, 0x0, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ece5b861375b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "23639aabe426e7acdc0000000000000000fb80c92dc817d44dcdec00"})
ioctl$LOOP_CLR_FD(r0, 0x4c01)

[  981.242225][T19227] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  981.336275][   T28] audit: type=1400 audit(1708706806.445:455): avc:  denied  { egress } for  pid=16255 comm="kworker/1:1" daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1
[  981.359869][T19227] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  981.454075][T19227] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  981.502042][   T28] audit: type=1400 audit(1708706806.455:456): avc:  denied  { sendto } for  pid=16255 comm="kworker/1:1" daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1
16:46:46 executing program 1:
getpid()
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x760, 0x0)
r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x9, 0x0, 0x0, 0x0, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ece5b861375b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "23639aabe426e7acdc0000000000000000fb80c92dc817d44dcdec00"})
ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01)

16:46:46 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80}, [0x1f]}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x70, &(0x7f0000000040)={0x1, 0x5, 0x800, 0xb745, {0x28, 0x3, 0x10001, 0x3, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x5, 0x4]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:46:47 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:46:47 executing program 1:
getpid()
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x760, 0x0)
r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x9, 0x0, 0x0, 0x0, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ece5b861375b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "23639aabe426e7acdc0000000000000000fb80c92dc817d44dcdec00"})
ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01)

16:46:47 executing program 1:
getpid()
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x760, 0x0)
r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x9, 0x0, 0x0, 0x0, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ece5b861375b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "23639aabe426e7acdc0000000000000000fb80c92dc817d44dcdec00"})
ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01)

[  982.943433][T19227] 8021q: adding VLAN 0 to HW filter on device bond0
16:46:48 executing program 1:
r0 = shmget(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil)
shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/196)
shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x1000)

[  983.205456][T19227] 8021q: adding VLAN 0 to HW filter on device team0
[  983.355882][T19450] bridge0: port 1(bridge_slave_0) entered blocking state
[  983.363833][T19450] bridge0: port 1(bridge_slave_0) entered forwarding state
16:46:48 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x48, &(0x7f0000000200)={0x0, 0x0, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x70, &(0x7f0000000040)={0x1, 0x5, 0x800, 0xb745, {0x28, 0x3, 0x10001, 0x3, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x5, 0x4]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:46:48 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

[  983.559786][T19450] bridge0: port 2(bridge_slave_1) entered blocking state
[  983.567873][T19450] bridge0: port 2(bridge_slave_1) entered forwarding state
16:46:48 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)

[  984.063058][T19224] 8021q: adding VLAN 0 to HW filter on device batadv0
16:46:49 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000b40), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r1, 0x411, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}}, 0x0)

16:46:49 executing program 1:
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x0, &(0x7f0000000380)={{0x77359400}}, 0x0)

16:46:50 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x48, &(0x7f0000000200)={0x0, 0x0, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x70, &(0x7f0000000040)={0x1, 0x5, 0x800, 0xb745, {0x28, 0x3, 0x10001, 0x3, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x5, 0x4]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:46:50 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c}, 0x1c}}, 0x0)

16:46:50 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:46:50 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)

[  985.605443][T19227] 8021q: adding VLAN 0 to HW filter on device batadv0
16:46:50 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a40)={0x14, 0x0, 0x580bf49db328d941}, 0x14}}, 0x0)

16:46:51 executing program 1:
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), r0)

[  986.195233][T19224] veth0_vlan: entered promiscuous mode
[  986.325092][T19227] veth0_vlan: entered promiscuous mode
16:46:51 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x1c81}]})

[  986.461173][T19227] veth1_vlan: entered promiscuous mode
16:46:51 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x48, &(0x7f0000000200)={0x0, 0x0, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x70, &(0x7f0000000040)={0x1, 0x5, 0x800, 0xb745, {0x28, 0x3, 0x10001, 0x3, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x5, 0x4]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:46:51 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

[  986.592816][T19224] veth1_vlan: entered promiscuous mode
16:46:51 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x2, &(0x7f0000000280)=[{}, {0x34, 0x0, 0x0, 0x7f}]})

[  987.015194][T19227] veth0_macvtap: entered promiscuous mode
[  987.072394][T19224] veth0_macvtap: entered promiscuous mode
16:46:52 executing program 1:
io_setup(0x1, &(0x7f0000000000)=<r0=>0x0)
io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={[0x3]}, 0x8})

[  987.152585][T19224] veth1_macvtap: entered promiscuous mode
[  987.188725][T19227] veth1_macvtap: entered promiscuous mode
[  987.440104][T19224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  987.498780][T19224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  987.530500][T19224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  987.586255][T19224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  987.638794][T19224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  987.677482][T19224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  987.719749][T19224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  987.764972][T19224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  987.805731][T19224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  987.853825][T19224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  987.917061][T19224] batman_adv: batadv0: Interface activated: batadv_slave_0
16:46:53 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:46:53 executing program 1:
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
clock_gettime(0x0, &(0x7f0000002b00))

[  988.071883][T19224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  988.149683][T19224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
16:46:53 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x0]}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x70, &(0x7f0000000040)={0x1, 0x5, 0x800, 0xb745, {0x28, 0x3, 0x10001, 0x3, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x5, 0x4]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

[  988.200514][T19224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  988.247837][T19224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
16:46:53 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x2, &(0x7f0000000280)=[{}, {0x35}]})

[  988.319199][T19224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  988.372694][T19224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  988.466070][T19224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
16:46:53 executing program 1:
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001240)={@cgroup, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

[  988.526033][T19224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  988.596042][T19224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  988.659187][T19224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  988.719368][T19224] batman_adv: batadv0: Interface activated: batadv_slave_1
[  988.782043][T19227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
16:46:54 executing program 1:
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000f00), 0x4)

[  988.835981][T19227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  988.886009][T19227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  988.940162][T19227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  989.006091][T19227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  989.057931][T19227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  989.116314][T19227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
16:46:54 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
io_setup(0x3, &(0x7f0000000040)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x0, r0, 0x0}])

[  989.196162][T19227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  989.246416][T19227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  989.321517][T19227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  989.367275][T19227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  989.426184][T19227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  989.486538][T19227] batman_adv: batadv0: Interface activated: batadv_slave_0
16:46:54 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

[  989.564327][T19227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  989.628430][T19227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
16:46:54 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x0]}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x70, &(0x7f0000000040)={0x1, 0x5, 0x800, 0xb745, {0x28, 0x3, 0x10001, 0x3, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x5, 0x4]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

[  989.677712][T19227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  989.733349][T19227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  989.764928][T19227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  989.817802][T19227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  989.862124][T19227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  989.916523][T19227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  990.006762][T19227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  990.060636][T19227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  990.092873][T19227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  990.147080][T19227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
16:46:55 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
io_setup(0x3, &(0x7f0000000040)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x0, r0, 0x0}])

[  990.198921][T19227] batman_adv: batadv0: Interface activated: batadv_slave_1
[  990.273762][T19227] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  990.330621][T19227] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  990.375255][T19227] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  990.448540][T19227] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  990.515234][T19224] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  990.552696][T19224] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  990.591683][T19224] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  990.626264][T19224] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
16:46:55 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
io_setup(0x3, &(0x7f0000000040)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x0, r0, 0x0}])

16:46:56 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:46:56 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x0]}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x70, &(0x7f0000000040)={0x1, 0x5, 0x800, 0xb745, {0x28, 0x3, 0x10001, 0x3, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x5, 0x4]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:46:56 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
io_setup(0x3, &(0x7f0000000040)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x0, r0, 0x0}])

[  991.674852][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  991.703542][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
16:46:57 executing program 1:
io_setup(0x2, &(0x7f0000000000))
io_destroy(0x0)

[  992.156823][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  992.204182][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
16:46:57 executing program 1:
io_setup(0x2, &(0x7f0000000000))
io_destroy(0x0)

[  992.322397][T19450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  992.369985][T19450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  992.401037][   T28] audit: type=1400 audit(1708706817.525:457): avc:  denied  { write } for  pid=4492 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
16:46:57 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x70, &(0x7f0000000040)={0x1, 0x5, 0x800, 0xb745, {0x28, 0x3, 0x10001, 0x3, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x5, 0x4]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:46:57 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

[  992.596142][   T28] audit: type=1400 audit(1708706817.535:458): avc:  denied  { remove_name } for  pid=4492 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  992.679461][ T5150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  992.689951][   T28] audit: type=1400 audit(1708706817.535:459): avc:  denied  { add_name } for  pid=4492 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  992.716630][ T5150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  992.795186][   T28] audit: type=1400 audit(1708706817.665:460): avc:  denied  { mounton } for  pid=19224 comm="syz-executor.4" path="/dev/binderfs" dev="devtmpfs" ino=2323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
16:46:58 executing program 2:
r0 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000003100)=""/188, 0xbc}, {0x0}], 0x3, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1780, &(0x7f0000000340)={0x0, 0x4879, 0x200, 0x3, 0x2a0}, &(0x7f00000003c0), &(0x7f0000000440))
getpid()
r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x760, 0x103382)
r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
pwritev(r2, &(0x7f0000000600)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x800000, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f0000000f40), 0x6e, &(0x7f0000002280)=[{&(0x7f0000000fc0)=""/97, 0x61}, {&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000002040)=""/185, 0xb9}, {&(0x7f0000002100)=""/96, 0x60}, {&(0x7f0000002180)=""/230, 0xe6}], 0x5}, 0x40)
memfd_create(0x0, 0x3)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
sendfile(r1, r1, 0x0, 0x24002dea)
process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000002b00)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x9, 0x0, 0x0, 0x9, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ece5b861375b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "23639aabe426e7acdc0000000000000000fb80c92dc817d44dcdec00", [0x0, 0x2]})
sched_setaffinity(r0, 0x8, &(0x7f0000000140))
ioctl$LOOP_CLR_FD(r1, 0x4c01)
io_submit(0x0, 0x3, &(0x7f0000000480)=[0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0}])
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000e80))
r3 = getpid()
sched_setaffinity(r3, 0x8, &(0x7f0000000ec0)=0x6)

16:46:58 executing program 4:
r0 = socket$inet6(0x18, 0x1, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0x18, 0x1}, 0xc)

16:46:58 executing program 1:
io_setup(0x2, &(0x7f0000000000))
io_destroy(0x0)

16:46:58 executing program 1:
io_setup(0x2, &(0x7f0000000000))
io_destroy(0x0)

16:46:58 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$tun(r0, 0x0, 0x0)

16:46:58 executing program 4:
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001240)={@cgroup, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)}, 0x40)

[  993.505867][ T1233] ieee802154 phy0 wpan0: encryption failed: -22
[  993.518066][ T1233] ieee802154 phy1 wpan1: encryption failed: -22
16:46:59 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00')
read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020)

16:46:59 executing program 1:
openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x10040, 0x0)

16:46:59 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x70, &(0x7f0000000040)={0x1, 0x5, 0x800, 0xb745, {0x28, 0x3, 0x10001, 0x3, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x5, 0x4]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:46:59 executing program 4:
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)

16:46:59 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00')
read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020)

16:46:59 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:46:59 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x6}]})

16:46:59 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00')
read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020)

16:46:59 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x2)
ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x4, 0x9, 0x6, 0x6}, 'syz0\x00'})
socket$can_raw(0x1d, 0x3, 0x1)

16:46:59 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
io_setup(0x3, &(0x7f0000000040)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f0000000080)}])

16:47:00 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x0, 0x0, 0x0, 0x0, 0x204, 0x1, 0xffff}, 0x48)

16:47:00 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00')
read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020)

16:47:00 executing program 1:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000100))

16:47:00 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000002c0)=0xe, 0x4)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x201, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0)

16:47:00 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x70, &(0x7f0000000040)={0x1, 0x5, 0x800, 0xb745, {0x28, 0x3, 0x10001, 0x3, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x5, 0x4]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:47:00 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8948, &(0x7f0000000100)={'ip6tnl0\x00', 0x0})

16:47:00 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:47:00 executing program 1:
r0 = socket$igmp(0x2, 0x3, 0x2)
sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001a80)={&(0x7f0000000000), 0xc, &(0x7f0000001a40)={0x0, 0x540}}, 0x0)

16:47:01 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2}, 0x4)

16:47:01 executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000340)={0x80030000000000, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

16:47:01 executing program 4:
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2c726f6f74636f6e746578743d757365725f75feac4424c526a6368a8fc8220b608ef5a2fd396b1fe12bd9574fd8b875fbe55841a8261285b0de4328da51b44ac89dd9e233e13fad7f62b65238cafac1ad5dd4830612b0516ccc7d"], 0x0, 0x0, 0x0)

16:47:01 executing program 1:
creat(&(0x7f00000012c0)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000021c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}})

[  996.732349][T19655] SELinux: security_context_str_to_sid (user_uþ¬D$Å&¦6Š�È`Žõ¢ý9ká+ÙWOظuûåXA¨&…°ÞC(ÚQ´JÈ�Ùâ3á?­b¶R8ÊúÁ­]Ôƒ°QlÌ}) failed with errno=-22
16:47:02 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8922, &(0x7f0000000100)={'ip6tnl0\x00', 0x0})

16:47:02 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4)

[  997.216622][T19662] ip6tnl0: mtu less than device minimum
16:47:02 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:47:02 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x70, &(0x7f0000000040)={0x1, 0x5, 0x800, 0xb745, {0x28, 0x3, 0x10001, 0x3, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x5, 0x4]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:47:02 executing program 2:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
write$FUSE_DIRENTPLUS(r0, 0x0, 0x7ffffffff000)

16:47:03 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x3)

16:47:03 executing program 4:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x2, 0xc, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x38}}, 0x0)

