last executing test programs:

4m9.679564682s ago: executing program 32 (id=268):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000300), &(0x7f0000000180)='%pB    \x00'}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001180), 0x88003, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES64=r0], 0x7c}}, 0x20000010)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x4)
dup2(r3, r2)
sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000)

1m50.642527754s ago: executing program 33 (id=2468):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0)
epoll_pwait(0xffffffffffffffff, &(0x7f00000003c0)=[{}], 0x1, 0x7, 0x0, 0x0)
close(r0)

1m49.910551872s ago: executing program 5 (id=2482):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x320, 0x0, 0x0, 0x0, 0xa1, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000780)='netlink_extack\x00', r0, 0x0, 0xb0}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0)
syz_open_dev$usbfs(0x0, 0x201, 0xa401)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a700080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010007b0000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)

1m49.694037999s ago: executing program 5 (id=2484):
unshare(0x6a040000)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48004}, 0x0)
sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x18)
setitimer(0x2, 0x0, 0x0)
r3 = socket(0x15, 0x5, 0x0)
getsockopt(r3, 0x200000000114, 0x271c, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r3)
sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x1a4, r4, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x138, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "2c3b3c0771883b5289350e799eb534c0884aae630dc26b8e218f"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "5c1e295caff0f7112399f4af684d5c23d896b4e5131e7f736873ec614b789549a73b00e2"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x94, 0x3, "a5c1a93255aa742519c832d7c121f9ec8574807f96f4eb60ec1f299a2968e321c8145c27e8d5a7626071bef3a450fbbaab0a25a443bcf9d53da378e1ad132fe43c32ab278a221f2a3c002cd771cef30b6d3682b255e06250ca5a969411f652a2693474c7cde95f2a36ac76a129948a841a7a2250fa7d2ba79e9b03ce0145735d0e7fcc328806f573efdabf3104da4e9c"}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa5d7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9e7}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4000044}, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x70bd29}, 0x10}}, 0x0)

1m48.262921452s ago: executing program 5 (id=2498):
r0 = socket$l2tp(0x2, 0x2, 0x73)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, <r2=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000240)={<r3=>0x0, @rand_addr, @initdev}, &(0x7f0000000280)=0xc)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0x9, [@ptr={0x2, 0x0, 0x0, 0x2, 0x1}, @typedef={0xb}, @struct={0x3, 0x1, 0x0, 0x4, 0x1, 0xffffffff, [{0x3, 0x3, 0x4}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xf, 0x2}, {0xf, 0x1}, {0xe}, {0x0, 0x2}, {0x9, 0x3}]}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x3, 0x4}]}, {0x0, [0x61, 0x2e, 0x61, 0x5f, 0x3e, 0x30, 0x61]}}, &(0x7f0000000380), 0x95, 0x0, 0x0, 0x5, 0x10000, @value=r1}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r1, 0x20, &(0x7f0000000540)={&(0x7f0000000480)=""/95, 0x5f, <r5=>0x0, &(0x7f0000000500)=""/31, 0x1f}}, 0x10)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x9, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, [@generic={0x40, 0x0, 0x9, 0x3, 0x7fff}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x7}, @jmp={0x5, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffe0}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000180)='GPL\x00', 0x1, 0x48, &(0x7f00000001c0)=""/72, 0x40f00, 0x40, '\x00', r3, @fallback=0x29, r4, 0x8, &(0x7f0000000400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0xd, 0x4c72, 0x1}, 0x10, r5, 0xffffffffffffffff, 0x2, &(0x7f0000000600)=[r0, r2, r6, r1, r2, r1, r2], &(0x7f0000000640)=[{0x2, 0x3, 0x2}, {0x4, 0x2, 0x8, 0xa}], 0x10, 0x10000}, 0x94)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000740)={"0bb193de589dc194231148764528036d", <r7=>0x0, 0x0, {0x0, 0x8}, {0x3, 0x7}, 0x3, [0x6, 0x9, 0x6, 0x8, 0x5, 0x8, 0x2, 0x7, 0x3, 0xfffffffffffffffa, 0x7, 0x7fffffffffffffff, 0x4, 0x2, 0x40, 0x9]})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000840)={{r1}, r7, 0x14, @unused=[0x0, 0x5, 0x10001, 0x5], @name="d7f39c88dfd97a830dad896ecf8915c97cb7e6f94517cf12d71f9fe33e4ad546a182c537e4c93a6b141b77e34af92f19040acce0093b0b2e2deed9047ebc02494fc305ecc2a69c3ca858e6a69c802f6d317f82e01a1154bb9a5b2d7ad848842aae53a2d727eca0ecdd713c3a294f2451a77672d60d04af907c4580243e1064afb7bfc6e4b999f184c9ecb5032543886093a04dda4a116985dd60a9c18e283d993a43b977b2bbbb9eaa4e7f5561f46effb6bb1ddf00be7861064d08c0e204832aad7079fc3f0abfee15d8ad4f824b0d7039d61d253d6b09e2c54336930c3c09b1f76efefd86e7fee8a892bf45a3f1de8fda501f29f12154d0d83aa2f4c7780c08c9f6fea7cd6e276272de25f470caecc32f6c87f4d358c042cb8de97422b81e1ac1b4a59458a73758793050062935e67ffc546a66b020a0b2bbf462f77b68ecfa5a80deeef378008c550b7efe851729656319a103be3bb3b1ee8d7eb32f0afb3e39e5a9a37be7c2edbc90963755e6d7d15eea261133b4907a17881a6209a44b956c72688df2a0a806450971d411b0370303ebc1438f789fc53fda207591eb8fc5d33711d827211d80326e4c6c97581049af88f9d88cbd6d4e7c03ec40e98406b676fce3214d1ff20e1669723f889cf395a6049153dc2f6443faa282d7bb5a655ff4ab527bbb569c4e2c6f4b29b6d30dd63e77486236b81a26f49bb43a0928372aa02e1f09e3618742da7970262bbd6c554bec315c76a1790eddbae165c53f1e3e0d7241d0ce6fc9b7092948e5ea16a4009ba0d604862182db1345dd4d4e87ea0c340e4f3ef2457fe68ffbdcc1baca788811e4020081a67510c42f6649d01237015900a181dc38bfc05e77fc4d3c44d478f520deefba4bf9990c5b74d4812a2d785423220ada6d1fa5958f6b655b38bd509f395372c9fecfd6f41e0eef9113f986c609d883e92bb4481d2581bdf6c058c14455182be97cdcb7db5fe925b51c82be9d526021c42daa4abfb93d15900ed5ad2de8d2f126fdb06e54978eb14fed4baa556ce84beccdb42e30afa5a81b43baf8ff42869c8d25db79afd631d951f36c4819f8eefa1df257c47574f0152f7728ede6be0e1fc85bc38d90e339522bafe71ac6c5e9716736908fe78a0964b0d2b057152a977f3bd7528efb40bd5521f3c79b6f9a9e5deb850a2a6dd28a803e2d16c45c5438405f4616572032efa439c6d2427f108bd06fa909e7efea23d713bcd6666de0f475d99d7a8a4e47ec1e055b5f952d9ab53796f1a373c95c629d0968a929ccbf8ad22b7b20db99f887e6cd483217d07e2746ebc98a25e1731d9307ba785c9f680c96bf9ddda3d69bd9b1c7f2fe92a6eef99412ac69984771973e0b8ceee1a9c36393d555a7c1d2da1c47b9dba3421f9676c591cf03f578c56b9f6187f04f9616af78c48c93f40851253694ab098e30111aaebeaaa50ee8fc43c831623d1cd012d07bb88b40d3c761b4da9a352e9eeacadf5b3fba6ad9f70322c2ef1e448d1e5818c6a0cb7a8a316a62c5bf1632a50367a553d5d8267ffe466a73292eca0612b7fcd51606acfec5210d93a97557b7f37c5d1ba2e789f0d091581b61a61c1e2fb16d0171e9b7e6a1d14fe81732fae3d9afb1c3e4a25484b3962dd735a95cfb36049f3c5818ccb6b8a7a9b025f474de381cfd7c18aa61b0d776b941b146d144fbd27fa9ed60da4f5548bceda53ebbd15d41e9e9ce7e5e3b1ad2e916f69b6bf3b285ddb3df0c4575f4bc46196938054305cbce3e01f5fb3d503e407780762b437b720840c361a5f81487b5fcb35a0db7586f9a99a479d5b01a8a0e1bf6ec6c4de4483d042a9a61806ed122f8e5b420da6f303495a862d5008d057645e870e25c87bcbb0558f029be7186b472af3ac899fa07a3059455f9aa3ad7127d097a0e32e789043378b151d6552f1fbc669576e3ff01b21ac76dca2172b6373c0bd1633e75019b2677667419d30ae483ca49c0e2e31822d43802789e71aa35ffbbc78a0f0d712eec9b363150c471ec4ecafd45cb95d4628bc1634339894227e8de3bb9d132705d5dc32e0282e2c71af3078489505586a2ef52f647ca39781fcfa97ca528b252b6c3864908ac8307f1ef715631988e68bc74a5827f0fd2575950811362d2028f9efab922d19535d7250ec0b38efcc2a3b9f3094e86866b311abcb72bb7ad1f65055937811cab4cf33bd60ef57f133cdddc50b09333a9f205102e84d395ca9ed3c40aeb4f23a8daa94c30208cb202f2fe824cd45ce5a284dc2516f9a08a5fb0aa7f6791274902fb600da72912083e430238c2dd1dbf39d298f7511ea3b247f6cf7d6aa5074191822790d27139704d08545ddbe1e2406c1cf6ccd3a10fd7df3afcdfc3a0b28da908d36ff415ed6d8e77b3c403c5c1b52f972fe4157d9403588392a978916e61095b96d6d05e36f2ad4d908c00444c1fd2143be27c9923a2b801c38814d80adde99b88613702a45f7ed863159b66dbcdbc43b1de2698ce51679d2da4158d723938b67c087f44f5f19aee000bb6a41bd2a80bef18d65491f78ace424ca653e39edbce281ec0fb73fd14ee094fd4d895bd377d3509327279e932981990bb5df6092865381e79678a169a956c11c600e68c74e71b21cda64ccf2e75fa3e46ae7954fa293ad9d8700757e3ce4a4424e066d8638d0a7b0494965fec878107625c3e9e2d0bf591dd053f7e22782a6525cc7b07cf97f96c78425395f80ac35ab5cb0ba0b1f2d1697b0e6aa9d1e6dd0173189a5dc7801b51786e242054177be63db416980b5eb7eb4babf478025a35ad71e65b8fd4bf93d2e1a2c17468aee9b60366b966f3dcf8beadc5590586d12398c01750a94f93d0881dfe8cb46df00650b0d1972b922d2f00a923de99e73cffb86578d0abc27bde65e6bbfec6230b4c5ecee5a79eb46f25e2205bdee14d1171319f9d9baed754eef8c83ca09caf67a5cdd51de141413e6f247b88a311779a548d363edc05db7fbf88a08cc95c192a3367cbe8d17bc24b0c29e280354892d12eee48953500c02b44f6910428b47748d4a47ba5fd122556c8e08af913a99bc963d1b7f58fe890331b2316b09a091cf53d345174f024e278e3298d04f45688f68d102f12b1ad258d18e7621c98ca597b6645939a619d58278ec27a8a776363574f3dc35a74506ba356080aef5e3c6ed2d7a0537828ed12fc4f65431b120f7dbd0cc497e5a62582e9a9cb60bc9c384083b0e63873a4fab22203c59e0a6c1a2b20b409157287c7c2c212447d3e27361c7ae67849d3dad9075951afc31caeab13b3974ca21b0579b2ef52a17c43fd96e31099860aaa7a844960b625fa6c9c1f74127c4033b1eb9d85f21c95bd49da0bafa53e6a1ba87814bc57873ecd967d644b1a36ea0ce6bb7a87b164e37e7378bf17d41ed5422c3310cfe94a04f204013da28198a87c106234905b60fb5303e34541b55a1e2eaefeb74dc852958aa0c7359f890603343801640bfe9ab1d0d9d422cb8335d3bea867abd75f67f1586a737b98a4bf8a26fa73c42a63a3935610ea63ebe55eb29a02f9a15b6035330d4a6d80b49938fc6dce80f8840b69c8a797b10a1a4017c190a2865718545224d9cb656e1f1d8524ffd3d06c7bce747c34c32ac032a707f1be2b0b922679ae5df072b62a905227575fa563af999a2b33518591165afd6a9ab35b81f856aaaeff66d649846807a85a9e5b53c9181ae9d32487210a0f7a622d11cbdd7ecbb4f2c5b89ce3c247ae5ea4e2ec543a8f9abd6df9cb5ca16f977905d0b38570e9ac94843e5d55c5d08806be72ddda0a65bde1134192a1b0a4484e6dc65d52a373ff80dc83f7155ae09642905d0bb4da370c50f22153fce15fd3f0d2ec06b4c3b018287c31062267f4fa717d68f3a928d71c56f8f5811eebc46d483b30230c981bf3442d8c6aba862c4eb615a82aea89d476834be4a8538975f1ce8a715df363706835f7cd9bee3901a75146d44150ace5313bb5417195bfea866219be607029930990ef07ab278e1782e4ca4c327b76367d82b84c4eae25fc68f27acf879275abe8006f4e64950ed366c10280598104e2ff750fbb030f890819eee1cd425505ec1ce087dd90a14c2ac484779f98939f40ddf97003e0d3ff3c2e26a878bdc55b94e14a808aa777705506e41b20d52d375f3b4e11c83cf338d66a0f1068ec62236b1be3dc7fdeb215c22188821fb2fbd89590943d255e02c4001e015e39d5207032be4b1d889fb748fc96bdfcb8a7803b7515fba6efa9c6393c12cfb4aa9b047811222148fdf7bec16c5c15c54c92579cf37cee973170b0fc3b876de5c4a6e13851260b0eebacdef3127bf403c272c2ff610b1906d1a1beb9bc367a0fef3bed280b4d22941fb5ec2e63a911881332259a8c379ce700f20e127376347ecd45d4d6d66bb19002bace63be35645f495080178115b1a707006faf4eeb2852a507b1995835244fda21712ea78d3dedb49eaed0d36098144b0851d4f331b643a3aa2bb919ef3be9e2ba0a64516385864ddb6c5ff6bf149b061bbdd26dbfa19777a1ce83e20e3bb5e711c05c3f7fc5ad6bbcb67a3e54ee0863a0e8c190254e9a4dfc31c78d88554dda09204a735ec2e44a8d0fb00bef2c44e9e54127df759b8eaf3e176ae80a9a3903456e96c242d1419284a66935f33563db9ea76309bacadc239f36cb9b7358718e46ca90927e18caf078811845a2192d61e88d3ec6034ee1097635731789874a0df308b2b42eb4e3039863c444624518153ea0b09bace541ac1fca408dd0652952ba783b602a8cdca8b8cfa94d5ab69538564343548dbfd5bc3cb3f17fb70c7e43f53970569f31fd93f5b397ca93eb65c070e05bb50aa6fc4d24c742da6450a0c073976957d8fc02761e2161369ca7883791df07cc44dd540ee0511847f62f63009b2991392fc221f1f8a6b083581df6b8f69ac9752d6193f0c1c1a2961edccc9805ed1385159cee33e19c72a486f8592dad085c789a073ba110e8a4915570b6ec6156962dc490bb64dc7677a6361b6275f77e4501d253392ef4a8118519cfb5418db46a84923ce98f1e77cc5b30b17ecf910acbae94dc519f10e8b3d790c0a1cc19308ad483ff06888ab1ab89123077f3d32c44c583e25e7f081074e766aa420fd3ff0c0db17231d304bcbebc7b68969902b6b3c3cd0f50838af121cf5968a241174956bf499081487f3c14fc99bddd1f01aff6a7d1af2138811ebfe4ed270b1aad9e4405c692ba2e72bf537a774c5092cf850bdf8b57ca484af5f8cce72caa4206f49e3c30a326a58ef7d22df99e37646f4a787c62816729a392fee6a8a7f8172a254256b21a15319e9295032f3227d5ead9e1453b593f995e9ab561e070db1437115abffe2054170e6fdf63a6f176d1aa33c456ce5b075d32605885e1ec02743653bdc4c77fbff5e46fe66574213256294f4490d22c8ae5c0e50454b17d8c87efdc7e2a717826deafc0f4a303d5aa870d4010006f12af459ff599b5234b34bd626aef8796c574e3257246671cc986e0b73609c7d78e95d00acf573214edf7dd64924931db9800c805a336c4e986ca8bcf550f590d2a9af87ef3539e84e3cbd028b463245cb4b3b99b4563212a053d49bb5e3af0eb073fdaf9b34c24dfa19e0a0a0be6356b68008318f34252837d64018649492bfc066063587f77893977e12c9de0a118ae5f155ddc3b5d92"})
accept$inet(r1, &(0x7f0000001840)={0x2, 0x0, @private}, &(0x7f0000001880)=0x10)
ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000001940)={0x1, 0x3, 0x1000, 0x3b, &(0x7f00000018c0)="6cf318f04d0003e3e4b0a3d8a5f80fffc9eb265a6f81b78706044140b937433dd45a2cc15f6b81328a8b4d0bab39904b551831ac1936c753524913", 0xb, 0x0, &(0x7f0000001900)="dda46ed4912b768bbb179b"})
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x2, 0x0, &(0x7f00000019c0), &(0x7f0000001a00)='GPL\x00', 0xfffffffb, 0x22, &(0x7f0000001a40)=""/34, 0x0, 0xa, '\x00', r3, @fallback=0x18, r4, 0x8, &(0x7f0000001a80)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000001ac0)={0x2, 0xb, 0x1}, 0x10, r5, r6, 0xa, &(0x7f0000001b00)=[r1, r6, r6], &(0x7f0000001b40)=[{0x4, 0x4, 0x4, 0x3}, {0x5, 0x2, 0x0, 0xc}, {0x2, 0x1, 0x1, 0x9}, {0x0, 0x5, 0x10, 0x4}, {0x0, 0x3, 0xf, 0x18}, {0x2, 0x4, 0xb, 0x9}, {0x4, 0x1, 0x9, 0xa}, {0x4, 0x4, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x7}, {0x0, 0x2, 0xb, 0xa}], 0x10, 0x52b6}, 0x94)
sendmsg$can_bcm(r6, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0x1d, r3}, 0x10, &(0x7f0000001d80)={&(0x7f0000001d00)={0x3, 0xa0, 0xe, {}, {0x0, 0xea60}, {0x0, 0x1, 0x1}, 0x1, @can={{0x2, 0x1, 0x0, 0x1}, 0x3, 0x1, 0x0, 0x0, "28fa261124d878e7"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0x10)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000001e00)={<r9=>0x0, 0x83f9, 0x0, 0x1})
ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000002200)={<r10=>0x0, "0df014728ef8fb607a0a93476e2b8e56"})
ioctl$BTRFS_IOC_BALANCE_V2(r8, 0xc4009420, &(0x7f0000003200)={0x0, 0x4, {0x3, @usage=0x1, r9, 0xfffffffffffffc00, 0xa, 0x7fff, 0x1, 0x9a9c, 0x10, @usage=0x8, 0x6, 0x9, [0x4, 0x100000000, 0x3, 0x5, 0x1000, 0x9]}, {0xca9, @usage=0xfffffffffffffffc, r10, 0x560, 0x4, 0x0, 0x400, 0x9, 0x10, @struct={0x5, 0x25a}, 0x3, 0xffffff06, [0x9, 0x7, 0x3, 0x5, 0x10001]}, {0x6, @usage=0x3ff, 0x0, 0x7, 0x1, 0x0, 0x1, 0x6, 0x29, @usage=0x8, 0x7, 0x47, [0x9, 0x0, 0x400, 0x0, 0x0, 0x8]}, {0x4, 0x2, 0x7}})
ioctl$sock_SIOCBRADDBR(r6, 0x89a0, &(0x7f0000003600)='dvmrp1\x00')
r11 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r11, 0x6, 0xd, &(0x7f0000003640)='cubic', 0x5)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000036c0), r1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003700)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f00000039c0)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003980)={&(0x7f0000003740)={0x22c, r12, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xffff6add}, @NL80211_ATTR_VENDOR_DATA={0xba, 0xc5, "86ab9eb2a44cca756071ea3adc22d82f59af2a992d4e7984157e0ca9e92d80f300741f68468bd36d70d742e62353b2d2264135b726b28c489d348f41302d60191a8b8e15ad732458b6c9b1536f2c47d3436b4f8d26a512a5b276d071abe13b184bf307113d08dfd94cf14e0f562d7be2edc6fcc76dd9c5423aabf89f0155e69b23369a664e7be78f4fbf4a05c04ddedf0cb0f159af16423ad3f37edf1f9967dcfc6eb7c9cfe655726abdb6ec52697c75aff6a5b773fc"}, @NL80211_ATTR_VENDOR_DATA={0x76, 0xc5, "4000f45e8a6c0634896e6bee93e4cb2cc05456eb185440b6b8867be55092e48c46d49e31a745bc4968a8ae0924d0643987b1bbbdb25060b7ecc0afc55700096f423848d8cd8cc6202c2efc2f0008c2de711a3cd6c8aa42af2a9569f46e243d63cbddf2a9b3a675abc234824a0837e9bb9739"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x200}, @NL80211_ATTR_VENDOR_DATA={0xc9, 0xc5, "e56af6ceb87c3a0ecc0987cf5202e35a549c4cfaf5b6f0b49c350900a0408cb3c1db6bc82ee6f2fb941d83687d8a43ce02105389a86d74fa5c1ab550249ed29451236b6e3170dee75e88c5400bb1181d9aedd30339651624f93bd736457b5f0565d8b179e0471379cdec595f714ef37846ffacba67b6011e7ce0b808660339a4c3be104ed47e6eb784ff117b57819de8ca195debe2b0e9578734d9999617cd2469a35aab449f43e5b6b02b5b11b483cd9b47c7188256648c9aa6e804feec1c8053aa18f8f0"}]}, 0x22c}, 0x1, 0x0, 0x0, 0x8800}, 0x0)
r14 = openat$null(0xffffffffffffff9c, &(0x7f0000003a00), 0x40, 0x0)
r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003a80), r6)
sendmsg$ETHTOOL_MSG_EEE_SET(r14, &(0x7f0000003f40)={&(0x7f0000003a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003f00)={&(0x7f0000003ac0)={0x420, r15, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @ETHTOOL_A_EEE_MODES_OURS={0x3bc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x69, 0x4, "e21a8b95625b356b80aa9c8f1167b7c4c1038473f2eff84767ccf2f83748f285667765a12657236b2ffbbc55813bdf7937b4786118e7d93b7caf05888ab4a8a6d9a944010707ec261f80632ad01c302f9192f2b3cca4bee0f8c8d10718bd30b486b0850c15"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_VALUE={0x53, 0x4, "f852302bd1e7d7f3249e5764ab0376544c05f3b5861f89a3aa3b304eeaa997b67fe2513cbafe04649ef0505599f503a0bdaf630d7c9bd44b651785e059107b4b4818d698650205457363e3cc547cdf"}, @ETHTOOL_A_BITSET_MASK={0x9d, 0x5, "05201d308fb68726249936b31ae96faab99fdce191e9fd6f27ce5a729fb48228e2db5bf7b1a925546c15531035ca6fe5c56fd7f84f1d846bdada848b9ad72e6cb09721e457065a550f96c10041248fb7b588e1864ba8a08c3520a87050f965150bee829b04da0ed7ef5d451d1e6166f074b7ca0f576596331584ae6e18099c757086afa6c817676982447172e8f9038143a2e8e1b514ea323f"}, @ETHTOOL_A_BITSET_BITS={0x44, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40000000}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x399}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_MASK={0x79, 0x5, "3c1d1a927cac50a3e7b46eaa726e662df9022e2099dc9edc8a310736f8d68b8bd391976549317c2ee51383226eebb1b80a7f750a51a1a4dacdae6a51193fc64b8306b10bf2827fa1d6165b1633aef9a03a30dde0466da6fa714dae4b5dce717fb3b8f7fff6fb9a9196dff94b46066741c73dd30bc4"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xcd, 0x5, "16e970f930e889106e569e3a72e35e07f7d4beaa2877798769a80e5e6f5b071ac4c572177aeb232b7d4a830ddad4cd1d65842cdf32f9486cd8ac35c3580d8b198906e7eda6513e9870b8f93d94450ea05f59b1781580f19badad26eab9097137a4d1d3134799ed47a43673c8b7f73c803f8c02d6a4b931295d3926dc0a1ec2f3c469816cbe2587d2de7bc9dd1267b79451155026b66bfcbe38f398c267b95e24d415f78d003d33efdc0bad4c23917f8917b6eeecdbb75f33fe2db9246a930a473a740eb53f952b2347"}, @ETHTOOL_A_BITSET_MASK={0xb2, 0x5, "90834cdf3ee89627b76f6c917ff61276d295e0e58be009dd3ea12a2aa303be316251fd1f132b2a471d061de47cba822a36e78caaa114712ed06d398bf1b8a725b4f2f9c4cbf0e292af65da6bf14aa8adceecbd4395a37794fdf3438392e909323686745d94fbd2f17d808ce1450d1bf85dd51b0c0e667da2e9f90dcdde34a907f12e94f46989ab2c4c6f60153f5ab2a77491d4107c886de688cec332d558d1130dac145883b910b055b1267be53b"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffff00}]}, @ETHTOOL_A_EEE_MODES_OURS={0x20, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x1b, 0x5, "9a626510d954b66ee994905be14b0cd54fdc72a0732faa"}]}, @ETHTOOL_A_EEE_MODES_OURS={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x101}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x420}}, 0x850)
mkdirat(r6, &(0x7f0000003f80)='./file0\x00', 0x72)
r16 = socket$nl_generic(0x10, 0x3, 0x10)
r17 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r16, &(0x7f0000004080)={&(0x7f0000003fc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004040)={&(0x7f0000004000)={0x1c, 0x0, 0x321, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp=r17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48058}, 0x4000000)