16:47:03 executing program 1:
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x7400, 0x0)

16:47:03 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xb, 0x0, 0x0, 0xd3e}, 0x48)

16:47:04 executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x68}}, 0x20040005)

16:47:04 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r1=>0x0})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48)

16:47:04 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:47:04 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x70, &(0x7f0000000040)={0x1, 0x5, 0x800, 0xb745, {0x28, 0x3, 0x10001, 0x3, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x5, 0x4]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:47:04 executing program 4:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x2, 0xc, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)

16:47:04 executing program 2:
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2000, 0x0)

16:47:04 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe0101, 0x0)
pread64(r0, 0x0, 0x0, 0x0)

16:47:05 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x3, 0x6, @link_local}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', <r3=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r3, 0x3, 0x6, @link_local}, 0x10)

16:47:05 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r1=>0x0})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48)

[ 1000.145104][T19759] batadv_slave_1: entered promiscuous mode
16:47:05 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'tunl0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}]}}}}})

[ 1000.200269][T19757] batadv_slave_1: left promiscuous mode
16:47:05 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x7007}, 0x4)

16:47:05 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0)

16:47:05 executing program 1:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000002240)={0x0, 0x1, 0xffffffc5, @random}, 0x10)

16:47:05 executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000340)={0x80030000000000, 0x0, &(0x7f0000000300)={0x0}, 0x8, 0x0, 0xffffffff00000000}, 0x0)

16:47:05 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:47:06 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x70, &(0x7f0000000040)={0x1, 0x5, 0x800, 0xb745, {0x28, 0x3, 0x10001, 0x3, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x5, 0x4]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:47:06 executing program 4:
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000004280)={{}, 0x22}, 0x0, 0x0, 0x0)

16:47:06 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x891f, &(0x7f0000000100)={'ip6tnl0\x00', 0x0})

16:47:06 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000340)={0x100000000000000, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x2, 0xc, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

[ 1001.360406][T19781] fuse: Bad value for 'fd'
16:47:06 executing program 2:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000021c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}})

16:47:06 executing program 1:
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000040), 0xfffffffffffffeb7)

16:47:06 executing program 4:
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='.\x00', 0x0, &(0x7f0000000100)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize}, {@allow_other}, {@allow_other}, {@allow_other}], [{@uid_lt}, {@seclabel}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}, 0x0, 0x0, 0x0)

16:47:07 executing program 1:
syz_clone(0x50000400, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0)

16:47:07 executing program 2:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000080), 0x0, 0x0, 0x2)

[ 1002.051949][T19794] SELinux: security_context_str_to_sid (u) failed with errno=-22
[ 1002.094129][   T28] audit: type=1400 audit(1708706827.225:461): avc:  denied  { create } for  pid=19792 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
16:47:07 executing program 2:
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r0, 0x413, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0)

16:47:07 executing program 4:
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='.\x00', 0x0, &(0x7f0000000100)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize}, {@allow_other}, {@allow_other}, {@allow_other}], [{@uid_lt}, {@seclabel}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}, 0x0, 0x0, 0x0)

16:47:07 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:47:07 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r2}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000540)=<r4=>0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r6], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r4, @ANYRES32, @ANYRES64, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=r2, @ANYRES64, @ANYRES16=r8], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r4, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r10=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r4, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r10})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000280)={{r1}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid=r10})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, 0x0)
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:47:07 executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
fremovexattr(r0, 0xfffffffffffffffd)

[ 1002.517309][T19795] lo speed is unknown, defaulting to 1000
[ 1002.787630][T19804] SELinux: security_context_str_to_sid (u) failed with errno=-22
16:47:08 executing program 2:
syz_clone(0x50000400, &(0x7f0000000040)="9e4caa0e7de7054520a073436846b24a61d60416d0a4cd2e184164b070167e", 0x1f, &(0x7f0000000080), 0x0, &(0x7f0000000100)="b144e9e62e41a52bd3e3b9e3368819199a02b0db0ad52bd9097929d3d60bb8d82d798efeb9dcbf6a34d98dbaa19df231135a2f35af713aa0339e39f283ac2d5175ce4ea533f43639364655901426c586a3e17ca4bedcecc8224b60bc8c0032f27592b8206a9d42e73a9bb9ec88fcf6cc9a8a582ad42887ac3962484da5db9381202dc60b47dc90c3ca7940cfa76ffcce52947d31b7d8aeb92a599ae31fdff0aa6b0adfd69e52eac3454bc1853c55938d202cdf1cd556ff0069267e1f9a01c892096956762e162c2fd579e245b69c0aae77ebe481187680")

16:47:08 executing program 4:
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='.\x00', 0x0, &(0x7f0000000100)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize}, {@allow_other}, {@allow_other}, {@allow_other}], [{@uid_lt}, {@seclabel}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}, 0x0, 0x0, 0x0)

[ 1003.506069][T19811] SELinux: security_context_str_to_sid (u) failed with errno=-22
16:47:08 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:47:08 executing program 4:
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='.\x00', 0x0, &(0x7f0000000100)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize}, {@allow_other}, {@allow_other}, {@allow_other}], [{@uid_lt}, {@seclabel}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}, 0x0, 0x0, 0x0)

16:47:09 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r2}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000540)=<r4=>0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r6], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r4, @ANYRES32, @ANYRES64, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=r2, @ANYRES64, @ANYRES16=r8], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r4, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r10=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r4, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r10})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000280)={{r1}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid=r10})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, 0x0)
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

[ 1004.209013][T19816] SELinux: security_context_str_to_sid (u) failed with errno=-22
16:47:09 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x400, 0x4)

[ 1004.691880][T19808] lo speed is unknown, defaulting to 1000
16:47:10 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:47:10 executing program 4:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffc0001}]})
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x24, 0x10, 0x0, 0x0, 0x0, {0x10, 0x0, 0x4c}}, 0x24}}, 0x0)

16:47:10 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r2}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000540)=<r4=>0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r6], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r4, @ANYRES32, @ANYRES64, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=r2, @ANYRES64, @ANYRES16=r8], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r4, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r10=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r4, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r10})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000280)={{r1}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid=r10})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, 0x0)
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

[ 1005.698249][   T28] audit: type=1326 audit(1708706830.835:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19826 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ef47dda9 code=0x7ffc0000
[ 1005.865036][   T28] audit: type=1326 audit(1708706830.835:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19826 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ef47dda9 code=0x7ffc0000
[ 1006.010238][   T28] audit: type=1326 audit(1708706830.885:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19826 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f54ef47dda9 code=0x7ffc0000
16:47:11 executing program 4:
r0 = getpgrp(0x0)
getpgrp(r0)
syz_open_procfs$namespace(0x0, 0x0)
ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, 0x0)
syz_open_procfs(0x0, &(0x7f0000000400)='net/fib_triestat\x00')
syz_clone(0x1000c100, &(0x7f0000000440), 0x0, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="862663e36b934e2185b517f84c167a1e7ca519ad88913172bafd5b29b005d74ea9bfba9bb4bf5b7542e5e8536692c7ce669936e01bb709878b4034419bdd2ef6958ab3346c1e3a16118d7331893d44e5926d8fdc0a24")

[ 1006.168272][   T28] audit: type=1326 audit(1708706830.885:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19826 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ef47dda9 code=0x7ffc0000
[ 1006.320308][   T28] audit: type=1326 audit(1708706830.895:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19826 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ef47dda9 code=0x7ffc0000
[ 1006.463958][   T28] audit: type=1326 audit(1708706830.925:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19826 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f54ef47dda9 code=0x7ffc0000
[ 1006.608845][   T28] audit: type=1326 audit(1708706830.935:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19826 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ef47dda9 code=0x7ffc0000
16:47:11 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r11=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r11, r10}, 0x90)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r12, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r14 = openat$cgroup_ro(r13, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r12, r14, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r11, r0, 0x4, &(0x7f0000001980)=[r1, r1, r14, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r14, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r14, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r15}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

[ 1006.795770][   T28] audit: type=1326 audit(1708706830.935:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19826 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ef47dda9 code=0x7ffc0000
16:47:12 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{}, r1, 0x0, @inherit={0x70, &(0x7f0000000040)={0x1, 0x5, 0x800, 0xb745, {0x28, 0x3, 0x10001, 0x3, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x5, 0x4]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:47:12 executing program 4:
r0 = syz_clone(0x50000400, &(0x7f0000000040)="9e4caa0e7de7054520a073436846b24a61d60416d0a4cd2e184164b070167ef29a", 0x21, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="b144e9e62e41a52bd3e3b9e3368819199a02b0db0ad52bd9097929d3d60bb8d82d798efeb9dcbf6a34d98dbaa19df231135a2f35af713aa0339e39f283ac2d5175ce4ea533f43639364655901426c586a3e17ca4bedcecc8224b60bc8c0032f27592b8206a9d42e73a9bb9ec88fcf6cc9a8a582ad42887ac3962484da5db9381202dc60b47dc90c3ca7940cfa76ffcce52947d31b7d8aeb92a599ae31fdff0aa6b0adfd69e52eac3454bc1853c55938d202cdf1cd556ff0069267e1f9a01c892096956762e162c2fd579e245b69c0aae77ebe481187680286231")
read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
setpgid(r0, r1)
openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

16:47:13 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r11=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r11, r10}, 0x90)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r12, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r14 = openat$cgroup_ro(r13, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r12, r14, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r11, r0, 0x4, &(0x7f0000001980)=[r1, r1, r14, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r14, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r14, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r15}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:47:13 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{}, r1, 0x0, @inherit={0x70, &(0x7f0000000040)={0x1, 0x5, 0x800, 0xb745, {0x28, 0x3, 0x10001, 0x3, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x5, 0x4]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

[ 1008.923671][T19846] lo speed is unknown, defaulting to 1000
16:47:14 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r11=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r11, r10}, 0x90)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r12, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r14 = openat$cgroup_ro(r13, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r12, r14, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r11, r0, 0x4, &(0x7f0000001980)=[r1, r1, r14, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r14, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r14, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r15}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:47:15 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{}, r1, 0x0, @inherit={0x70, &(0x7f0000000040)={0x1, 0x5, 0x800, 0xb745, {0x28, 0x3, 0x10001, 0x3, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x5, 0x4]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:47:16 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, r10], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:47:16 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r2}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000540)=<r4=>0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r6], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r4, @ANYRES32, @ANYRES64, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=r2, @ANYRES64, @ANYRES16=r8], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r4, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r10=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r4, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r10})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000280)={{r1}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid=r10})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, 0x0, 0x0, @inherit={0x70, &(0x7f0000000040)={0x1, 0x5, 0x800, 0xb745, {0x28, 0x3, 0x10001, 0x3, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x5, 0x4]}}, @devid=r10})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:47:17 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, r10], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:47:17 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r2}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000540)=<r4=>0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r6], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r4, @ANYRES32, @ANYRES64, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=r2, @ANYRES64, @ANYRES16=r8], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r4, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r10=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r4, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r10})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000280)={{r1}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid=r10})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, 0x0, 0x0, @inherit={0x70, &(0x7f0000000040)={0x1, 0x5, 0x800, 0xb745, {0x28, 0x3, 0x10001, 0x3, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x5, 0x4]}}, @devid=r10})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:47:18 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, r10], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:47:19 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r2}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000540)=<r4=>0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r6], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r4, @ANYRES32, @ANYRES64, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=r2, @ANYRES64, @ANYRES16=r8], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r4, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r10=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r4, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r10})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000280)={{r1}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid=r10})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, 0x0, 0x0, @inherit={0x70, &(0x7f0000000040)={0x1, 0x5, 0x800, 0xb745, {0x28, 0x3, 0x10001, 0x3, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x5, 0x4]}}, @devid=r10})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:47:20 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r11=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r11, r10}, 0x90)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r12, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r14 = openat$cgroup_ro(r13, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r12, r14, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r11, r0, 0x4, &(0x7f0000001980)=[r1, r1, r14, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r14, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r14, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r15}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:47:20 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x0, 0x0}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:47:21 executing program 1:
unshare(0x6e060600)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='kmem_cache_free\x00', r0}, 0x10)
unshare(0x4020000)

16:47:21 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='kmem_cache_free\x00', r0}, 0x10)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x0)
readlinkat(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=""/18, 0x12)

16:47:21 executing program 2:
r0 = socket(0x10, 0x80002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='p\x00\x00\x000\x00;'], 0x70}}, 0x4800)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='reno\x00', 0x5)
setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000000), 0x4)
bind$inet(r2, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000007140)={'batadv_slave_1\x00', <r3=>0x0})
recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc={0x27, <r4=>0x0}, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x200116c0}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
setsockopt$inet_tcp_int(r2, 0x6, 0x12, &(0x7f0000000300)=0x4, 0x4)
write$binfmt_elf64(r2, &(0x7f0000000a00)=ANY=[@ANYRES32, @ANYBLOB="4392c9d2eb9b977d238e51b11fd0c0a6baef72102b9a03b005e93789f83bacc0b5f3fd1ae105134de45d4caeda3b2fd383c501a61fd830ec66dadb4e11f4b40a344868fcea5d536ede849a69b6b0aa5b35904efbf220a4241d79595c06c2e2c8e70871b41294a3b5dd15080100ec3fe7d0cbfd1774516d043f783cb6a2090400641095cb734d3c53305bf8fe8a17524570ce1b62efa4bbf999b6af5c4ab8209ed5d0131ba372", @ANYRES8=r4, @ANYRES64=r3], 0x100000530)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, <r5=>0x0}, 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xf22}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0xa}]}, &(0x7f00000001c0)='GPL\x00', 0x7, 0xb7, &(0x7f0000000200)=""/183, 0x0, 0x41, '\x00', r3, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x5, 0x8, 0x6}, 0x10, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90)