1m48.118086243s ago: executing program 5 (id=2502):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5464fadc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x8}, 0x100b28, 0x9, 0x28000000, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@noinit_itable}, {@jqfmt_vfsold}, {@debug}, {@nodiscard}, {@inlinecrypt}]}, 0x1, 0x43d, &(0x7f0000000700)="$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")
r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYRES64=r0], &(0x7f0000000100)='GPL\x00'}, 0x94)
prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='\x04\x00\x00\x00\x00\x00\x00\x00\x00\xbc:\a\xd94\x16\x03\x02+\xd20\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_page_free\x00', r2, 0x0, 0x800000000000}, 0x18)
sendfile(r1, r1, 0x0, 0x800000009)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
getpgrp(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000003d968fc742f9353995c5473825a8a03f7c1521fafcc907fad5da12c760194319d99d1dcd7c90fbf3a86e65e12f269dfd067ddd957adc63677f6ec2579de87bf825ff062db3183edfdf6d6bd95f053101f605f3555c010a2ca04e71f64e18cec2822961d1f5c7ea0757b345acdbdc5440d08737c070f784667a1fcd3997bb4c8aa0b524cce9573395f544fe0952c08b19f4d10ab57444e607ec52318cff56baab7f943f470b"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080))
sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000001780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001740)={&(0x7f0000000b40)=ANY=[@ANYBLOB="5c020000030a0101000000000000000000000005b9000600767d0754e22d8c121e6663663e791becec002cf5bb09ce0700ae3c04bdb73a9ebd80c6c9ae2709c5c9837034b6a0883a142b817787f944bf1cc901b0a32d2c9b849babceabf820c198b90dc038686d1cdcb4842a4f3520fa3e1aea103a414962f0695adbe28c2fbece272e5153888903f99c0749f2b40138716336b3b3a6cc41f06afab71fbb24ab16710a786819fbd7e86d6c74a99767af227be480a34501a0191cb3eb978725f250e41e87e732794952aea1282c31706d98b09343353101b113190000000c00044000000000000000018300060075a0a94d9fcf89f71168c2be6a2e0409022305239f8ec9c3a39a28bcc29b2513e2bb3d32d12e51eacde934adbb02b27aef49aa188448e0dcc09e52046c6231f367d57c28741f978d2d21a59d77efea7b1838b46035ec9aa749ac176815bac995fd3167a49eebf30d0acb172924ead74cc8b8d386cb000025edea00fb000600754708bbecc8bf19aab2cf36955d4b18b43d57968f3b4d36d0c314c8742e605e4c304296a86a4cd419b1b4923258f5a108a788f4d3020ab9fbe3f897011477fc0c3a78ec3f3323a0609dd0ad94e6e0ebcad88516b752b07ec23b404cd22dcb791c11070023a460fe33eae179a4f20349bb0eb1d0a7728d2a48e7728f6c276dd4f503c0642d49948a9149bdf451e7b0bcceceb04d77b4a6ce3dca49d0d49922382b5e79619201922f5e0b8f0089ebb6e7db9707950a3971104f27fd37a000408bb3ad9e0459d4bf975c6a0c27a4167df441c9c940eb403e33fe1e18067f0000009790ce7a0900000011373080ee8866169349dfc743ce37005794d33d52e18dcbc62d6a418972a20cf0c8c4632cf6069e9432290da796e40454a2821ff01a55b4aae798c33ffeec77a34e55fb3f4c9db2b5fa3d7490197c35fb40b398cecaa0c731c0346b8ee2b4c7bf864db38bb587dffc1cb17c9ccae57226252dc7c25333b62c836cab482246e90b2fa1e3ac2a3cadbd479702bf612dae"], 0x25c}, 0x1, 0x0, 0x0, 0x80}, 0x400c004)
r5 = fsmount(r3, 0x0, 0x0)
fchdir(r5)
ftruncate(0xffffffffffffffff, 0x2007ffb)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000201005)
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)

1m47.447146596s ago: executing program 5 (id=2507):
unshare(0x6a040000)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48004}, 0x0)
sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x18)
setitimer(0x2, 0x0, 0x0)
r3 = socket(0x15, 0x5, 0x0)
getsockopt(r3, 0x200000000114, 0x271c, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r3)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x70bd29}, 0x10}}, 0x0)

1m46.998033581s ago: executing program 5 (id=2515):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x5, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0xc004)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f00003f0000/0x2000)=nil, 0x2000, 0x4, 0x11012, 0xffffffffffffffff, 0x308000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000580)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$KDGKBDIACR(r2, 0x4bfa, &(0x7f0000002f80)=""/61)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x2)
gettid()
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0006}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="62ec2ea36c0637f910fe237a444eace15c2431e8c7d0335bd0af708415d50d209728ab67fc46fed9191cf53e0fb06535c30fc6f6f6566d82fc97a6d1ebd15135d9162adf46829ddb57fb4d88b1a73260033d06ffb8"], 0x48)
modify_ldt$write2(0x11, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f00000002c0)={[{@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@jqfmt_vfsv1}]}, 0x0, 0x483, &(0x7f0000001040)="$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")
r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[]}, 0x78)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain)
add_key$keyring(&(0x7f0000000040), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r3)
clock_gettime(0x0, &(0x7f00000000c0))
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240))
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b)

1m46.970975043s ago: executing program 34 (id=2515):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x5, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0xc004)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f00003f0000/0x2000)=nil, 0x2000, 0x4, 0x11012, 0xffffffffffffffff, 0x308000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000580)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$KDGKBDIACR(r2, 0x4bfa, &(0x7f0000002f80)=""/61)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x2)
gettid()
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0006}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="62ec2ea36c0637f910fe237a444eace15c2431e8c7d0335bd0af708415d50d209728ab67fc46fed9191cf53e0fb06535c30fc6f6f6566d82fc97a6d1ebd15135d9162adf46829ddb57fb4d88b1a73260033d06ffb8"], 0x48)
modify_ldt$write2(0x11, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f00000002c0)={[{@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@jqfmt_vfsv1}]}, 0x0, 0x483, &(0x7f0000001040)="$eJzs28tvVNUfAPDvvX0APx7tD/EBolaJSaOxpQWVhRuNJsZgNNEFLms7kIaBGlqNIJFiDG5MDImujUujf4E7Y2LUlYlb3bgyJETZALqpuXfuLdNpp1A6ZWrn80lue869Z+ac79zXuefMBNCxBrI/ScS2iPg1Ivpq2YUFBmr/rl05O379ytnxJObmXvszyctdvXJ2vCxavm5rkRlMI9IPk6KShaZPnzk+Vq1WThX54ZkTbw1Pnz7zxDsnxo5VjlVOjh46dPDAyNNPjT7ZkjizuK7ueX9q7+4X37j48viRi2/++HXW3m3F9vo4WmUgC/yvuVzd6vxjerTVlbXZ9rp00t3GhrAiXRGR7a6e/Pzvi664sfP64oUP2to4YE1l96ZNzTfPzgEbWBLtbgHQHuWNPnv+LZc71PVYFy4/W3sAyuK+Viy1Ld2RFmV6Gp5vW2kgIo7M/v15tsQajUMAANT7ePyzw70R8d71r17K+h5981vSuCf//3v+d0cxh9IfEf+PiJ0RcVdE7IqIuyPysvdGxH2rbM/i/k96aZVvuays//dMMbe1sP9X9v6iv6vIbc/j70mOTlYr+4vPZDB6NmX5kWXq+Pb5Xz5ptq2+/5ctWf1lX7Box6XuhgG6ibGZsbxT2gKXz0fs6V4q/mR+JiCJiN0RsWdlb72jTEw+9uXeZoVuHv8yWjDPNPdFFt5sFv9sNMRfSurnJycXzU8Ob45qZf9weVQs9tPPF15tVv9AzN1+/C1wuRL/xMLjv7FIf1I/Xzu98jou/PZR02ea2zz+097k9XyeubdY9+7YzMypkYje5HCeX7B+9MZry3xZPjv+B/ctff7vLF6TxX9/RGQH8QMR8WBEPFS0/eGIeCQi9i0T/w/PNd9Wxh9pm/b/+YiJJa9/88d/w/5feaLr+PffNKv/1vb/wTw1WKzJr383sVRzsstFYwNX89kBAADAf0Wafwc+SYfm02k6NFT7Dv+u+F9anZqeefzo1NsnJ2rfle+PnrQc6eorxkOrk9XKSDJbvGNtfHS0GCsux0sPFOPGn3ZtyfND41PViTbHDp1ua5PzP/NHV7tbB6yxLUuuHe294w0B2qBxHj1dmD33SrgYwEbl99rQuZqf/5tjcXcA2Ejc/6FzLXX+n2vImwuAjcn9HzqX8x86VPpdu1sAtJH7P3Sk1fyufw0Tm9dHM9qTWK87JU9ElIl0XbRHYqWJLbdWuN1XJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNb4NwAA///Xm+pu")
r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[]}, 0x78)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain)
add_key$keyring(&(0x7f0000000040), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r3)
clock_gettime(0x0, &(0x7f00000000c0))
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240))
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b)

1m41.534826711s ago: executing program 7 (id=2516):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5464fadc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x8}, 0x100b28, 0x9, 0x28000000, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@noinit_itable}, {@jqfmt_vfsold}, {@debug}, {@nodiscard}, {@inlinecrypt}]}, 0x1, 0x43d, &(0x7f0000000700)="$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")
r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYRES64=r0], &(0x7f0000000100)='GPL\x00'}, 0x94)
prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='\x04\x00\x00\x00\x00\x00\x00\x00\x00\xbc:\a\xd94\x16\x03\x02+\xd20\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_page_free\x00', r2, 0x0, 0x800000000000}, 0x18)
sendfile(r1, r1, 0x0, 0x800000009)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
getpgrp(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000003d968fc742f9353995c5473825a8a03f7c1521fafcc907fad5da12c760194319d99d1dcd7c90fbf3a86e65e12f269dfd067ddd957adc63677f6ec2579de87bf825ff062db3183edfdf6d6bd95f053101f605f3555c010a2ca04e71f64e18cec2822961d1f5c7ea0757b345acdbdc5440d08737c070f784667a1fcd3997bb4c8aa0b524cce9573395f544fe0952c08b19f4d10ab57444e607ec52318cff56baab7f943f470b"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080))
sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000001780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001740)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x25c}, 0x1, 0x0, 0x0, 0x80}, 0x400c004)
r5 = fsmount(r3, 0x0, 0x0)
fchdir(r5)
ftruncate(0xffffffffffffffff, 0x2007ffb)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000201005)
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)

1m40.866176064s ago: executing program 7 (id=2590):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010035bd7000fddbdf2521000000050020000300000009001f007078793100000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800)
ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080))