[ 1016.748062][T19902] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1016.760387][T19893] lo speed is unknown, defaulting to 1000
16:47:22 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x0, 0x0}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:47:22 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r11=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r11, r10}, 0x90)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r12, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r14 = openat$cgroup_ro(r13, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r12, r14, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r11, r0, 0x4, &(0x7f0000001980)=[r1, r1, r14, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r14, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r14, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r15}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:47:23 executing program 2:
r0 = socket(0x10, 0x80002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002840)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000001000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a34b8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b7543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8f23e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae0000c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910a3193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b884057aeb68f3d675a79907a72ace70902459f6950a06a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68fe6b7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f8ce659e340c714809ec4d060bb1c9cfcde57b79625e2979fe689a5a246cbbd488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546308a0004be94dfab28c2a51dc816df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d044fa492aa38717481455e86dcd7816ad8940bd192595369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d4f17a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b94952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d830e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000000000000000000000000000000044ff72f96f084f4b6cdcb1b4a9d8e9f99f1b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded5027a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b092b70f77f0f428d2000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634009aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3f19f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f9863800f127d6b4518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c104fe52837a19006952fe2724c0105ab158a54a6a73000000000000000000000000b0d135da438cbe303f3ae070def97d6649b5a693ff5c788e5a406e1d06942ed51bff073011f6e6c29d3ea22e5fc26c7fbe37656229a6a12857ae9ed131ccdd513066bc9422ec38a1dc5212986d9bc330a23eb3b200af1a3678c2bfbe4b4ba6e8471495f6e82c5ee425973c590253e875352a3acaee044868f9b80f8fdc9d402007bb4c8df1b69d3d2b364ec9e4ed2f554118684eff1adf5b49b6b29232198e682dfa45dced8b332c40dc37dfe7a59e252ddc33ea9072dcd697a700cfac90b487660795f564ddb61fa3e4835f936984200000000000000000008e9f7bc3a00cd72ced7684e264e45398f7087734fcf2023a7a4c880f562f46f14cdc1bf472d74bc0c777b1021ff75de086c08f72a41399d3a3065b2f50a531cc90edbf88370ff50ba1aa6cc59076165a3ab90a3c90527b7c9711cf85bbb0cb0aebc47ab5c65458c40020f2cfb10e5f0a1594ae491e8756446e6873a8b222ae7e58dd7640666e359fc583e17ed6bcb30c0fafbba761e756ca80286d38bb92dd9ba17c1bb628e5b8d52c9a02a67f788ab88dca817cb4886942a279e06f45c8c936f5c46e1a2b4097471ca0ee26bcfabf7adb9c90a10539d960dec5c84464f6bc68318e7e899acf20ea41b071132d7a5945e941334855ce6149deaae1b5b83045e83bfc208079e6e58ebb4176b126c743111c5a712f465a3007d665ac21c43a544947c9d13e5206a21025f6acd47c2d333e648dcbf2e4989a1d4a176fe8f7a8cf0aeaf9736118b036639cb35810ea88213ff2a0842d420d418d026a101222a4ebd18fc89f04b5a9056ca6c00308936679474fa83bdf6eac126c9be33c551bccd42d8000736ed9a64ff7cb87d44c9bcf821c96dcd34aadfcc42fabd5976cedc9a4eef24764168056d0645c7aa007d69df4fa8de1224a56f0799ad59ee5c8441866b42293c513ef7f"], &(0x7f0000000140)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='p\x00\x00\x000\x00;'], 0x70}}, 0x4800)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='reno\x00', 0x5)
setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000000), 0x4)
bind$inet(r2, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000007140)={'batadv_slave_1\x00', <r3=>0x0})
recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc={0x27, <r4=>0x0}, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x200116c0}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
setsockopt$inet_tcp_int(r2, 0x6, 0x12, &(0x7f0000000300)=0x4, 0x4)
write$binfmt_elf64(r2, &(0x7f0000000a00)=ANY=[@ANYRES32, @ANYBLOB="4392c9d2eb9b977d238e51b11fd0c0a6baef72102b9a03b005e93789f83bacc0b5f3fd1ae105134de45d4caeda3b2fd383c501a61fd830ec66dadb4e11f4b40a344868fcea5d536ede849a69b6b0aa5b35904efbf220a4241d79595c06c2e2c8e70871b41294a3b5dd15080100ec3fe7d0cbfd1774516d043f783cb6a2090400641095cb734d3c53305bf8fe8a17524570ce1b62efa4bbf999b6af5c4ab8209ed5d0131ba372", @ANYRES8=r4, @ANYRES64=r3], 0x100000530)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, <r5=>0x0}, 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xf22}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0xa}]}, &(0x7f00000001c0)='GPL\x00', 0x7, 0xb7, &(0x7f0000000200)=""/183, 0x0, 0x41, '\x00', r3, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x5, 0x8, 0x6}, 0x10, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90)

16:47:23 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x0, 0x0}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:47:23 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r11=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r11, r10}, 0x90)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r12, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r14 = openat$cgroup_ro(r13, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r12, r14, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r11, r0, 0x4, &(0x7f0000001980)=[r1, r1, r14, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r14, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r14, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r15}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

[ 1018.568245][T19913] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.2'.
16:47:25 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x70, &(0x7f0000000040)={0x0, 0x5, 0x800, 0xb745, {0x28, 0x3, 0x10001, 0x3, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x5, 0x4]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:47:25 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r11=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r11, r10}, 0x90)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r12, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r14 = openat$cgroup_ro(r13, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r12, r14, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r11, r0, 0x4, &(0x7f0000001980)=[r1, r1, r14, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r14, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r14, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r15}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:47:25 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='p\x00\x00\x000\x00;'], 0x70}}, 0x4800)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='reno\x00', 0x5)
setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000000), 0x4)
bind$inet(r2, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000007140)={'batadv_slave_1\x00', <r3=>0x0})
recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc={0x27, <r4=>0x0}, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x200116c0}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
setsockopt$inet_tcp_int(r2, 0x6, 0x12, &(0x7f0000000300)=0x4, 0x4)
write$binfmt_elf64(r2, &(0x7f0000000a00)=ANY=[@ANYRES32, @ANYBLOB="4392c9d2eb9b977d238e51b11fd0c0a6baef72102b9a03b005e93789f83bacc0b5f3fd1ae105134de45d4caeda3b2fd383c501a61fd830ec66dadb4e11f4b40a344868fcea5d536ede849a69b6b0aa5b35904efbf220a4241d79595c06c2e2c8e70871b41294a3b5dd15080100ec3fe7d0cbfd1774516d043f783cb6a2090400641095cb734d3c53305bf8fe8a17524570ce1b62efa4bbf999b6af5c4ab8209ed5d0131ba372", @ANYRES8=r4, @ANYRES64=r3], 0x100000530)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, <r5=>0x0}, 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xf22}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0xa}]}, &(0x7f00000001c0)='GPL\x00', 0x7, 0xb7, &(0x7f0000000200)=""/183, 0x0, 0x41, '\x00', r3, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x5, 0x8, 0x6}, 0x10, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90)

[ 1020.468863][T19931] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.1'.
16:47:26 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x70, &(0x7f0000000040)={0x0, 0x5, 0x800, 0xb745, {0x28, 0x3, 0x10001, 0x3, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x5, 0x4]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:47:26 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r11=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r11, r10}, 0x90)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r12, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r14 = openat$cgroup_ro(r13, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r12, r14, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r11, r0, 0x4, &(0x7f0000001980)=[r1, r1, r14, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r14, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r14, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r15}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:47:27 executing program 2:
r0 = socket(0x10, 0x80002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='p\x00\x00\x000\x00;'], 0x70}}, 0x4800)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='reno\x00', 0x5)
setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000000), 0x4)
bind$inet(r2, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000007140)={'batadv_slave_1\x00', <r3=>0x0})
recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc={0x27, <r4=>0x0}, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x200116c0}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
setsockopt$inet_tcp_int(r2, 0x6, 0x12, &(0x7f0000000300)=0x4, 0x4)
write$binfmt_elf64(r2, &(0x7f0000000a00)=ANY=[@ANYRES32, @ANYBLOB="4392c9d2eb9b977d238e51b11fd0c0a6baef72102b9a03b005e93789f83bacc0b5f3fd1ae105134de45d4caeda3b2fd383c501a61fd830ec66dadb4e11f4b40a344868fcea5d536ede849a69b6b0aa5b35904efbf220a4241d79595c06c2e2c8e70871b41294a3b5dd15080100ec3fe7d0cbfd1774516d043f783cb6a2090400641095cb734d3c53305bf8fe8a17524570ce1b62efa4bbf999b6af5c4ab8209ed5d0131ba372", @ANYRES8=r4, @ANYRES64=r3], 0x100000530)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, <r5=>0x0}, 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xf22}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0xa}]}, &(0x7f00000001c0)='GPL\x00', 0x7, 0xb7, &(0x7f0000000200)=""/183, 0x0, 0x41, '\x00', r3, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x5, 0x8, 0x6}, 0x10, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90)

[ 1022.498622][T19947] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.2'.
16:47:28 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x70, &(0x7f0000000040)={0x0, 0x5, 0x800, 0xb745, {0x28, 0x3, 0x10001, 0x3, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x5, 0x4]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:47:28 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r11=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r11, r10}, 0x90)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r12, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r14 = openat$cgroup_ro(r13, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r12, r14, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r11, r0, 0x4, &(0x7f0000001980)=[r1, r1, r14, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r14, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r14, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r15}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:47:28 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002840)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000001000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a34b8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b7543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8f23e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae0000c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910a3193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b884057aeb68f3d675a79907a72ace70902459f6950a06a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68fe6b7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f8ce659e340c714809ec4d060bb1c9cfcde57b79625e2979fe689a5a246cbbd488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546308a0004be94dfab28c2a51dc816df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d044fa492aa38717481455e86dcd7816ad8940bd192595369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d4f17a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b94952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d830e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000000000000000000000000000000044ff72f96f084f4b6cdcb1b4a9d8e9f99f1b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded5027a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b092b70f77f0f428d2000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634009aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3f19f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f9863800f127d6b4518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c104fe52837a19006952fe2724c0105ab158a54a6a73000000000000000000000000b0d135da438cbe303f3ae070def97d6649b5a693ff5c788e5a406e1d06942ed51bff073011f6e6c29d3ea22e5fc26c7fbe37656229a6a12857ae9ed131ccdd513066bc9422ec38a1dc5212986d9bc330a23eb3b200af1a3678c2bfbe4b4ba6e8471495f6e82c5ee425973c590253e875352a3acaee044868f9b80f8fdc9d402007bb4c8df1b69d3d2b364ec9e4ed2f554118684eff1adf5b49b6b29232198e682dfa45dced8b332c40dc37dfe7a59e252ddc33ea9072dcd697a700cfac90b487660795f564ddb61fa3e4835f936984200000000000000000008e9f7bc3a00cd72ced7684e264e45398f7087734fcf2023a7a4c880f562f46f14cdc1bf472d74bc0c777b1021ff75de086c08f72a41399d3a3065b2f50a531cc90edbf88370ff50ba1aa6cc59076165a3ab90a3c90527b7c9711cf85bbb0cb0aebc47ab5c65458c40020f2cfb10e5f0a1594ae491e8756446e6873a8b222ae7e58dd7640666e359fc583e17ed6bcb30c0fafbba761e756ca80286d38bb92dd9ba17c1bb628e5b8d52c9a02a67f788ab88dca817cb4886942a279e06f45c8c936f5c46e1a2b4097471ca0ee26bcfabf7adb9c90a10539d960dec5c84464f6bc68318e7e899acf20ea41b071132d7a5945e941334855ce6149deaae1b5b83045e83bfc208079e6e58ebb4176b126c743111c5a712f465a3007d665ac21c43a544947c9d13e5206a21025f6acd47c2d333e648dcbf2e4989a1d4a176fe8f7a8cf0aeaf9736118b036639cb35810ea88213ff2a0842d420d418d026a101222a4ebd18fc89f04b5a9056ca6c00308936679474fa83bdf6eac126c9be33c551bccd42d8000736ed9a64ff7cb87d44c9bcf821c96dcd34aadfcc42fabd5976cedc9a4eef24764168056d0645c7aa007d69df4fa8de1224a56f0799ad59ee5c8441866b42293c513ef7f"], &(0x7f0000000140)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='p\x00\x00\x000\x00;'], 0x70}}, 0x4800)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='reno\x00', 0x5)
setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000000), 0x4)
bind$inet(r2, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000007140)={'batadv_slave_1\x00', <r3=>0x0})
recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc={0x27, <r4=>0x0}, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x200116c0}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
setsockopt$inet_tcp_int(r2, 0x6, 0x12, &(0x7f0000000300)=0x4, 0x4)
write$binfmt_elf64(r2, &(0x7f0000000a00)=ANY=[@ANYRES32, @ANYBLOB="4392c9d2eb9b977d238e51b11fd0c0a6baef72102b9a03b005e93789f83bacc0b5f3fd1ae105134de45d4caeda3b2fd383c501a61fd830ec66dadb4e11f4b40a344868fcea5d536ede849a69b6b0aa5b35904efbf220a4241d79595c06c2e2c8e70871b41294a3b5dd15080100ec3fe7d0cbfd1774516d043f783cb6a2090400641095cb734d3c53305bf8fe8a17524570ce1b62efa4bbf999b6af5c4ab8209ed5d0131ba372", @ANYRES8=r4, @ANYRES64=r3], 0x100000530)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, <r5=>0x0}, 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xf22}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0xa}]}, &(0x7f00000001c0)='GPL\x00', 0x7, 0xb7, &(0x7f0000000200)=""/183, 0x0, 0x41, '\x00', r3, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x5, 0x8, 0x6}, 0x10, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90)