1m37.098194141s ago: executing program 7 (id=2622):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5464fadc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x8}, 0x100b28, 0x9, 0x28000000, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@noinit_itable}, {@jqfmt_vfsold}, {@debug}, {@nodiscard}, {@inlinecrypt}]}, 0x1, 0x43d, &(0x7f0000000700)="$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")
r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYRES64=r0], &(0x7f0000000100)='GPL\x00'}, 0x94)
prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='\x04\x00\x00\x00\x00\x00\x00\x00\x00\xbc:\a\xd94\x16\x03\x02+\xd20\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_page_free\x00', r2, 0x0, 0x800000000000}, 0x18)
sendfile(r1, r1, 0x0, 0x800000009)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
getpgrp(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000003d968fc742f9353995c5473825a8a03f7c1521fafcc907fad5da12c760194319d99d1dcd7c90fbf3a86e65e12f269dfd067ddd957adc63677f6ec2579de87bf825ff062db3183edfdf6d6bd95f053101f605f3555c010a2ca04e71f64e18cec2822961d1f5c7ea0757b345acdbdc5440d08737c070f784667a1fcd3997bb4c8aa0b524cce9573395f544fe0952c08b19f4d10ab57444e607ec52318cff56baab7f943f470b"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080))
sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000001780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001740)={&(0x7f0000000b40)=ANY=[@ANYBLOB="5c020000030a0101000000000000000000000005b9000600767d0754e22d8c121e6663663e791becec002cf5bb09ce0700ae3c04bdb73a9ebd80c6c9ae2709c5c9837034b6a0883a142b817787f944bf1cc901b0a32d2c9b849babceabf820c198b90dc038686d1cdcb4842a4f3520fa3e1aea103a414962f0695adbe28c2fbece272e5153888903f99c0749f2b40138716336b3b3a6cc41f06afab71fbb24ab16710a786819fbd7e86d6c74a99767af227be480a34501a0191cb3eb978725f250e41e87e732794952aea1282c31706d98b09343353101b113190000000c00044000000000000000018300060075a0a94d9fcf89f71168c2be6a2e0409022305239f8ec9c3a39a28bcc29b2513e2bb3d32d12e51eacde934adbb02b27aef49aa188448e0dcc09e52046c6231f367d57c28741f978d2d21a59d77efea7b1838b46035ec9aa749ac176815bac995fd3167a49eebf30d0acb172924ead74cc8b8d386cb000025edea00fb000600754708bbecc8bf19aab2cf36955d4b18b43d57968f3b4d36d0c314c8742e605e4c304296a86a4cd419b1b4923258f5a108a788f4d3020ab9fbe3f897011477fc0c3a78ec3f3323a0609dd0ad94e6e0ebcad88516b752b07ec23b404cd22dcb791c11070023a460fe33eae179a4f20349bb0eb1d0a7728d2a48e7728f6c276dd4f503c0642d49948a9149bdf451e7b0bcceceb04d77b4a6ce3dca49d0d49922382b5e79619201922f5e0b8f0089ebb6e7db9707950a3971104f27fd37a000408bb3ad9e0459d4bf975c6a0c27a4167df441c9c940eb403e33fe1e18067f0000009790ce7a0900000011373080ee8866169349dfc743ce37005794d33d52e18dcbc62d6a418972a20cf0c8c4632cf6069e9432290da796e40454a2821ff01a55b4aae798c33ffeec77a34e55fb3f4c9db2b5fa3d7490197c35fb40b398cecaa0c731c0346b8ee2b4c7bf864db38bb587dffc1cb17c9ccae57226252dc7c25333b62c836cab482246e90b2fa1e3ac2a3cadbd479702bf612dae"], 0x25c}, 0x1, 0x0, 0x0, 0x80}, 0x400c004)
fsmount(r3, 0x0, 0x0)
r5 = open(&(0x7f0000000300)='./file1\x00', 0x14b042, 0xc4)
ftruncate(r5, 0x2007ffb)
sendfile(r5, r5, 0x0, 0x1000000201005)
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)

1m37.083883662s ago: executing program 35 (id=2622):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5464fadc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x8}, 0x100b28, 0x9, 0x28000000, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@noinit_itable}, {@jqfmt_vfsold}, {@debug}, {@nodiscard}, {@inlinecrypt}]}, 0x1, 0x43d, &(0x7f0000000700)="$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")
r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYRES64=r0], &(0x7f0000000100)='GPL\x00'}, 0x94)
prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='\x04\x00\x00\x00\x00\x00\x00\x00\x00\xbc:\a\xd94\x16\x03\x02+\xd20\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_page_free\x00', r2, 0x0, 0x800000000000}, 0x18)
sendfile(r1, r1, 0x0, 0x800000009)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
getpgrp(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000003d968fc742f9353995c5473825a8a03f7c1521fafcc907fad5da12c760194319d99d1dcd7c90fbf3a86e65e12f269dfd067ddd957adc63677f6ec2579de87bf825ff062db3183edfdf6d6bd95f053101f605f3555c010a2ca04e71f64e18cec2822961d1f5c7ea0757b345acdbdc5440d08737c070f784667a1fcd3997bb4c8aa0b524cce9573395f544fe0952c08b19f4d10ab57444e607ec52318cff56baab7f943f470b"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080))
sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000001780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001740)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x25c}, 0x1, 0x0, 0x0, 0x80}, 0x400c004)
fsmount(r3, 0x0, 0x0)
r5 = open(&(0x7f0000000300)='./file1\x00', 0x14b042, 0xc4)
ftruncate(r5, 0x2007ffb)
sendfile(r5, r5, 0x0, 0x1000000201005)
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)

42.14104025s ago: executing program 8 (id=3449):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
dup3(r1, r0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x50)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0)
r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}})
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
statx(0xffffffffffffffff, &(0x7f0000000200)='./file5/file0\x00', 0x0, 0x8, &(0x7f0000000580))
r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x1, 0x0, 0x0, 0x0, 0x8, 0x40})

42.058540276s ago: executing program 8 (id=3450):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = open(&(0x7f00000000c0)='.\x00', 0x40000, 0x194)
getdents(r2, &(0x7f0000000280)=""/176, 0xb0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="928418080000"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r3 = socket$inet6(0xa, 0x80002, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x328, 0x3d8, 0x3d8, 0x328, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x4001}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308)
r4 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xdcb8, 0x90, 0x3, 0x82089}, &(0x7f0000000380)=<r5=>0x0, &(0x7f0000000200)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x8, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000004040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x29e782})
io_uring_enter(r4, 0x3518, 0xaddf, 0x2, 0x0, 0x0)
r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r9}, 0x18)
setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff})
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48eb95d4007253000000060a01040000000000000000040900dbbe3e8a010073797a3100000000140004801000018009000100680900020300000032000000000100000000000200"/101], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
io_setup(0x8f0, &(0x7f0000002400))
symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000002340)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x0, @fd=r7, 0x8006, &(0x7f0000000300)=""/210, 0xd2, 0x2, 0x1})
readlink(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000005c0)=""/15, 0xf)

41.876980461s ago: executing program 8 (id=3455):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
io_setup(0x8, &(0x7f0000000000)=<r1=>0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x20000000000000e2, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_cancel(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x33c4, r0, &(0x7f0000000280)="ac1987845c385bb27ee7e68510e7c18907ca42dbf0e4ae6e0f8d04213717815317fa21c896c8c72872d880521cd1d12f2120b68bd7328848a7193f349e022039bdd9f2aebadd298d7e163b690234f78b1d2657079044377e2fef37f72eca10df3cab49deaf2188793f8e076de5ad8f507ca276d8cb62e69ee902d30927e17bb1819bf6d52be99c8cbd8221ee0f8e6ef9e0203b44950a903c5acff7fc6cf92f4eb6260511e723558e8f4e5d7a34ddb20d7cebd4c1c3f6f80c73fb4f09dbc623a64a98f4e18a7b343eedd898e4a2c6115585e082ed76bcdddfe398413244a4e857", 0xe0, 0x4, 0x0, 0x3, r2}, &(0x7f0000000200))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x22883, 0x0)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x10000015})
poll(&(0x7f0000000240)=[{r4, 0x100}], 0x1, 0x9)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000008000000020000000400000005"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$packet(0x11, 0xa, 0x300)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000082aaaaaaaaaaaa88a8000081"], 0x0)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48)

41.478746152s ago: executing program 8 (id=3459):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x8205, &(0x7f0000000080)={[{@user_xattr}]}, 0x81, 0x633, &(0x7f0000000600)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
setreuid(0xee01, 0x0)
r2 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2001000012001307"], 0x120}}, 0x0)
setns(r3, 0x24020000)
mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2200830, 0x0)

41.048580456s ago: executing program 8 (id=3463):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000340)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@barrier_val={'barrier', 0x3d, 0x8e}}, {@nojournal_checksum}, {@errors_remount}, {@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x109}}, {@init_itable_val={'init_itable', 0x3d, 0x460a}}]}, 0x5, 0x504, &(0x7f0000002580)="$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") (async)
fcntl$notify(0xffffffffffffffff, 0x402, 0x80000005) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f0000001040)={0x8, {"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", 0x1000}}, 0x1006)
creat(&(0x7f0000000300)='./bus\x00', 0x0) (async)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7}, 0x18) (async)
sendmsg$kcm(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000680)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600a40003401c000100035c0461c1d67f6f94007134cf6ef68000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) (async)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) (async)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c6ffffffff00009e63bdbcefbde78439753abd950100002a001200ff0000000000000000000000000000000000000000000000000000bc00", "b7326736181c208220000000b9000000000000000000f0fffffffff2120100", [0x4, 0x5]}) (async)
fadvise64(r0, 0x14, 0x0, 0x4)

40.691499934s ago: executing program 8 (id=3466):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = accept(0xffffffffffffffff, &(0x7f0000000280)=@ax25={{0x3, @rose}, [@default, @default, @default, @remote, @remote, @bcast, @bcast, @rose]}, &(0x7f0000000080)=0x80)
getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000000300)={'HL\x00'}, &(0x7f0000000340)=0x1e)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000020701f0ffffff000000000003000005080005400000000208000540000000010c00024000000000000000080900010073797a30000000000c000f8008000140000000bd0c000640000000000000000f0c00034000000000000050008b8e35244012e42bc150e16a6aa85fa2983ab4d894902dfc7be94ff2bfd332bceb59240437"], 0x60}, 0x1, 0x0, 0x0, 0x20004810}, 0x844)

40.642893008s ago: executing program 36 (id=3466):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = accept(0xffffffffffffffff, &(0x7f0000000280)=@ax25={{0x3, @rose}, [@default, @default, @default, @remote, @remote, @bcast, @bcast, @rose]}, &(0x7f0000000080)=0x80)
getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000000300)={'HL\x00'}, &(0x7f0000000340)=0x1e)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000020701f0ffffff000000000003000005080005400000000208000540000000010c00024000000000000000080900010073797a30000000000c000f8008000140000000bd0c000640000000000000000f0c00034000000000000050008b8e35244012e42bc150e16a6aa85fa2983ab4d894902dfc7be94ff2bfd332bceb59240437"], 0x60}, 0x1, 0x0, 0x0, 0x20004810}, 0x844)

28.802107851s ago: executing program 0 (id=3569):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kfree\x00', r3}, 0x18)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000039000900000000000000000001000000040000000c0001800600000005470000080002"], 0x38}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000ffffffff390000001c000d8118"], 0x3c}, 0x1, 0x0, 0x0, 0x4000065}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000000040), 0x840, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=rdma'])

28.582187688s ago: executing program 0 (id=3572):
unshare(0x6a040000)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48004}, 0x0)
sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000400)='itimer_state\x00'}, 0x18)
setitimer(0x2, 0x0, 0x0)
r2 = socket(0x15, 0x5, 0x0)
getsockopt(r2, 0x200000000114, 0x271c, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r2)
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x1a4, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x138, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "2c3b3c0771883b5289350e799eb534c0884aae630dc26b8e218f"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "5c1e295caff0f7112399f4af684d5c23d896b4e5131e7f736873ec614b789549a73b00e2"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x94, 0x3, "a5c1a93255aa742519c832d7c121f9ec8574807f96f4eb60ec1f299a2968e321c8145c27e8d5a7626071bef3a450fbbaab0a25a443bcf9d53da378e1ad132fe43c32ab278a221f2a3c002cd771cef30b6d3682b255e06250ca5a969411f652a2693474c7cde95f2a36ac76a129948a841a7a2250fa7d2ba79e9b03ce0145735d0e7fcc328806f573efdabf3104da4e9c"}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa5d7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9e7}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4000044}, 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x70bd29}, 0x10}}, 0x0)

27.682079279s ago: executing program 9 (id=3580):
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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")
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000000100)='.\x00', &(0x7f0000001440), 0x200800, &(0x7f0000000080)={'trans=rdma,', {'port', 0x3d, 0x4e20}})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a300000000008000a40ffffffff580000000c0a010100000000000000000a0000060900020073797a30000000000900010073797a31000000012c0003802800008004000180200007800e000100636f6e6e6c696d69740000000c000280080001"], 0xbc}, 0x1, 0x0, 0x0, 0x4000851}, 0x40)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000a1e)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r6)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x406c450}, 0x0)

27.447742968s ago: executing program 9 (id=3585):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0)
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000040), &(0x7f00000003c0)}, 0x20)
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file2\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRESHEX], 0x10, 0x121f, &(0x7f0000000600)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1b00403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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")
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a000000000000000000"], 0x3c}}, 0x0)
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00<r\xe9\x9cD\x90\xce\xe1\xc5\x85=\\!\xbbQ\xde\xc3\xe3\x7f\xcf\x1f\x17G\xa6\x13\xae\x92 \x1c\xbf\xfa\xe8e\x8cD\"\xa3w')

27.02656886s ago: executing program 0 (id=3597):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xfff2}, {0xb}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x100000000000000, 0x4004140}, 0x0)

26.716728185s ago: executing program 0 (id=3599):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x8205, &(0x7f0000000080)={[{@user_xattr}]}, 0x81, 0x633, &(0x7f0000000600)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
setreuid(0xee01, 0x0)
r2 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2001000012001307"], 0x120}}, 0x0)
mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2200830, 0x0)

26.451659996s ago: executing program 0 (id=3608):
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb351)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x9000}], 0x1, 0x7000, 0x7, 0x1e)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './bus\x00'})
read$watch_queue(r0, &(0x7f0000000000)=""/18, 0x12)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7}, 0x18)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x670, 0x5, 0x510, 0x0, 0x228, 0xffffffff, 0x2e8, 0x3d0, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0xffffff00, 0xff], 0x7, 0x1, 0x5c, 0x4e20, 0x4e22, 0x4e24, 0x4e24, 0x804, 0x20c0}, 0x80, 0x2}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x2f, @rand_addr=0x64010100, @empty, @gre_key=0x1, @icmp_id=0x67}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0x10, "89ce", 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x40}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x16, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@private1, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @rand_addr, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0xffff, 0xb7, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x1e)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18)
r6 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
write$selinux_access(r6, &(0x7f00000004c0)={'system_u:object_r:qemu_device_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5', 0x20, 0x401}, 0x5d)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x27}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='io_uring_register\x00', r7}, 0x10)
r8 = io_uring_setup(0xf08, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0})
io_uring_register$IORING_UNREGISTER_EVENTFD(r8, 0x5, 0x2000000, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x15, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="dbcd00fe5100000071101a000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x67, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]})
r9 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r10 = socket$caif_stream(0x25, 0x1, 0x5)
copy_file_range(r3, 0x0, r10, &(0x7f0000000180), 0x6, 0x0)
r11 = dup(r9)
write$UHID_INPUT(r11, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006)

26.329555675s ago: executing program 0 (id=3610):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x37, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18)
r3 = socket(0xa, 0x5, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000680)='syzkaller\x00', 0xa, 0x1016, &(0x7f0000001880)=""/4118, 0x41000, 0x28}, 0x94)
sendmsg$inet_sctp(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xfffd}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa0000000020000000000000008400000008000000200100"/56], 0x38, 0x4855}, 0x24000052)
syz_usbip_server_init(0x4)
syz_usbip_server_init(0x2)

26.309515127s ago: executing program 37 (id=3610):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x37, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18)
r3 = socket(0xa, 0x5, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000680)='syzkaller\x00', 0xa, 0x1016, &(0x7f0000001880)=""/4118, 0x41000, 0x28}, 0x94)
sendmsg$inet_sctp(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xfffd}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa0000000020000000000000008400000008000000200100"/56], 0x38, 0x4855}, 0x24000052)
syz_usbip_server_init(0x4)
syz_usbip_server_init(0x2)

25.77290638s ago: executing program 9 (id=3612):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="85000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0)
r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0xfffffffffffffff4}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10)
write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000010000000000000800040001000000", 0x24)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, r2, 0xa, 0x0, @val=@netfilter={0x3, 0x1, 0x5, 0x1}}, 0x20)
syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file3\x00', 0x1004081, &(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x10, 0x7f4, &(0x7f0000000d80)="$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")
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r8}, 0x18)
openat$tun(0xffffffffffffff9c, 0x0, 0x80400, 0x0)
open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r9}, 0x18)
r10 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
preadv(r10, 0x0, 0x0, 0x100013c, 0x20000000)

25.313998256s ago: executing program 9 (id=3618):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x8205, &(0x7f0000000080)={[{@user_xattr}]}, 0x81, 0x633, &(0x7f0000000600)="$eJzs3c9rHNcdAPDvzGplyVYruxRTm5YKerChWD9cU7c92b7UB0MN9aGUHiwsyRVe2cKSoXYNlqGHBhIIIdcQfMk/kHswueYWAkluOQecEBxySII3zOyMvKx25bWs3ZW9nw/s6s2bmX3vu6O3897Mzk4AQ2sqe0ojjkTE5SRismneRDRmThXLPf7m7pXskUS9/vevk0iKvHL5J8XfA9lTEjEWER+fi/hFZWu5a7fvXJuv1RvuRcysr6zOrN2+c2J5Zf7q4tXF63Mn/3Tq9Oyf507N7UqcZVznL/zt12/8799/XPqkdiKJM3Gp+t+F1jh2y1RMxZMixOb8kYg4nSXavC8vmzKEZMD1YGcqxf9jNSIOx2RUYt/mvMlYfn2glQN6ql6JqANDKtls/9XBVgTos7IfUI7tezEO3ssenW0MgLbGP9I4NhJj+dho/+MkHyeVsvHuwV0oPyvjx7tH38ke0eE4xMgulNPJxv2I+FW7+JO8bgfzozhZ/GmkTetl6dmIGC3ei3SH5U+1TPf7/+954m/eDlm8Z4q/Wf65HZY/6PgBGE4PzxY78o1s6un+L+sZlv2faOn/JMW5odZ9104Mev/Xuf9X7u/H8mPkaUs/LHsPLrZ/yWprxhevnX+rU/nN/b/skZVf9gX74dH9iKMt8f8/78wlm9s/adP/zRa53GUZf/30q/Od5g06/vqDiGNtxz9Pz2hlqZn1ldUyr+X85MzScm1xtvHctowPPvrXe53KH3T82faPDvFvt/2zvNUuy3j/4oOVTvMmnhl/+uVocilPjRY5/5lfX785FzGaXCgWaco/ubli24+ncpnyNbL4j/+uffvfJv58Q290Gf/qP649bqS2niXtevtv+VTJPal3WYdOsvgXdrj93+yyjO/+ees3LVnjZWK7+Me3vlTS7XsOAAAAAAAAwyjNz8Em6fRmOk2npxvX8P4y9qe1G2vrv1+6cev6QsTx/PuQ1bQ80z3ZmE6y6bni+7Dl9MmW6T9ExKGIeLsynk9PX7lRWxh08AAAAAAAAAAAAAAAAAAAALBHHCiu/y/vU/1tpXH9f1fWD/e4dkDP9fIGc8Depv3D8Mrbfxd3cN3Xh7oA/WX/D8NL+4fhpf3D8NL+YXg12n8XBwCBV479Pwwv7R+Gl/YPAAAAAK+kQ799+HkSERt/Gc8fmdFiXnWgNQN6rbmNj3W1xlTP6gL0V6WvqwF7yeapf9/+haHT1Rj/++LHAXtfHWAAknaZeeegvn3jf9h2TQAAAAAAAAAAAACgB44dcf0/DKs0Pnyexev1+r3eVQboqxe4kN9vAMBLzk//w/AyxgeedRV/x98GdP0/AAAAAAAAAAAAAPTNRP5I0uniFqATkabT0xE/i4iDUU2WlmuLsxHx84j4rFLdl03PDbrSAAAAAAAAAAAAAAAAAAAA8IpZu33n2nyttnizOfHDlpweJ8q7i3WzcIc6v0iivAtqP0PuNhFJ/wsdj4i9EHtvEiNNOUnERrbl90TFbq7FnqhGmldjgB9KAAAAAAAAAAAAAAAAAAAwpJquPW7v6Lt9rhEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9N/T+//vPJE843UGHSMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8HL6KQAA//9SFzeV")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
setreuid(0xee01, 0x0)
r2 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2001000012001307"], 0x120}}, 0x0)
mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2200830, 0x0)