[ 1023.965290][T19957] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.1'.
16:47:29 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:47:29 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x70, &(0x7f0000000040)={0x1, 0x5, 0x0, 0xb745, {0x28, 0x3, 0x10001, 0x3, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x5, 0x4]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:47:35 executing program 2:
r0 = socket(0x10, 0x80002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='p\x00\x00\x000\x00;'], 0x70}}, 0x4800)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='reno\x00', 0x5)
setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000000), 0x4)
bind$inet(r2, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000007140)={'batadv_slave_1\x00', <r3=>0x0})
recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc={0x27, <r4=>0x0}, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x200116c0}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
setsockopt$inet_tcp_int(r2, 0x6, 0x12, &(0x7f0000000300)=0x4, 0x4)
write$binfmt_elf64(r2, &(0x7f0000000a00)=ANY=[@ANYRES32, @ANYBLOB="4392c9d2eb9b977d238e51b11fd0c0a6baef72102b9a03b005e93789f83bacc0b5f3fd1ae105134de45d4caeda3b2fd383c501a61fd830ec66dadb4e11f4b40a344868fcea5d536ede849a69b6b0aa5b35904efbf220a4241d79595c06c2e2c8e70871b41294a3b5dd15080100ec3fe7d0cbfd1774516d043f783cb6a2090400641095cb734d3c53305bf8fe8a17524570ce1b62efa4bbf999b6af5c4ab8209ed5d0131ba372", @ANYRES8=r4, @ANYRES64=r3], 0x100000530)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, <r5=>0x0}, 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xf22}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0xa}]}, &(0x7f00000001c0)='GPL\x00', 0x7, 0xb7, &(0x7f0000000200)=""/183, 0x0, 0x41, '\x00', r3, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x5, 0x8, 0x6}, 0x10, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90)

16:47:35 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:47:35 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x70, &(0x7f0000000040)={0x1, 0x5, 0x0, 0xb745, {0x28, 0x3, 0x10001, 0x3, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x5, 0x4]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:47:35 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002840)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000001000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a34b8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b7543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8f23e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae0000c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910a3193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b884057aeb68f3d675a79907a72ace70902459f6950a06a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68fe6b7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f8ce659e340c714809ec4d060bb1c9cfcde57b79625e2979fe689a5a246cbbd488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546308a0004be94dfab28c2a51dc816df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d044fa492aa38717481455e86dcd7816ad8940bd192595369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d4f17a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b94952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d830e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000000000000000000000000000000044ff72f96f084f4b6cdcb1b4a9d8e9f99f1b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded5027a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b092b70f77f0f428d2000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634009aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3f19f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f9863800f127d6b4518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c104fe52837a19006952fe2724c0105ab158a54a6a73000000000000000000000000b0d135da438cbe303f3ae070def97d6649b5a693ff5c788e5a406e1d06942ed51bff073011f6e6c29d3ea22e5fc26c7fbe37656229a6a12857ae9ed131ccdd513066bc9422ec38a1dc5212986d9bc330a23eb3b200af1a3678c2bfbe4b4ba6e8471495f6e82c5ee425973c590253e875352a3acaee044868f9b80f8fdc9d402007bb4c8df1b69d3d2b364ec9e4ed2f554118684eff1adf5b49b6b29232198e682dfa45dced8b332c40dc37dfe7a59e252ddc33ea9072dcd697a700cfac90b487660795f564ddb61fa3e4835f936984200000000000000000008e9f7bc3a00cd72ced7684e264e45398f7087734fcf2023a7a4c880f562f46f14cdc1bf472d74bc0c777b1021ff75de086c08f72a41399d3a3065b2f50a531cc90edbf88370ff50ba1aa6cc59076165a3ab90a3c90527b7c9711cf85bbb0cb0aebc47ab5c65458c40020f2cfb10e5f0a1594ae491e8756446e6873a8b222ae7e58dd7640666e359fc583e17ed6bcb30c0fafbba761e756ca80286d38bb92dd9ba17c1bb628e5b8d52c9a02a67f788ab88dca817cb4886942a279e06f45c8c936f5c46e1a2b4097471ca0ee26bcfabf7adb9c90a10539d960dec5c84464f6bc68318e7e899acf20ea41b071132d7a5945e941334855ce6149deaae1b5b83045e83bfc208079e6e58ebb4176b126c743111c5a712f465a3007d665ac21c43a544947c9d13e5206a21025f6acd47c2d333e648dcbf2e4989a1d4a176fe8f7a8cf0aeaf9736118b036639cb35810ea88213ff2a0842d420d418d026a101222a4ebd18fc89f04b5a9056ca6c00308936679474fa83bdf6eac126c9be33c551bccd42d8000736ed9a64ff7cb87d44c9bcf821c96dcd34aadfcc42fabd5976cedc9a4eef24764168056d0645c7aa007d69df4fa8de1224a56f0799ad59ee5c8441866b42293c513ef7f"], &(0x7f0000000140)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='p\x00\x00\x000\x00;'], 0x70}}, 0x4800)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='reno\x00', 0x5)
setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000000), 0x4)
bind$inet(r2, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000007140)={'batadv_slave_1\x00', <r3=>0x0})
recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc={0x27, <r4=>0x0}, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x200116c0}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
setsockopt$inet_tcp_int(r2, 0x6, 0x12, &(0x7f0000000300)=0x4, 0x4)
write$binfmt_elf64(r2, &(0x7f0000000a00)=ANY=[@ANYRES32, @ANYBLOB="4392c9d2eb9b977d238e51b11fd0c0a6baef72102b9a03b005e93789f83bacc0b5f3fd1ae105134de45d4caeda3b2fd383c501a61fd830ec66dadb4e11f4b40a344868fcea5d536ede849a69b6b0aa5b35904efbf220a4241d79595c06c2e2c8e70871b41294a3b5dd15080100ec3fe7d0cbfd1774516d043f783cb6a2090400641095cb734d3c53305bf8fe8a17524570ce1b62efa4bbf999b6af5c4ab8209ed5d0131ba372", @ANYRES8=r4, @ANYRES64=r3], 0x100000530)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, <r5=>0x0}, 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xf22}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0xa}]}, &(0x7f00000001c0)='GPL\x00', 0x7, 0xb7, &(0x7f0000000200)=""/183, 0x0, 0x41, '\x00', r3, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x5, 0x8, 0x6}, 0x10, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90)

16:47:35 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents64(r2, 0x0, 0x200000000000000)
syz_fuse_handle_req(r2, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000009800)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)={0x10}, 0x0, 0x0, 0x0})

[ 1030.957302][T19973] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1031.005750][T19976] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.2'.
16:47:36 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents64(r2, 0x0, 0x200000000000000)
syz_fuse_handle_req(r2, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000009800)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)={0x10}, 0x0, 0x0, 0x0})

16:47:37 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x70, &(0x7f0000000040)={0x1, 0x5, 0x0, 0xb745, {0x28, 0x3, 0x10001, 0x3, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x5, 0x4]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:47:37 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:47:38 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents64(r2, 0x0, 0x200000000000000)
syz_fuse_handle_req(r2, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000009800)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)={0x10}, 0x0, 0x0, 0x0})

16:47:38 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x70, &(0x7f0000000040)={0x1, 0x5, 0x800, 0x0, {0x28, 0x3, 0x10001, 0x3, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x5, 0x4]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:47:38 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="15000000feffff018000003950"], 0x15)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}})

16:47:39 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0x12)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
write$binfmt_script(r2, &(0x7f0000000340)={'#! ', './file0'}, 0xb)

16:47:39 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:47:39 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x4}]}}}}})

16:47:39 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0x12)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
write$binfmt_script(r2, &(0x7f0000000340)={'#! ', './file0'}, 0xb)

16:47:39 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents64(r2, 0x0, 0x200000000000000)
syz_fuse_handle_req(r2, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000009800)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)={0x10}, 0x0, 0x0, 0x0})

16:47:40 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0x12)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
write$binfmt_script(r2, &(0x7f0000000340)={'#! ', './file0'}, 0xb)

16:47:40 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x70, &(0x7f0000000040)={0x1, 0x5, 0x800, 0x0, {0x28, 0x3, 0x10001, 0x3, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x5, 0x4]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:47:40 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}, 0x7}, 0x0)

16:47:40 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:47:40 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0x12)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
write$binfmt_script(r2, &(0x7f0000000340)={'#! ', './file0'}, 0xb)

16:47:40 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8}, @IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x44}, 0x1, 0x2}, 0x0)

16:47:40 executing program 4:
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup, 0xffffffffffffffff, 0x5, 0x30, 0x0, @link_id}, 0x20)

16:47:41 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="80010000070a05000000000000000000070000070900010073797a3100000000600104800c"], 0x180}}, 0x0)

16:47:41 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0x12)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
write$binfmt_script(r2, &(0x7f0000000340)={'#! ', './file0'}, 0xb)

[ 1036.441111][T20037] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
16:47:41 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x70, &(0x7f0000000040)={0x1, 0x5, 0x800, 0x0, {0x28, 0x3, 0x10001, 0x3, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x5, 0x4]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:47:41 executing program 4:
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'virt_wifi0\x00'}, 0x18)

16:47:41 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0)

16:47:42 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xfecc)

16:47:42 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:47:42 executing program 1:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000080)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}})

[ 1037.213318][T20050] IPVS: Error connecting to the multicast addr
[ 1037.305181][   T28] audit: type=1400 audit(1708706862.435:470): avc:  denied  { ioctl } for  pid=20052 comm="syz-executor.1" path="socket:[57994]" dev="sockfs" ino=57994 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
16:47:42 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfecc)

16:47:42 executing program 1:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000080)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}})

16:47:42 executing program 4:
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'virt_wifi0\x00'}, 0x18)

16:47:42 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfecc)

16:47:42 executing program 1:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000080)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}})

[ 1037.986632][T20064] IPVS: Error connecting to the multicast addr
16:47:43 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x70, &(0x7f0000000040)={0x1, 0x5, 0x800, 0xb745, {0x0, 0x3, 0x10001, 0x3, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x5, 0x4]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:47:43 executing program 1:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000080)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}})

16:47:43 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfecc)

16:47:43 executing program 4:
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'virt_wifi0\x00'}, 0x18)

16:47:43 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:47:43 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xfecc)

16:47:43 executing program 1:
ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}})

[ 1038.709811][T20075] IPVS: Error connecting to the multicast addr
16:47:44 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="54ba609af7f0"}]}, 0x28}}, 0x0)

16:47:44 executing program 1:
ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}})

16:47:44 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xfecc)

16:47:44 executing program 1:
ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}})

16:47:44 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xfecc)

16:47:44 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x70, &(0x7f0000000040)={0x1, 0x5, 0x800, 0xb745, {0x0, 0x3, 0x10001, 0x3, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x5, 0x4]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:47:44 executing program 1:
r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0)
ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000080)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}})

16:47:44 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000006)

16:47:45 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xfecc)

16:47:45 executing program 1:
r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0)
ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000080)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}})

16:47:45 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:47:45 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xfecc)

16:47:45 executing program 1:
r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0)
ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000080)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}})

16:47:45 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000080)={0x14, 0x3, 0x2, 0xcff}, 0x14}}, 0x0)

16:47:45 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xfecc)

16:47:45 executing program 1:
syz_init_net_socket$ax25(0x3, 0x5, 0x0)
ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}})

16:47:46 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfecc)

16:47:46 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x70, &(0x7f0000000040)={0x1, 0x5, 0x800, 0xb745, {0x0, 0x3, 0x10001, 0x3, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x5, 0x4]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:47:46 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000480)={0xc0, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x90, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5}]}]}, 0xc0}}, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="0c030000", @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf250a000000e0"], 0x30c}}, 0x0)

16:47:46 executing program 1:
syz_init_net_socket$ax25(0x3, 0x5, 0x0)
ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}})

16:47:46 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfecc)

16:47:46 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:47:46 executing program 1:
syz_init_net_socket$ax25(0x3, 0x5, 0x0)
ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}})

[ 1041.678597][T20124] netlink: 524 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1041.775007][T20124] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
16:47:46 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfecc)

16:47:47 executing program 1:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0)

16:47:47 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001000000000000000000ac141400000000000000000000000000e000000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)

16:47:47 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r0, 0x0, 0xfecc)

16:47:47 executing program 1:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0)

16:47:47 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r0, 0x0, 0xfecc)

[ 1042.469687][T20141] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'.
16:47:47 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x70, &(0x7f0000000040)={0x1, 0x5, 0x800, 0xb745, {0x28, 0x0, 0x10001, 0x3, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x5, 0x4]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:47:47 executing program 1:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0)

16:47:48 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x180}}, 0x0)

16:47:48 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r0, 0x0, 0xfecc)

16:47:48 executing program 1:
setresuid(0xee00, 0xee00, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)

16:47:48 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:47:48 executing program 1:
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$incfs_id(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1)

[ 1043.318818][T20156] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
16:47:48 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140))

16:47:48 executing program 4:
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(&(0x7f00000006c0)=ANY=[], &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x800010, 0x0)

16:47:48 executing program 1:
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/dmi', 0x62800, 0x14a)

16:47:48 executing program 2:
syz_mount_image$fuse(0x0, &(0x7f0000000900)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='./file0\x00', 0x0, 0x2189040, &(0x7f0000000b80))

16:47:49 executing program 1:
syz_mount_image$fuse(0x0, &(0x7f0000000900)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='./file0\x00', 0x0, 0x2189000, 0x0)
mount$9p_unix(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x100000, &(0x7f0000000100)=ANY=[])