24.509456969s ago: executing program 9 (id=3620):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = getpgrp(0x0)
r3 = syz_pidfd_open(r2, 0x0)
r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800})
io_uring_enter(r4, 0x847ba, 0x2000, 0xe, 0x0, 0x0)
fremovexattr(r3, &(0x7f0000000280)=@known='trusted.overlay.nlink\x00')

23.926214915s ago: executing program 9 (id=3629):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e)
renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r2 = io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x3, 0x4000})
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x0, 0x1}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18)
umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x800000000000000)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000a9b3076b82ac72ba0f1f831facedc6817f8d2c592124b220dbac858d51a28ea04e4afd612cfbbf87005daec741d85157dc5d6bd0052e196a859d399f8c32029f55865877c71f75d4b49634e432c70ce8933ffc73f57903c14f57203a4297abf932fee69808db837e8d632467706d211d718e3cff07d6444fb33aa62790815417a78e0fb9fc7b465ee6cbea82e171796a68ad63774079d08326c9bbda79", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002600000007"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)
syz_emit_ethernet(0x3a, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaa6cf6566994c681001000080045b4002800000000a3069078ac1414bbac1414aa4e204001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010000090780000da69533d18d39659fa68d2766e5c98c52162800ac923559a7813ce0f8284"], 0x0)

23.892101857s ago: executing program 38 (id=3629):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e)
renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r2 = io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x3, 0x4000})
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x0, 0x1}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18)
umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x800000000000000)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000a9b3076b82ac72ba0f1f831facedc6817f8d2c592124b220dbac858d51a28ea04e4afd612cfbbf87005daec741d85157dc5d6bd0052e196a859d399f8c32029f55865877c71f75d4b49634e432c70ce8933ffc73f57903c14f57203a4297abf932fee69808db837e8d632467706d211d718e3cff07d6444fb33aa62790815417a78e0fb9fc7b465ee6cbea82e171796a68ad63774079d08326c9bbda79", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002600000007"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)
syz_emit_ethernet(0x3a, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaa6cf6566994c681001000080045b4002800000000a3069078ac1414bbac1414aa4e204001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010000090780000da69533d18d39659fa68d2766e5c98c52162800ac923559a7813ce0f8284"], 0x0)

5.716262599s ago: executing program 1 (id=3869):
r0 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0)
sendmsg$kcm(r4, 0x0, 0x0)
mount$bpf(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000001c0), 0x0, &(0x7f00000005c0)={[{}]})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x964, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth1_to_bond\x00', <r7=>0x0})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x5, 0x0, r1, 0x69d, '\x00', 0x0, r0, 0x4, 0x5, 0x5}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4c}}, &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x81, &(0x7f0000000480)=""/129, 0x40f00, 0x60, '\x00', r7, 0x1a, r0, 0x8, &(0x7f00000003c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x1, 0x7d, 0x8001}, 0x10, 0x27c06, r6, 0x0, &(0x7f0000000600), 0x0, 0x10, 0xffff0000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setresuid(0xee00, 0xee00, 0x0)
syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0xf5ea, 0x3180, 0x8000, 0x400252}, &(0x7f0000000640)=<r8=>0x0, &(0x7f0000000340))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x0, &(0x7f0000000000)=0x8, 0x0, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
splice(r9, 0x0, r10, 0x0, 0x8000f28, 0x0)

3.206254077s ago: executing program 6 (id=3895):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x18)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x14, 0x5a, 0x1}, 0x14}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x80, 0x4908d13283d17e5f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3001a}, [@FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x4c}}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x18) (async)
socket(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x14, 0x5a, 0x1}, 0x14}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x80, 0x4908d13283d17e5f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3001a}, [@FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x4c}}, 0x40000) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) (async)

3.205781287s ago: executing program 6 (id=3896):
unshare(0x6a040000)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48004}, 0x0)
sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x18)
setitimer(0x2, 0x0, 0x0)
r3 = socket(0x15, 0x5, 0x0)
getsockopt(r3, 0x200000000114, 0x271c, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r3)
sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x1a4, r4, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x138, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "2c3b3c0771883b5289350e799eb534c0884aae630dc26b8e218f"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "5c1e295caff0f7112399f4af684d5c23d896b4e5131e7f736873ec614b789549a73b00e2"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x94, 0x3, "a5c1a93255aa742519c832d7c121f9ec8574807f96f4eb60ec1f299a2968e321c8145c27e8d5a7626071bef3a450fbbaab0a25a443bcf9d53da378e1ad132fe43c32ab278a221f2a3c002cd771cef30b6d3682b255e06250ca5a969411f652a2693474c7cde95f2a36ac76a129948a841a7a2250fa7d2ba79e9b03ce0145735d0e7fcc328806f573efdabf3104da4e9c"}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa5d7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9e7}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4000044}, 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x70bd29}, 0x10}}, 0x0)

2.360238843s ago: executing program 6 (id=3905):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740"], 0x64}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e0000401080002006401010108000740000000001c001080080003400000013308000240000000cd08000140000005ff"], 0x80}}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000001)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x1, '\x00', 0x0, r5}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r6}, 0x4)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x28}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000040)="40d174b28bf781c274386d178550", 0x0, 0x1200803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r5, 0x40505330, &(0x7f00000003c0)={{0x9}, {0xf0, 0xe2}, 0x15, 0x0, 0xe})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10)
r11 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d1605040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r12=>r8, {0x4}}, './file0\x00'})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r12, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f00000002c0)={'erspan0\x00', <r13=>0x0, 0x700, 0x8, 0x8, 0x8, {{0xb, 0x4, 0x0, 0x6, 0x2c, 0x66, 0x0, 0x9, 0x29, 0x0, @broadcast, @multicast1, {[@rr={0x7, 0x17, 0x1e, [@multicast1, @broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}]}}}}})
r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xb, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', r13, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='kmem_cache_free\x00', r14}, 0x18)

2.310770578s ago: executing program 2 (id=3907):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)

2.309486438s ago: executing program 1 (id=3908):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
pipe2$9p(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r5}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10)
syz_io_uring_setup(0x114, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0)

2.234117684s ago: executing program 2 (id=3911):
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095", @ANYRESOCT, @ANYRES32=r0], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10)
r3 = socket(0x1, 0x4, 0xffffffe1)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="020300030f0000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c00000080030005000000000002004e22ac14140a00000000000000000200130002"], 0x78}, 0x1, 0x7}, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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")
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r8, 0x20, &(0x7f0000000100)={0x0, 0x0, <r9=>0x0, 0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r9, 0x4)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000880)={'erspan0\x00', <r10=>0x0, 0x10, 0x8000, 0x1, 0xad54, {{0x2c, 0x4, 0x0, 0x33, 0xb0, 0x68, 0x0, 0x8, 0x29, 0x0, @loopback, @multicast2, {[@end, @end, @noop, @cipso={0x86, 0x3f, 0x3, [{0x5, 0x12, "cd33293ec64e56e154cbfe5b07f8b215"}, {0x2, 0x5, "16abca"}, {0x7, 0x3, "94"}, {0x0, 0xe, "47ccb50fdf50a886595d5d9b"}, {0x2, 0x11, "962767bdc4d9eb7e4bb3481e1af5ec"}]}, @timestamp_prespec={0x44, 0xc, 0xec, 0x3, 0x1, [{@multicast2}]}, @timestamp_prespec={0x44, 0x34, 0x4d, 0x3, 0x4, [{@multicast1, 0xce}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x400000}, {@rand_addr=0x64010100, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x28}}, {@multicast1, 0x7}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x14, 0xf3, 0x1, 0x5, [{@broadcast, 0x2000000}, {@broadcast, 0x100}]}]}}}}})
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbb91f7582ab314be"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000340), 0x10, r9, r2}, 0x94)
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000300)=r11, 0x4)
sendmsg$nl_xfrm(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000580)=@allocspi={0xf8, 0x28, 0x339, 0x0, 0x0, {{{@in=@multicast1, @in6=@ipv4={'\x00', '\xff\xff', @local}}, {@in, 0x0, 0x32}, @in6=@loopback, {}, {0x0, 0xffffffff}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x4}}, 0xf8}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00')
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, 0x0}, 0x20000000)