16:47:49 executing program 2:
syz_mount_image$fuse(0x0, &(0x7f0000000900)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='./file0\x00', 0x0, 0x2189040, &(0x7f0000000b80))

16:47:49 executing program 4:
syz_mount_image$fuse(0x0, &(0x7f0000000900)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='./file0\x00', 0x0, 0x2189040, 0x0)
mount(&(0x7f0000000000)=@sr0, &(0x7f0000000040)='./file0\x00', 0x0, 0x100000, 0x0)

16:47:49 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x70, &(0x7f0000000040)={0x1, 0x5, 0x800, 0xb745, {0x28, 0x0, 0x10001, 0x3, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x5, 0x4]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:47:49 executing program 1:
setresuid(0xee00, 0xee00, 0x0)
semget(0x1, 0x0, 0x206)

16:47:49 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:47:49 executing program 2:
syz_mount_image$fuse(0x0, &(0x7f0000000900)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='./file0\x00', 0x0, 0x2189040, &(0x7f0000000b80))

16:47:50 executing program 1:
setresuid(0xee00, 0xee00, 0x0)
semget(0x1, 0x0, 0x206)

16:47:50 executing program 4:
syz_mount_image$fuse(0x0, &(0x7f0000000900)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='./file0\x00', 0x0, 0x2189000, 0x0)
mount$9p_unix(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x2080002, 0x0)

16:47:50 executing program 2:
syz_mount_image$fuse(0x0, &(0x7f0000000900)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='./file0\x00', 0x0, 0x2189040, &(0x7f0000000b80))

16:47:50 executing program 1:
setresuid(0xee00, 0xee00, 0x0)
semget(0x1, 0x0, 0x206)

16:47:50 executing program 2:
syz_mount_image$fuse(0x0, &(0x7f0000000900)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='./file0\x00', 0x0, 0x2189000, 0x0)
mount$9p_unix(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000380), 0x280003, 0x0)

16:47:50 executing program 1:
setresuid(0xee00, 0xee00, 0x0)
semget(0x1, 0x0, 0x206)

16:47:50 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x70, &(0x7f0000000040)={0x1, 0x5, 0x800, 0xb745, {0x28, 0x0, 0x10001, 0x3, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x5, 0x4]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:47:51 executing program 4:
syz_mount_image$fuse(0x0, &(0x7f0000000900)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='./file0\x00', 0x0, 0x2189000, 0x0)
mount$9p_unix(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x2080002, 0x0)

16:47:51 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000001100), 0x4)

16:47:51 executing program 2:
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x2)

16:47:51 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:47:51 executing program 1:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001240)='/sys/devices/system', 0x0, 0x0)
fchdir(r0)
symlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00')

16:47:51 executing program 2:
syz_mount_image$fuse(0x0, &(0x7f0000000900)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='./file0\x00', 0x0, 0x2189040, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='binder\x00', 0x100000, 0x0)

16:47:51 executing program 1:
r0 = syz_io_uring_setup(0xc3d, &(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000480))
io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0x1a, 0x0, 0x0)

16:47:51 executing program 4:
syz_mount_image$fuse(0x0, &(0x7f0000000900)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='./file0\x00', 0x0, 0x2189000, 0x0)
mount$9p_unix(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x2080002, 0x0)

16:47:51 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x15, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}, 0x90)

16:47:52 executing program 1:
bpf$BPF_PROG_QUERY(0x1e, &(0x7f0000000740)={@map=0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

16:47:52 executing program 2:
bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000740)={@map=0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

16:47:52 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x70, &(0x7f0000000040)={0x1, 0x5, 0x800, 0xb745, {0x28, 0x3, 0x0, 0x3, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x5, 0x4]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:47:52 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, r1, 0x201, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0)

16:47:52 executing program 4:
syz_mount_image$fuse(0x0, &(0x7f0000000900)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='./file0\x00', 0x0, 0x2189000, 0x0)
mount$9p_unix(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x2080002, 0x0)

16:47:52 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @local, @local}}}})

16:47:52 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], 0x0, 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:47:53 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000000)=""/189)

16:47:53 executing program 2:
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)

16:47:53 executing program 1:
r0 = socket(0x1, 0x80805, 0x0)
accept4$netrom(r0, 0x0, 0x0, 0x0)

16:47:53 executing program 2:
bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000740)={@map=0x1, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

16:47:53 executing program 1:
bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000740)={@map=0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

16:47:53 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000940)={0x14}, 0x14}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100))
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000940)={0x60, 0x0, 0x533, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x60}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="330500000000000000000100000008000100", @ANYRES32, @ANYBLOB="04000280"], 0x20}}, 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff)

16:47:53 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000002b00))

16:47:53 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x70, &(0x7f0000000040)={0x1, 0x5, 0x800, 0xb745, {0x28, 0x3, 0x0, 0x3, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x5, 0x4]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:47:54 executing program 1:
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@map=0x1, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

16:47:54 executing program 2:
syz_open_dev$sndpcmc(&(0x7f0000000100), 0x8, 0x40)

16:47:54 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000f80)={0x1, &(0x7f0000000f00)=[{0x2, 0x0, 0x0, 0x101}]})

16:47:54 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], 0x0, 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:47:54 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x1c, r1, 0xe66ec05dcbbffac3, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0)

16:47:54 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x60, r1, 0x1, 0x0, 0x0, {}, [{@pci={{0x4}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x60}}, 0x0)

16:47:54 executing program 1:
r0 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt(r0, 0x0, 0x0, 0x0, 0x0)

16:47:54 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x9)
bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc)

16:47:55 executing program 1:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=@framed, &(0x7f0000000780)='syzkaller\x00', 0x2}, 0x90)

[ 1050.067735][   T28] audit: type=1400 audit(1708706875.185:471): avc:  denied  { audit_read } for  pid=20273 comm="syz-executor.2" capability=37  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
16:47:55 executing program 4:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
connect$l2tp6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @private2}, 0x20)

16:47:55 executing program 2:
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYBLOB="2c7379735f696d6d757461626c652c6e6f646f74732c6e66732c646f74732c6e6f646f74732c6e6f646f74732c73686f77657865632c74696d655f6f66667365743d3078303030303030303030303030303138322c646f733178666c6f7070792c646973636172642c6572726f72733d72656d6f756e742d726f2c6e6f646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c74696d655f6f66667365743d3078303030303030303030303030303539642c646f74732c74696d655f6f66667365743d3078303030303030303030303030303132392c646f74732c6f626a5f726f6c653d0dd98ad04ab096f2b37578ff7dae0f39822bc956778891be6e2c54a70ea737852c666f776e65723d", @ANYRESDEC=0x0, @ANYBLOB="2c7365636c6162656c2c666b757569643d32663861396258392d563930322d046636342d653232372d6224337bd2e8dbe0a2a1f762303262374c312ce46f6e745f"], 0xff, 0x19a, &(0x7f0000000b00)="$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")

16:47:55 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x70, &(0x7f0000000040)={0x1, 0x5, 0x800, 0xb745, {0x28, 0x3, 0x0, 0x3, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x5, 0x4]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:47:55 executing program 1:
add_key$fscrypt_v1(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0)

[ 1050.502769][T20279] loop2: detected capacity change from 0 to 256
16:47:55 executing program 1:
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, r0)
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000b80)={&(0x7f0000000a00)=[0x0, 0x0], 0x2})
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000e40), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000fc0)={0x0, &(0x7f0000000ec0), &(0x7f0000000f40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x7})
bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@base={0x15, 0x5ebb, 0x1}, 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000014c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001840)={0x6, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000001380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90)

16:47:55 executing program 2:
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getpeername$l2tp6(r0, 0x0, 0x0)

16:47:55 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], 0x0, 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:47:56 executing program 4:
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_ENTRY(r0, &(0x7f0000004280)={0x90, 0x0, r1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x90)

[ 1050.922618][T19234] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
16:47:56 executing program 1:
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48)

16:47:56 executing program 2:
socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x10, 0x70bd2a, 0x4}, 0x14}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000700)={0x5, &(0x7f00000006c0)=[{0xff43, 0x0, 0x1, 0x800}, {}, {0x5, 0x2, 0x20, 0x6}, {0x80}, {0xbb8, 0x7f, 0x1f}]})

16:47:56 executing program 1:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f00000000c0)={0x2, 0x4e21, @dev}, 0x10)

16:47:56 executing program 4:
add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc4}, 0x0, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x0)

16:47:56 executing program 2:
syz_io_uring_setup(0xa22, &(0x7f0000000c40), 0x0, 0x0)

16:47:56 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x70, &(0x7f0000000040)={0x1, 0x5, 0x800, 0xb745, {0x28, 0x3, 0x10001, 0x0, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x5, 0x4]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:47:57 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$inet(r0, &(0x7f00000012c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="84", 0x1}], 0x1}}], 0x1, 0x0)

16:47:57 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x60, r1, 0x1, 0x0, 0x0, {0x22}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x60}}, 0x0)

16:47:57 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0)}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:47:57 executing program 4:
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
shmctl$IPC_RMID(r0, 0x0)

16:47:57 executing program 2:
r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb)
r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000600)={'syz', 0x0}, 0x0, 0x0, r0)
add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000340)={0x0, "b98136f52ffc29d11ab97cebd3c9159c735ba60ca245912d06a30f4abd5b7bf3bcd291aab9e5f6d5d6b8583b78daefc1780c1af6706b9848f12459a3161ef1c5"}, 0x48, 0xffffffffffffffff)
add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, r1)

16:47:57 executing program 1:
getgroups(0x2, &(0x7f0000000840)=[0xffffffffffffffff, 0xffffffffffffffff])

16:47:57 executing program 2:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f000000ef40), 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000000bc0)="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", 0x2000, &(0x7f0000006c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
read$FUSE(r0, &(0x7f0000002bc0)={0x2020}, 0x2020)

16:47:57 executing program 1:
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x3, 0x6, 0x804, 0xaf, 0x80, 0x5, 0x4804}, 0x0, &(0x7f0000000100)={0x0, r0+10000000}, &(0x7f0000000180)={0x0})

16:47:58 executing program 4:
syz_io_uring_setup(0xa22, &(0x7f0000000c40)={0x0, 0x0, 0x20}, &(0x7f0000000cc0), &(0x7f0000000d00))

16:47:58 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, 0x0)

16:47:58 executing program 1:
setitimer(0x0, 0x0, &(0x7f0000000800))

16:47:58 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x70, &(0x7f0000000040)={0x1, 0x5, 0x800, 0xb745, {0x28, 0x3, 0x10001, 0x0, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x5, 0x4]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

[ 1053.365363][T20330] syz-executor.1 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
16:47:58 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
bind$isdn_base(r0, 0x0, 0x0)

16:47:58 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8933, &(0x7f0000000000)={0x0, 'virt_wifi0\x00'})

16:47:58 executing program 1:
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc1}, &(0x7f00000000c0)={0x0, "842d26cc04a6ca0536da8dfcfe42834f5664879750b0d4023b12c57e3a71efbad1b6599ee1a10b404cfa929d80979e698094371b84953690e4f597a1c8180360"}, 0x48, 0xfffffffffffffffb)

16:47:58 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0)}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:47:59 executing program 1:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10)

16:47:59 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000480)=[{0x0, 0x2c8}], 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1002"], 0x10}, 0x0)

16:47:59 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}}, 0x0)

16:47:59 executing program 1:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
connect$l2tp6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @private2}, 0x20)

16:47:59 executing program 1:
openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x12042, 0x0)

16:47:59 executing program 2:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000000})

[ 1054.943816][ T1233] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.962291][ T1233] ieee802154 phy1 wpan1: encryption failed: -22
16:48:00 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x2}, 0x0)

16:48:00 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x15)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000001040)={0x14}, 0x14}}, 0x0)

16:48:00 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x70, &(0x7f0000000040)={0x1, 0x5, 0x800, 0xb745, {0x28, 0x3, 0x10001, 0x0, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x5, 0x4]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:48:00 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x3f, 0x4)

16:48:00 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0)}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:48:00 executing program 2:
syz_clone(0x40081200, &(0x7f0000000440), 0x0, &(0x7f0000000200), &(0x7f0000000540), &(0x7f0000000580)="14bdb9d8283eda0b0b52b6c3d07b00b7d33f626549909e4326e7e48256a7517618205c603fb1cb3bc0eae23e690e283d57b5250af3e513bfea6d31d08e571f28696ac7a7da3526913bebee36c2e6a16034167ca18eaee645accecd70209adbdabc5fea02aa4a13aec6eafc7653a7a18f87048384b7b34e7a58d78f7812751ea540a51e50f0e13874a9e687f2d3d4b04856d7caebb0990784e42db7fe08f366b592662687b154a7fd532269e0442ae8f8f6ff602c6d4f1c9f931d8b58b6bff3df3d0fa1670f5c7d79b6b7eef390dd9a7c766e0dc243")

16:48:00 executing program 1:
add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000180)="039579ceb298660166a06e737c854c2c5608d51e3a138aca93665338884317accb0d5df97980bb31de0ed3c5", 0x2c, 0xfffffffffffffffd)

16:48:00 executing program 4:
add_key(&(0x7f00000001c0)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)

16:48:00 executing program 1:
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24)

[ 1055.988566][   T28] audit: type=1400 audit(1708706881.115:472): avc:  denied  { bind } for  pid=20377 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1056.030056][T20374] lo speed is unknown, defaulting to 1000
16:48:01 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'veth1_macvtap\x00'})

16:48:01 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x70, &(0x7f0000000040)={0x1, 0x5, 0x800, 0xb745, {0x28, 0x3, 0x10001, 0x3}, [0xfffffffffffffff9, 0x7, 0x7, 0x5, 0x4]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:48:01 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2f000000bd4277"], 0x30}}, 0x0)

16:48:01 executing program 1:
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
getsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0)

16:48:01 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:48:02 executing program 1:
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000100)={0x18}, 0x18)

16:48:02 executing program 4:
openat$drirender128(0xffffffffffffff9c, &(0x7f0000001a80), 0x40000, 0x0)

16:48:02 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:48:02 executing program 1:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockname$l2tp6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000180)=0x20)

16:48:02 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt(r0, 0x0, 0x8, &(0x7f000000eec0)="d4", 0x1)

16:48:03 executing program 1:
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(0x0, r0)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x14, r1}, 0x14}}, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000b80)={&(0x7f0000000a00)=[0x0, 0x0], 0x2})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000e40), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000fc0)={0x0, &(0x7f0000000ec0), &(0x7f0000000f40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8})
bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@base={0x15, 0x5ebb, 0x1}, 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000014c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001840)={0x6, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000001380)='GPL\x00', 0x0, 0x84, &(0x7f00000013c0)=""/132, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90)

16:48:03 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:48:03 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x70, &(0x7f0000000040)={0x1, 0x5, 0x800, 0xb745, {0x28, 0x3, 0x10001, 0x3}, [0xfffffffffffffff9, 0x7, 0x7, 0x5, 0x4]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:48:03 executing program 4:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f000000ef40), 0x0, 0x0)
read$FUSE(r0, 0x0, 0x0)

16:48:03 executing program 1:
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(0x0, r0)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x14, r1}, 0x14}}, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000b80)={&(0x7f0000000a00)=[0x0, 0x0], 0x2})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000e40), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000fc0)={0x0, &(0x7f0000000ec0), &(0x7f0000000f40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8})
bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@base={0x15, 0x5ebb, 0x1}, 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000014c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001840)={0x6, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000001380)='GPL\x00', 0x0, 0x84, &(0x7f00000013c0)=""/132, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90)

16:48:03 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:48:03 executing program 4:
r0 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000340)={0x0, "b98136f52ffc29d11ab97cebd3c9159c735ba60ca245912d06a30f4abd5b7bf3bcd291aab9e5f6d5d6b8583b78daefc1780c1af6706b9848f12459a3161ef1c5"}, 0x48, 0xffffffffffffffff)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)='[.]@-}&&@#\x00')

16:48:03 executing program 1:
shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000000)=""/99)

16:48:04 executing program 1:
keyctl$KEYCTL_MOVE(0x16, 0x0, 0x0, 0x0, 0x0)

16:48:04 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:48:04 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'syzkaller0\x00'})

16:48:04 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x70, &(0x7f0000000040)={0x1, 0x5, 0x800, 0xb745, {0x28, 0x3, 0x10001, 0x3}, [0xfffffffffffffff9, 0x7, 0x7, 0x5, 0x4]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:48:04 executing program 1:
socket$rds(0x15, 0x5, 0x0)
pselect6(0x40, &(0x7f0000000a00), &(0x7f0000000a40)={0x9}, 0x0, &(0x7f0000000ac0), &(0x7f0000000b40)={&(0x7f0000000b00)={[0x8]}, 0x8})

16:48:04 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x28}, 0x0)

16:48:04 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:48:05 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x11, 0x0, 0x0, 0x7fff, 0x0, 0x1}, 0x48)

16:48:05 executing program 1:
socket$isdn(0x22, 0x3, 0x6)

16:48:05 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x3}]})

16:48:09 executing program 2:
syz_io_uring_setup(0x4813, &(0x7f00000051c0)={0x0, 0x0, 0x1000}, &(0x7f0000005240), &(0x7f0000005280))

16:48:09 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:48:09 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x68, &(0x7f0000000040)={0x1, 0x4, 0x800, 0xb745, {0x28, 0x3, 0x10001, 0x3, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x5]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:48:09 executing program 1:
add_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)

16:48:09 executing program 4:
keyctl$KEYCTL_MOVE(0x1c, 0x0, 0x0, 0x0, 0x0)

16:48:09 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$netlink(r0, &(0x7f0000004600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004500)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x40}, 0x0)

16:48:10 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000600), 0x0, 0x210000)

16:48:10 executing program 4:
keyctl$KEYCTL_MOVE(0x1c, 0x0, 0x0, 0x0, 0x0)

16:48:10 executing program 1:
syz_io_uring_setup(0xa22, &(0x7f0000000c40)={0x0, 0x0, 0x20}, 0x0, 0x0)

16:48:10 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:48:10 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}}, 0x0)

16:48:10 executing program 1:
socketpair(0x18, 0x0, 0x1, &(0x7f0000000080))

[ 1065.730363][T20480] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
16:48:10 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x68, &(0x7f0000000040)={0x1, 0x4, 0x800, 0xb745, {0x28, 0x3, 0x10001, 0x3, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x5]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

[ 1065.774083][T20480] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
16:48:10 executing program 4:
keyctl$KEYCTL_MOVE(0x1c, 0x0, 0x0, 0x0, 0x0)

16:48:11 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000d40)={0x1, &(0x7f0000000d00)=[{0x3}]})

16:48:11 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:48:11 executing program 1:
r0 = add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xfffffffffffffffb)
r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000600)={'syz', 0x0}, 0x0, 0x0, r0)
add_key$keyring(&(0x7f0000000300), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000340)={0x0, "b98136f52ffc29d11ab97cebd3c9159c735ba60ca245912d06a30f4abd5b7bf3bcd291aab9e5f6d5d6b8583b78daefc1780c1af6706b9848f12459a3161ef1c5"}, 0x48, 0xffffffffffffffff)
request_key(&(0x7f0000000440)='id_resolver\x00', &(0x7f0000000480)={'syz', 0x2}, &(0x7f00000004c0)='trusted\x00', 0x0)

16:48:11 executing program 4:
r0 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt(r0, 0x0, 0x81, &(0x7f0000000000), 0x0)

16:48:11 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}}, 0x0)

16:48:11 executing program 1:
openat$incfs(0xffffffffffffffff, &(0x7f00000006c0)='.log\x00', 0x0, 0x0)

16:48:12 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

[ 1066.874893][T20500] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 1066.982601][T20500] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
16:48:12 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x2)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000000c0)=0x1f, 0x4)

16:48:12 executing program 4:
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

16:48:12 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x68, &(0x7f0000000040)={0x1, 0x4, 0x800, 0xb745, {0x28, 0x3, 0x10001, 0x3, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x5]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:48:12 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000000c0)=0x1b, 0x4)

16:48:12 executing program 1:
io_uring_setup(0x56be, &(0x7f0000006f80)={0x0, 0x0, 0x8})

16:48:13 executing program 4:
r0 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000340)={0x0, "b98136f52ffc29d11ab97cebd3c9159c735ba60ca245912d06a30f4abd5b7bf3bcd291aab9e5f6d5d6b8583b78daefc1780c1af6706b9848f12459a3161ef1c5"}, 0x48, 0xffffffffffffffff)
keyctl$search(0xa, r0, &(0x7f0000000340)='id_legacy\x00', &(0x7f0000000640)={'syz', 0x2}, 0x0)

16:48:13 executing program 2:
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100), 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x0, 0xffffffffffffffff}, 0x10)

16:48:13 executing program 1:
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, r0)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x14, 0x0, 0x0, 0x70bd2a}, 0x14}}, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000e40), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000fc0)={0x0, &(0x7f0000000ec0), &(0x7f0000000f40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x5})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000001040), 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@base={0x15, 0x5ebb, 0x1}, 0x48)

16:48:13 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x20)

16:48:13 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:48:13 executing program 2:
r0 = getpgid(0x0)
sched_rr_get_interval(r0, &(0x7f0000000000))
statx(0xffffffffffffffff, 0x0, 0x6000, 0x20, 0x0)
statx(0xffffffffffffffff, &(0x7f0000006c80)='./file0\x00', 0x6000, 0x200, &(0x7f0000006cc0))
statx(0xffffffffffffff9c, 0x0, 0x800, 0x7ff, &(0x7f0000006e00))
syz_io_uring_setup(0x5a3f, &(0x7f0000007600)={0x0, 0x5136, 0x2, 0x1}, &(0x7f0000007680), &(0x7f00000076c0))

16:48:13 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000016b0eb1f"], 0x30}}, 0x0)

16:48:13 executing program 1:
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x12000, 0x0)

16:48:14 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x70, &(0x7f0000000040)={0x1, 0x5, 0x800, 0xb745, {0x28, 0x3, 0x10001, 0x3, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x5, 0x0]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:48:14 executing program 1:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0xf, &(0x7f0000000980)=@ringbuf, &(0x7f0000000a00)='GPL\x00'}, 0x90)

16:48:14 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x60e2e}}, 0x20}}, 0x0)
syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0)

[ 1069.178912][T20536] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'.
16:48:14 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8982, 0x0)

[ 1069.468010][T20540] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode
16:48:14 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0)
write$rfkill(r0, 0x0, 0x0)

16:48:14 executing program 4:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f000000ef40), 0x0, 0x0)
accept(r0, 0x0, 0x0)

16:48:14 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x60e2e}}, 0x20}}, 0x0)
syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0)

16:48:15 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:48:15 executing program 1:
add_key$keyring(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0)
r0 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000000))

16:48:15 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x70, &(0x7f0000000040)={0x1, 0x5, 0x800, 0xb745, {0x28, 0x3, 0x10001, 0x3, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x5, 0x0]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:48:15 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @remote, 0x7800}})

16:48:15 executing program 4:
pselect6(0x0, 0x0, 0x0, &(0x7f0000000c40), &(0x7f0000000c80)={0x0, 0x989680}, &(0x7f0000000d00)={&(0x7f0000000cc0)={[0x8]}, 0x8})

16:48:15 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r1, 0x4cea2c356b55bbaf, 0x0, 0x0, {{}, {@val={0x8}, @void, @val={0xc}}}}, 0x28}}, 0x0)

16:48:15 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$netlink(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f00000036c0)=[{&(0x7f0000000580)={0x3b0, 0x0, 0x0, 0x0, 0x0, "", [@generic="7c4eb1298e", @nested={0x14, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @fd}]}, @nested={0x381, 0x0, 0x0, 0x1, [@generic="0c11753deb177d8c563c07f46dc8c2a78e83385ad119598a95e6dc4682df5fa889a67617aba8a583c7b590071330982a30f3483e589a46993d762f92d02c83512beef3e11a287177aba9e7aca3a4036467a0d9c9044f0f251ce89527983e48e9c5976fd6a2e5d5d2e242ccff83b050fd2359a494a9661843ca3b63bca72c5910bde9aab1fe3ae3e68de3d8e08cb7c692f50e", @generic="a80ef4c4b190804a1a9582633472980a3874360848d406fa84ee198c197e545e727f1ed1fb702625a5b768879d8d6d5a02721c39e83ab80867a9621e00af05c9bb3c1c35c9e4084746bbdf2f911aa45dfb5e6eda67f7ff208cb27523286a5ec0bf26fcab6fd441ec85446c0dd7776c11371980de6dfdab3c2476e39ed5b01c87634059584c1b46e8b2cfa9283a5bce6918fe13ac540cb288aa973fcfc825d171e3b839fc1c", @generic="480353ecf9104ab8f7b606c7066c9c4e36da491f0b4d1014744b2ddc0985dc1fa30080327ad0e7c3902de3daf4eaf7a73080b63a64d75bb4a62936fde5e62293f81bc8ae454b5dcd1a99a6fc2f24ed2c63a65a4d16a6fdb31fe8b4e86cbe013c868230dedf421c51acadeb02210af0e91e2f53736a4c3ba308dcfba6b0d56b85e4b43fe01d3e6ec0164bc3ec1fd4675f55c4580821994bd1f14c9026fbfc05df129e96b303748ae3b7dcb3fe28582388ec3cffc84ac2bd8b45757fa5578483a92f829b9ec16271051fd08c7b60ec86daabf035f14c", @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="39dce9e2021d76989b07f2e9c5d29fbd9988c6f62d85e7f86c99f62655be4797b769b9ea29eec6ecc690aa290004b781ba5d944a3fc66d679065df05e79493f4d3f4b783809d88c7498348e70bd8faf3295713cd3d284f427619f4b194692ce1297b62ebd8c73dbc699274572df700721efd0d9c09eef17b73cc7735abcd95f168d1797fdb95a3215b541321ab", @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0xc5, 0x0, 0x0, 0x0, @binary="f51ffb77dcddb9fbc255240864b91cb9b11a95eb86cff45b6d94101886d59efbd77a8567a5f54018a7ac82fa6b5ad1c4bae8e331fddd0743e5f2deaba29fd587fb1a796cc932aa7c10f25095e70d6aba3098c3f4e6ec6935864a8b0db3b3da5fc424c80a42aeff114c60dd36be98b262be07be250105959e6e99971f12ec77632300fb6b0e9b078e9b45752a2d20e9f64446ed69506386cfa60d308665a41133119a1d3d8c12c37fa8520e6b8082806416742eeae41b9ec5a9a800664631051136"}]}]}, 0x3b0}, {&(0x7f0000000980)={0xb14, 0x0, 0x0, 0x0, 0x0, "", [@nested={0x15, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="82ae0c065fd1a0b2ed"]}, @nested={0x4}, @nested={0x90, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x4}, @typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x9, 0x0, 0x0, 0x0, @str='l2tp\x00'}, @typed={0x4d, 0x0, 0x0, 0x0, @binary="4c33a4a75d1a2218c91abab0addad42820cbf889fbf41575f1665f1e6c7871f371faa4f4cf2cfeb86174875d7136dc902a561a75f5c59c1feaaa72736c4637b631c772aa12cc4b91a1"}, @typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @u32}]}, @nested={0xa55, 0x0, 0x0, 0x1, [@generic="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"]}]}, 0xb14}], 0x2}, 0x0)

16:48:16 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x0, 0x0, {0x1d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0)

16:48:16 executing program 1:
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0xfffd, 0x2, 0x10, {0x2, 0x4e24, @local}}, 0x24)

16:48:16 executing program 2:
add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)

16:48:16 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:48:16 executing program 2:
r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb)
r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000600)={'syz', 0x0}, 0x0, 0x0, r0)
add_key$keyring(&(0x7f0000000300), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, r1)
request_key(&(0x7f0000000440)='id_resolver\x00', &(0x7f0000000480)={'syz', 0x2}, &(0x7f00000004c0)='trusted\x00', 0x0)

16:48:16 executing program 1:
socketpair(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={0x0, 0x1008, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="44c2767a6e5c5c7f7b1f1b34f92a894735c148d3efe1b8037621552cd7856c70a9fa9bbd10a8b40eaca6cea83ecf06d529fd4dbb918bfcbb01c387c4566c3b422353599a5f722f370de6db9230d1bdfea42c2af29174cb1d1b420d7b28dcb4aef32583e6cd1c069b16435dfff1627277ffc94b174246092df17430ab3d8658da4fae44324d0e775eac959854a4d015cabae41868495f0a2adcc087771d32b010877793f4c8fd45387fb7d754247cc4ef9b27679ab615ea407b66029658fde566141fb97dbdd0ac66cb17afaa0500000000000000c569e0a3785a94824e70c3596903bc9784a26ed76dc2dd4ab46c0151", @ANYRES16=0x0, @ANYBLOB="03ee7b88e5001200000000000000"], 0x8ec0}, 0x8}, 0x0)

16:48:16 executing program 4:
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x1, 0x3, &(0x7f0000001400)=@framed, 0x0}, 0x90)

16:48:16 executing program 1:
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x63}, 0x90)

16:48:16 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @remote, @dev}})

16:48:17 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x70, &(0x7f0000000040)={0x1, 0x5, 0x800, 0xb745, {0x28, 0x3, 0x10001, 0x3, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x5, 0x0]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:48:17 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:48:17 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0)
read$rfkill(r0, 0x0, 0x0)

16:48:17 executing program 2:
add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000280)="b6", 0x1, 0xfffffffffffffffe)

16:48:17 executing program 4:
r0 = add_key$keyring(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0)
request_key(&(0x7f0000000240)='ceph\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)='\x00', r0)

16:48:17 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0)
read$rfkill(r0, 0x0, 0x0)

16:48:17 executing program 2:
request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0xfffffffffffffffe)

16:48:17 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:48:17 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0)
read$rfkill(r0, 0x0, 0x0)

16:48:18 executing program 2:
syz_open_dev$dri(&(0x7f0000000040), 0xbe1, 0x0)

16:48:18 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0)
read$rfkill(r0, 0x0, 0x0)

16:48:18 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x68, &(0x7f0000000040)={0x1, 0x4, 0x800, 0xb745, {0x28, 0x3, 0x10001, 0x3, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x4]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:48:18 executing program 4:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000e40), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0x5452, 0x0)

16:48:18 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000e40), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0x4020940d, 0x0)

16:48:18 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:48:18 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x0, 0x0, {0xf}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0)

16:48:18 executing program 1:
read$rfkill(0xffffffffffffffff, 0x0, 0x0)

16:48:19 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000040)='syz_tun\x00')
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'virt_wifi0\x00', {}, 0x4})
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000100)={0x0, 'team_slave_1\x00', {}, 0x101})
setitimer(0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x2710}}, &(0x7f00000000c0))

16:48:19 executing program 1:
read$rfkill(0xffffffffffffffff, 0x0, 0x0)

16:48:19 executing program 4:
add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
syz_clone(0x40081200, &(0x7f0000000440)="fe86fb3d01f3cd82394d9ba2b0a52212ea072a0f8a97326b9f0704039d4a6cf57518e5b1c8d852524766cc04fb16fc2e1e0e041cdfade8f8ca9d6ec56d7a4e86448642b8d59aee14f949e84f8e91b24c0824c278863a652d6d46d760b5d16c5e7c8567217d47f79e407954125c41d6cdcb7f02dab7ff3d40505edd73e7d3af6ee46261f68c383148b718980031cce5ac68f634ed1ce5d393dfd6f750731b134602db31e73605e54950e5f029dcea97f3a7d8f12de9b3ad24cc958bc9fd0eb27cdc3676df6983ca3ff1fa5c58e68639c6368f76b1327ffdb29e7d358afb874423cfb1161006e4e4ad0daf29fc5a", 0xed, &(0x7f0000000200), &(0x7f0000000540), &(0x7f0000000580)="14bdb9d8283eda0b0b52b6c3d07b00b7d33f626549909e4326e7e48256a7517618205c603fb1cb3bc0eae23e690e283d57b5250af3e513bfea6d31d08e571f28696ac7a7da3526913bebee36c2e6a16034167ca18eaee645accecd70209adbdabc5fea02aa4a13aec6eafc7653a7a18f87048384b7b34e7a58d78f7812751ea540a51e50f0e13874a9e687f2d3d4b04856d7caebb0990784e42db7fe08f366b592662687b154a7fd532269e0442ae8f8f6ff602c6d4f1c9f931d8b58b6bff3df3d0fa1670f5c7d79b6b7eef390dd9a7c766e0dc2437b7c97b7afa44c2318c158640317a04b82f4e6b2")

16:48:19 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:48:19 executing program 1:
read$rfkill(0xffffffffffffffff, 0x0, 0x0)

16:48:19 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$rfkill(r0, 0x0, 0x0)

16:48:19 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x68, &(0x7f0000000040)={0x1, 0x4, 0x800, 0xb745, {0x28, 0x3, 0x10001, 0x3, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x4]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:48:19 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:48:19 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000e40), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0})

16:48:20 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$rfkill(r0, 0x0, 0x0)

[ 1075.101733][T20645] lo speed is unknown, defaulting to 1000
16:48:20 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8, 0xb}, @val={0xc}}}}, 0x30}}, 0x0)

16:48:20 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$rfkill(r0, 0x0, 0x0)

16:48:20 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:48:20 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000d40)={0x1, &(0x7f0000000d00)=[{0x3, 0x0, 0x0, 0x7fff}]})

16:48:20 executing program 1:
openat$rfkill(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0)
read$rfkill(0xffffffffffffffff, 0x0, 0x0)

16:48:21 executing program 2:
syz_open_dev$dri(&(0x7f0000000000), 0x56b09393, 0x0)

16:48:21 executing program 1:
openat$rfkill(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0)
read$rfkill(0xffffffffffffffff, 0x0, 0x0)

16:48:21 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:48:21 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x68, &(0x7f0000000040)={0x1, 0x4, 0x800, 0xb745, {0x28, 0x3, 0x10001, 0x3, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x4]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:48:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0)

16:48:21 executing program 1:
openat$rfkill(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0)
read$rfkill(0xffffffffffffffff, 0x0, 0x0)

16:48:21 executing program 2:
syz_io_uring_setup(0x0, &(0x7f0000000c40), &(0x7f0000000cc0), &(0x7f0000000d00))

16:48:21 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000800)={'sit0\x00', &(0x7f00000006c0)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @remote, @private}}}})

16:48:22 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

16:48:22 executing program 2:
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0)

16:48:22 executing program 1:
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x14, r0, 0x1}, 0x14}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r1)

[ 1077.336499][   T29] INFO: task syz-executor.2:19070 blocked for more than 143 seconds.
16:48:22 executing program 2:
r0 = shmget(0x1, 0x1000, 0x200, &(0x7f0000ffe000/0x1000)=nil)
shmctl$IPC_RMID(r0, 0x0)

16:48:22 executing program 1:
openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x783041, 0x0)

[ 1077.381746][   T29]       Not tainted 6.8.0-rc5-syzkaller-00163-gffd2cb6b718e #0
[ 1077.420653][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1077.498399][   T29] task:syz-executor.2  state:D stack:28736 pid:19070 tgid:19069 ppid:5089   flags:0x00000006
16:48:22 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x6, 0x1}, {0xb, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f00000008c0)=""/4096, 0x5d, 0x1000, 0x0, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={<r7=>r5, 0x959400000, 0x17, 0xfff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x3)
r9 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3204}, {}, {r8, 0x2100}, {r9, 0x68}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x1]}, 0xffffffffffffffcd)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x800}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="070002000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000331df9180000000000550901000000000095000000000000001833000004000000000000000000000018640000070000000000000001040000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xb8, 0x0, 0x0, 0x20780, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r8, 0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x80}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={0x0, 0x0, <r12=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x401}, 0x10, r12, r11}, 0x90)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r13, r15, 0x0, 0x8000002b)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe438}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xf, 0x5, 0x0, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x3b, &(0x7f0000000480)=""/59, 0x41100, 0x77988f5dfd4e3d8b, '\x00', r3, 0x2c, r4, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0x10, 0xfffffa23, 0x8001}, 0x10, r12, r0, 0x4, &(0x7f0000001980)=[r1, r1, r15, r1, r1, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x901}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ata_bmdma_status\x00', r0}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c00)=0xe8)
sendmsg$nl_route(r15, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipv6_getroute={0x3c, 0x1a, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x2000}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8, 0x19, r16}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4c801)

[ 1077.566204][   T29] Call Trace:
[ 1077.581341][   T29]  <TASK>
[ 1077.614448][   T29]  __schedule+0xf12/0x5c60
[ 1077.655951][   T29]  ? __pfx___lock_acquire+0x10/0x10
[ 1077.661723][   T29]  ? __pfx___schedule+0x10/0x10
[ 1077.687089][   T29]  ? schedule+0x200/0x280
[ 1077.691983][   T29]  ? __pfx_lock_release+0x10/0x10
16:48:22 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000023180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=<r5=>0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000116e8eca8a11f72b1a69cf00", @ANYRESHEX, @ANYRESOCT=r7], 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES64, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES64, @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6c758530962078639dc062fbbeae93c9", r5, 0x0, {0x3f, 0x4bff}, {0x7f, 0x8}, 0x9, [0x3f, 0x3, 0xc7fd, 0x3e5, 0x1400000, 0x7, 0xffffffff, 0x8, 0xcf, 0x4, 0x7fffffff, 0x6e, 0x8, 0xaa4, 0x1ff, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000005c0)={{}, r5, 0x8, @inherit={0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200000000000000850c000000000000bf00000000000000120000000000000005000000000000002a000000000000000900000000000020d1fe00000000000002000000008126bce280000000000000"]}, @devid=r11})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x10000, {0x28, 0x6, 0x5496, 0x80, 0xe000000000000000}, [0x1f]}}, @devid=r11})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0x0, @inherit={0x70, &(0x7f0000000040)={0x1, 0x5, 0x800, 0xb745, {0x28, 0x3, 0x10001, 0x3, 0x8000000000000000}, [0xfffffffffffffff9, 0x7, 0x7, 0x0, 0x4]}}, @devid=r11})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/148, 0x94}, {0x0}], 0x2)

16:48:22 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})

[ 1077.742513][   T29]  ? __mutex_lock+0x5b8/0x9d0
[ 1077.762376][   T29]  ? __mutex_trylock_common+0x78/0x250
[ 1077.807896][   T29]  schedule+0xe9/0x280
16:48:23 executing program 1:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xf, &(0x7f00000000c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, 0x1}}}, &(0x7f00000004c0)='syzkaller\x00', 0x5, 0x49, &(0x7f00000001c0)=""/73}, 0x90)

[ 1077.861373][   T29]  schedule_preempt_disabled+0x13/0x30
[ 1077.899268][   T29]  __mutex_lock+0x5bd/0x9d0
[ 1077.911418][   T29]  ? blk_trace_ioctl+0xc9/0x290
[ 1077.956238][   T29]  ? __pfx___mutex_lock+0x10/0x10
[ 1077.976272][   T29]  ? do_vfs_ioctl+0x37e/0x1940
[ 1077.981573][   T29]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1078.005685][   T28] audit: type=1326 audit(1708706903.135:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20704 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b6da7dda9 code=0x0
[ 1078.052223][   T29]  ? blk_trace_ioctl+0xc9/0x290
[ 1078.092167][   T29]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 1078.130558][   T29]  blk_trace_ioctl+0xc9/0x290
16:48:23 executing program 1:
syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff)
add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000340)={0x0, "b98136f52ffc29d11ab97cebd3c9159c735ba60ca245912d06a30f4abd5b7bf3bcd291aab9e5f6d5d6b8583b78daefc1780c1af6706b9848f12459a3161ef1c5"}, 0x48, 0xffffffffffffffff)

[ 1078.162488][   T29]  ? __pfx_blk_trace_ioctl+0x10/0x10
[ 1078.166120][   T28] audit: type=1326 audit(1708706903.185:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20704 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7f0b6da7cc9a code=0x0
[ 1078.178260][   T29]  ? __rseq_handle_notify_resume+0x5f2/0x1020
[ 1078.276156][   T29]  blkdev_ioctl+0x111/0x770
[ 1078.281266][   T29]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1078.326312][   T29]  ? selinux_file_ioctl+0xb5/0x280
[ 1078.345504][   T29]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1078.368251][   T29]  __x64_sys_ioctl+0x193/0x220
[ 1078.387131][   T29]  do_syscall_64+0xd5/0x270
[ 1078.394650][   T29]  entry_SYSCALL_64_after_hwframe+0x6f/0x77
[ 1078.430051][   T29] RIP: 0033:0x7f4cc727dda9
[ 1078.458311][   T29] RSP: 002b:00007f4cc80c40c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1078.528748][   T29] RAX: ffffffffffffffda RBX: 00007f4cc73abf80 RCX: 00007f4cc727dda9
[ 1078.572986][   T29] RDX: 0000000020000240 RSI: 00000000c0481273 RDI: 0000000000000003
[ 1078.610334][   T29] RBP: 00007f4cc72ca47a R08: 0000000000000000 R09: 0000000000000000
16:48:23 executing program 1:
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)

[ 1078.641992][   T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1078.681772][   T29] R13: 000000000000000b R14: 00007f4cc73abf80 R15: 00007fffa4100878
[ 1078.739904][   T29]  </TASK>
[ 1078.759454][   T29] 
[ 1078.759454][   T29] Showing all locks held in the system:
[ 1078.839788][   T29] 1 lock held by khungtaskd/29:
[ 1078.883772][   T29]  #0: ffffffff8d7ad2e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340
[ 1078.983548][   T29] 1 lock held by kswapd0/86:
[ 1079.016414][   T29] 2 locks held by getty/4814:
[ 1079.050926][   T29]  #0: ffff88802ae310a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 1079.091124][   T29]  #1: ffffc900015d02f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfca/0x1490
[ 1079.148242][   T29] 4 locks held by syz-fuzzer/5084:
[ 1079.179110][   T29] 1 lock held by syz-executor.1/5091:
[ 1079.185076][   T29] 3 locks held by kworker/0:8/5148:
[ 1079.268453][   T29]  #0: ffff8880b943cc98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130
[ 1079.335637][   T29]  #1: ffff8880b9428a08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2d9/0x900
[ 1079.416031][   T29]  #2: ffff8880b9429958 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x5d/0x200
[ 1079.462698][   T29] 2 locks held by syz-executor.4/19027:
[ 1079.503774][   T29] 1 lock held by syz-executor.2/19070:
[ 1079.538271][   T29]  #0: ffff8880201aaa20 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xc9/0x290
[ 1079.587104][   T29] 3 locks held by kworker/u4:7/19683:
[ 1079.593098][   T29] 2 locks held by syz-executor.4/20645:
[ 1079.645078][   T29] 2 locks held by syz-executor.2/20704:
[ 1079.667101][   T29] 
[ 1079.669714][   T29] =============================================
[ 1079.669714][   T29] 
[ 1079.717853][   T29] NMI backtrace for cpu 1
[ 1079.722232][   T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.8.0-rc5-syzkaller-00163-gffd2cb6b718e #0
[ 1079.732059][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[ 1079.742138][   T29] Call Trace:
[ 1079.745440][   T29]  <TASK>
[ 1079.748386][   T29]  dump_stack_lvl+0xd9/0x1b0
[ 1079.753017][   T29]  nmi_cpu_backtrace+0x27b/0x390
[ 1079.758048][   T29]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1079.764078][   T29]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[ 1079.770094][   T29]  watchdog+0xf87/0x1210
[ 1079.774376][   T29]  ? __pfx_watchdog+0x10/0x10
[ 1079.779088][   T29]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1079.784322][   T29]  ? __kthread_parkme+0x14b/0x220
[ 1079.789374][   T29]  ? __pfx_watchdog+0x10/0x10
[ 1079.794088][   T29]  kthread+0x2c6/0x3b0
[ 1079.798180][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1079.803395][   T29]  ? __pfx_kthread+0x10/0x10
[ 1079.808001][   T29]  ret_from_fork+0x45/0x80
[ 1079.812437][   T29]  ? __pfx_kthread+0x10/0x10
[ 1079.817037][   T29]  ret_from_fork_asm+0x1b/0x30
[ 1079.821839][   T29]  </TASK>
[ 1079.835404][   T29] Sending NMI from CPU 1 to CPUs 0:
[ 1079.841247][    C0] NMI backtrace for cpu 0
[ 1079.841258][    C0] CPU: 0 PID: 86 Comm: kswapd0 Not tainted 6.8.0-rc5-syzkaller-00163-gffd2cb6b718e #0
[ 1079.841282][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[ 1079.841293][    C0] RIP: 0010:lock_release+0x311/0x690
[ 1079.841322][    C0] Code: 03 80 3c 02 00 0f 85 4d 03 00 00 49 8d bf b0 0a 00 00 48 8b 1b 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 <0f> 85 35 03 00 00 41 8d 45 ff 49 89 9f b0 0a 00 00 44 39 e0 74 4f
[ 1079.841342][    C0] RSP: 0018:ffffc900025aee68 EFLAGS: 00000046
[ 1079.841358][    C0] RAX: dffffc0000000000 RBX: afe55e9f1b2367e7 RCX: ffffc900025aeeb8
[ 1079.841372][    C0] RDX: 1ffff11003467156 RSI: ffffe8ffffc1b670 RDI: ffff88801a338ab0
[ 1079.841386][    C0] RBP: 1ffff920004b5dcf R08: 0000000000000000 R09: fffffbfff1f3ab7a
[ 1079.841399][    C0] R10: ffffffff8f9d5bd7 R11: 0000000000000001 R12: 0000000000000001
[ 1079.841411][    C0] R13: 0000000000000002 R14: ffff88801a338ab8 R15: ffff88801a338000
[ 1079.841425][    C0] FS:  0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000
[ 1079.841445][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1079.841459][    C0] CR2: 000000c006870550 CR3: 000000000d57a000 CR4: 00000000003506f0
[ 1079.841471][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1079.841483][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1079.841496][    C0] Call Trace:
[ 1079.841502][    C0]  <NMI>
[ 1079.841508][    C0]  ? show_regs+0x8f/0xa0
[ 1079.841536][    C0]  ? nmi_cpu_backtrace+0x1d8/0x390
[ 1079.841561][    C0]  ? nmi_cpu_backtrace_handler+0xc/0x20
[ 1079.841586][    C0]  ? nmi_handle+0x1a9/0x580
[ 1079.841603][    C0]  ? lock_release+0x311/0x690
[ 1079.841626][    C0]  ? default_do_nmi+0x6a/0x160
[ 1079.841650][    C0]  ? exc_nmi+0x18a/0x210
[ 1079.841672][    C0]  ? end_repeat_nmi+0xf/0x60
[ 1079.841692][    C0]  ? lock_release+0x311/0x690
[ 1079.841715][    C0]  ? lock_release+0x311/0x690
[ 1079.841738][    C0]  ? lock_release+0x311/0x690
[ 1079.841760][    C0]  </NMI>
[ 1079.841765][    C0]  <TASK>
[ 1079.841771][    C0]  ? ___slab_alloc+0x275/0x19a0
[ 1079.841792][    C0]  ? __pfx_lock_release+0x10/0x10
[ 1079.841815][    C0]  ? hlock_class+0x4e/0x130
[ 1079.841834][    C0]  ? __lock_acquire+0xc77/0x3b40
[ 1079.841859][    C0]  ___slab_alloc+0x27a/0x19a0
[ 1079.841879][    C0]  ? __pfx___lock_acquire+0x10/0x10
[ 1079.841902][    C0]  ? zswap_store+0x4f3/0x2380
[ 1079.841989][    C0]  ? exc_int3+0xe/0x80
[ 1079.842011][    C0]  ? zswap_store+0x4f3/0x2380
[ 1079.842037][    C0]  ? __slab_alloc.constprop.0+0x56/0xb0
[ 1079.842057][    C0]  __slab_alloc.constprop.0+0x56/0xb0
[ 1079.842079][    C0]  ? zswap_store+0x4f3/0x2380
[ 1079.842105][    C0]  kmem_cache_alloc_node+0x10a/0x350
[ 1079.842128][    C0]  zswap_store+0x4f3/0x2380
[ 1079.842155][    C0]  ? do_raw_spin_lock+0x12e/0x2c0
[ 1079.842183][    C0]  ? __pfx_zswap_store+0x10/0x10
[ 1079.842209][    C0]  ? __pfx_try_to_unmap_one+0x10/0x10
[ 1079.842232][    C0]  ? do_raw_spin_unlock+0x173/0x230
[ 1079.842262][    C0]  ? __pfx_swap_swapcount+0x10/0x10
[ 1079.842287][    C0]  ? __pfx___up_read+0x10/0x10
[ 1079.842318][    C0]  swap_writepage+0x8e/0x220
[ 1079.842347][    C0]  pageout+0x39f/0x9e0
[ 1079.842413][    C0]  ? __pfx_pageout+0x10/0x10
[ 1079.842441][    C0]  ? __pfx_folio_not_mapped+0x10/0x10
[ 1079.842461][    C0]  ? __pfx_folio_lock_anon_vma_read+0x10/0x10
[ 1079.842488][    C0]  ? shrink_folio_list+0x21c2/0x3ea0
[ 1079.842510][    C0]  shrink_folio_list+0x2f51/0x3ea0
[ 1079.842533][    C0]  ? __pfx_shrink_folio_list+0x10/0x10
[ 1079.842554][    C0]  ? __pfx_mark_lock+0x10/0x10
[ 1079.842579][    C0]  ? mark_held_locks+0x9f/0xe0
[ 1079.842605][    C0]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1079.842640][    C0]  evict_folios+0x6e7/0x1b90
[ 1079.842662][    C0]  ? __pfx_evict_folios+0x10/0x10
[ 1079.842682][    C0]  ? hlock_class+0x4e/0x130
[ 1079.842702][    C0]  ? __lock_acquire+0x1506/0x3b40
[ 1079.842731][    C0]  ? mem_cgroup_get_nr_swap_pages+0x20/0x120
[ 1079.842772][    C0]  try_to_shrink_lruvec+0x638/0xa10
[ 1079.842797][    C0]  ? find_held_lock+0x2d/0x110
[ 1079.842817][    C0]  ? __pfx_try_to_shrink_lruvec+0x10/0x10
[ 1079.842839][    C0]  ? shrink_node+0x2138/0x3750
[ 1079.842861][    C0]  shrink_one+0x3f8/0x7b0
[ 1079.842881][    C0]  ? shrink_node+0x2138/0x3750
[ 1079.842903][    C0]  shrink_node+0x214d/0x3750
[ 1079.842930][    C0]  ? shrink_node+0x1ec8/0x3750
[ 1079.842953][    C0]  ? __pfx_shrink_node+0x10/0x10
[ 1079.842977][    C0]  ? pgdat_balanced+0x1b2/0x210
[ 1079.842999][    C0]  balance_pgdat+0x9d2/0x1a90
[ 1079.843024][    C0]  ? __pfx_balance_pgdat+0x10/0x10
[ 1079.843045][    C0]  ? __pfx___lock_acquire+0x10/0x10
[ 1079.843069][    C0]  ? __pfx___schedule+0x10/0x10
[ 1079.843093][    C0]  ? preempt_schedule_irq+0x7d/0x90
[ 1079.843121][    C0]  ? lock_acquire+0x1ae/0x520
[ 1079.843151][    C0]  ? __pfx___might_resched+0x10/0x10
[ 1079.843182][    C0]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1079.843210][    C0]  kswapd+0x5be/0xc00
[ 1079.843233][    C0]  ? __pfx_kswapd+0x10/0x10
[ 1079.843253][    C0]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 1079.843304][    C0]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1079.843333][    C0]  ? __kthread_parkme+0x14b/0x220
[ 1079.843356][    C0]  ? __pfx_kswapd+0x10/0x10
[ 1079.843377][    C0]  kthread+0x2c6/0x3b0
[ 1079.843401][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1079.843426][    C0]  ? __pfx_kthread+0x10/0x10
[ 1079.843451][    C0]  ret_from_fork+0x45/0x80
[ 1079.843479][    C0]  ? __pfx_kthread+0x10/0x10
[ 1079.843503][    C0]  ret_from_fork_asm+0x1b/0x30
[ 1079.843535][    C0]  </TASK>
[ 1080.370929][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1080.411415][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1080.519730][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1080.693321][   T29] Kernel panic - not syncing: hung_task: blocked tasks
[ 1080.700216][   T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.8.0-rc5-syzkaller-00163-gffd2cb6b718e #0
[ 1080.710046][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[ 1080.720122][   T29] Call Trace:
[ 1080.723413][   T29]  <TASK>
[ 1080.726358][   T29]  dump_stack_lvl+0xd9/0x1b0
[ 1080.730986][   T29]  panic+0x6ee/0x7a0
[ 1080.734913][   T29]  ? __pfx_panic+0x10/0x10
[ 1080.739359][   T29]  ? preempt_schedule_thunk+0x1a/0x30
[ 1080.744757][   T29]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1080.750765][   T29]  ? preempt_schedule_thunk+0x1a/0x30
[ 1080.756160][   T29]  ? watchdog+0xd3e/0x1210
[ 1080.760612][   T29]  ? watchdog+0xd31/0x1210
[ 1080.765054][   T29]  watchdog+0xd4f/0x1210
[ 1080.769331][   T29]  ? __pfx_watchdog+0x10/0x10
[ 1080.774035][   T29]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1080.779274][   T29]  ? __kthread_parkme+0x14b/0x220
[ 1080.784322][   T29]  ? __pfx_watchdog+0x10/0x10
[ 1080.789028][   T29]  kthread+0x2c6/0x3b0
[ 1080.793125][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1080.798356][   T29]  ? __pfx_kthread+0x10/0x10
[ 1080.802977][   T29]  ret_from_fork+0x45/0x80
[ 1080.807423][   T29]  ? __pfx_kthread+0x10/0x10
[ 1080.812037][   T29]  ret_from_fork_asm+0x1b/0x30
[ 1080.816921][   T29]  </TASK>
[ 1080.820138][   T29] Kernel Offset: disabled
[ 1080.824470][   T29] Rebooting in 86400 seconds..