2.136975871s ago: executing program 2 (id=3913):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000300)='kfree\x00', r0}, 0x18)
openat(0xffffffffffffff9c, 0x0, 0xa0142, 0x0)
timer_settime(0x0, 0x1, 0x0, &(0x7f0000000700)={{0x0, <r1=>0x0}})
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, <r3=>0xffffffffffffffff}, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYRES64=r1], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000002c0)={{r4}, 0x6, 0x7ff, 0x9})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kmem_cache_free\x00', r4}, 0x18)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x3}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getpid()
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40200}, 0x94)
r9 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0)
syz_clone(0x6063100, 0x0, 0xfffffffffffffe61, 0x0, 0x0, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000060bc06128009000100626f6e64000038000c000280000000007d7e9a3d"], 0x3c}}, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r7, 0x4008240b, &(0x7f0000000680)={0x4, 0x80, 0x6, 0x94, 0x10, 0x4, 0x0, 0x7, 0x80001, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0xf81e, 0x1}, 0x10108, 0xffffffffffffff65, 0x78000, 0x3, 0x1, 0x8, 0x4, 0x0, 0x3, 0x0, 0x9})

1.906235379s ago: executing program 2 (id=3916):
unshare(0x6a040000)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48004}, 0x0)
sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x18)
setitimer(0x2, 0x0, 0x0)
r3 = socket(0x15, 0x5, 0x0)
getsockopt(r3, 0x200000000114, 0x271c, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r3)
sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x1a4, r4, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x138, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "2c3b3c0771883b5289350e799eb534c0884aae630dc26b8e218f"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "5c1e295caff0f7112399f4af684d5c23d896b4e5131e7f736873ec614b789549a73b00e2"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x94, 0x3, "a5c1a93255aa742519c832d7c121f9ec8574807f96f4eb60ec1f299a2968e321c8145c27e8d5a7626071bef3a450fbbaab0a25a443bcf9d53da378e1ad132fe43c32ab278a221f2a3c002cd771cef30b6d3682b255e06250ca5a969411f652a2693474c7cde95f2a36ac76a129948a841a7a2250fa7d2ba79e9b03ce0145735d0e7fcc328806f573efdabf3104da4e9c"}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa5d7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9e7}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4000044}, 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x70bd29}, 0x10}}, 0x0)

1.894445461s ago: executing program 4 (id=3917):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2)
socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f00000003c0)) (async)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000fc0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x80000000}}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@dax}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@abort}, {@user_xattr}, {@bh}, {@errors_remount}], [{@obj_type={'obj_type', 0x3d, '/('}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}, 0x1, 0x55f, &(0x7f0000000580)="$eJzs3d9rU+cbAPDnpK2/v18riGxjjIIXczhT2+6Hg124y7HJhO3ehfZYpKmRJhXbCdOLebObIYMxJozdb/e7lP0D+yuETZAhZbvYTcZJT2q0SRNrtNF8PnDkfXNO+p4n73le35M3IQEMrYnsn0LEyxHxTRJxMCKSfN9o5Dsn1o9bu391NtuSqNc//StpHJfVm3+r+bz9eeWliPjtq4jjhc3tVldWF0rlcrqU1ydri5cmqyurJy4slubT+fTi9MzMqbdnpt97952+xfrG2X++/+T2h6e+Prr23S93D91M4nQcyPe1xvEErrVWJmIif03G4vQjB071obFBkuz0CbAtI3mej0U2BhyMkTzrgRfflxFRB4ZUIv9hSDXnAc17+z7dBz837n2wfgO0Of7R9fdGYk/j3mjfWvLQnVF2vzveh/azNn7989bNbIv+vQ8B0NW16xFxcnR08/iX5OPf9p3s4ZhH2zD+wbNzO5v/vNlu/lPYmP9Em/nP/ja5ux3d879wtw/NdJTN/95vO//dWLQaH8lr/2vM+caS8xfKaTa2/T8ijsXY7qy+1XrOqbU79U77Wud/2Za135wL5udxd3T3w8+ZK9VKTxJzq3vXI15pO/9NNvo/adP/2etxtsc2jqS3Xuu0r3v8T1f9p4jX2/b/gxWtZOv1ycnG9TDZvCo2+/vGkd87tb/T8Wf9v2/r+MeT1vXa6uO38eOef9NO+x6KP3q//nclnzXKu/LHrpRqtaWpiF3Jx5sfn37w3Ga9eXwW/7GjW49/7a7/vRHxeY/x3zj886s9xd+t/5/CImsW/9xj9f/jF+589MUP248/6/+3GqVj+SO9jH+9nuCTvHYAAAAAAAAwaAoRcSCSQnGjXCgUi+uf7zgc+wrlSrV2/Hxl+eJcNL4rOx5jheZK98GWz0NM5Z+HbdanH6nPRMShiPh2ZG+jXpytlOd2OngAAAAAAAAAAAAAAAAAAAAYEPs7fP8/88fITp8d8NT5yW8YXl3zvx+/9AQMJP//w/CS/zC85D8ML/kPw0v+w/CS/zC85D8ML/kPAAAAAAAAAAAAAAAAAAAAAAAAAAAAfXX2zJlsq6/dvzqb1ecurywvVC6fmEurC8XF5dnibGXpUnG+Upkvp8XZymK3v1euVC5NTcfylclaWq1NVldWzy1Wli/Wzl1YLM2n59KxZxIVAAAAAAAAAAAAAAAAAAAAPF+qK6sLpXI5XVJQ2FZhdDBOY3UhYiBO40Up7PTIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/BcAAP//8NI25Q==") (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r0, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd6, &(0x7f0000000400)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x67, 0x8, 0x8, &(0x7f0000000b00)}}, 0x10) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x95b13d39eae26fda, &(0x7f0000001200)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000090000007b8af8ff000000000000f800530000000000000076113fb187fd4f3ad01ac7785f48540000"], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x41000, 0x1}, 0x94) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xdb) (async)
r4 = accept4$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000340)=0x14, 0x800)
getsockopt$packet_int(r4, 0x107, 0x13, &(0x7f00000004c0), &(0x7f0000000540)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c80)={&(0x7f0000000cc0)='rxrpc_call\x00', r1}, 0x18)
r5 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10)
connect$vsock_stream(r5, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) (async)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
getsockopt$sock_int(r2, 0x1, 0x4, 0x0, &(0x7f0000000500)) (async)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0) (async)
write$P9_RXATTRCREATE(r0, &(0x7f0000000300)={0x7, 0x21, 0x1}, 0x7) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x3f, 0x7fff4002}]}) (async)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, 0x0) (async)
mprotect(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1) (async)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7d, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x1002}, 0x18) (async)
r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0)
ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0x7000000) (async)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d40), r0)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)=ANY=[@ANYBLOB=', \x00\x00', @ANYRES16=r8, @ANYBLOB="00012abd7000fedbdf250b000000180001801400020076657468305f746f5f626f6e64000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x24040080) (async)
r9 = semget$private(0x0, 0x7, 0x191)
semtimedop(r9, &(0x7f0000000200)=[{0x4, 0xffff, 0x2000}, {0x4, 0x3, 0x1800}], 0x2, 0x0)

1.822132756s ago: executing program 4 (id=3918):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0ff5b14104fe62cc60e413905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf2364149215108333719acd97cfa107d40224edc5465a93df8513a32ec450bebc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe511195418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4929330142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da8c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000dd11e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15f2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f000010000000000000905ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400bee3dfc8fb24f67c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341b74abaa7c95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb232bbdb9dc33cbd7643866fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595270fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f76dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d2e959efc71f665c4d75cf2458e3322c9062ece84c99a061997a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99f0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d164118e4cbe02400000000ff0700000000cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a4867217373934bbd42dcb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcd62981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba495aea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b60000000000001700d6d5210d7560eb92d6a97a27602b81f76386f1535b1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294059323e7a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd704e4214de5946932d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1fc8df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1785eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be2f5656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fd78f9743af932cd6db49a47613808bad959719c0000000000378a921c7f7f6933c2e24c7e800003c9e8095e02985f28de0bbc76d58dd92606b1ef6486c85fa3e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6968d12418a4d2a0d086d8438d415d713acebc5b014e61a543a5a391f03daca80f08f0e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e112645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c000000000000000000000000000000a1c3da144589dcaddb71cf9374843e23f992a237a9040747e0434a8a643990b4059a98411ce867d1af7e8ea89f49e6f564d4dce8a7d6939a9214a7f39e83bd247e03a09dba000000000000000000000000aaf033d47249c8444bc13844cbf1be617d82b269e5ea0c0d525603c0ec543ea581f63893ae414a6683e941fdbdff03cfc5f8744583c0aa766a65321f907927a59d75b47f06895e8471ebc2840ce5bd054df223fb09b9c739ad64cfcfd2d498b0f11056f6c40874cb977c99b6bc1a8732198a17e610082b7ce0365f271b11d4b4a3d4c7d0bb273f406ecd4b26c93151c30f5a269991402d109becb1b9bafcb2b47e940000000000e540d8b0db3774effb7469a21f96e2594b2973ebf7a1bd9ace2ed4d6eb1735f85885be5be74dc2ea5d7d499bd28271b98f187f5879b16b409a04d78175cc8d0f707c822805d7011ed4b22419186dd2b22aadf15828db2ca19d79e1bf2f7989237ee5cb2e1eb7b2bfc92d3aa95a26f060935c4fee8b2d7d0bf3c6d82d04329164bd4ee0b8060183f36762b0440d9082d7c8b06e4c2024f77e1018758d28e7ee290f32a48bfc2aa10b3dba9bff00d2410f3477a8e0df689c880dc9a677cfaa16603527c06625a3363744cea5f2d350224cc0fea76c72ca08507235c67346722f20690fde0790f040f5fd3eff75f9b291cc5e9c686ebaadbe756c6fa039ff441e427ed12578d5cb041ebf729cfaa575cc852fbdb54e60435e6d62b9d270433b220ed9ff1ff042b8d3d866231c460765"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000305ff810000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="1748000040000200280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0)

1.674281208s ago: executing program 4 (id=3919):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$inet6_buf(r1, 0x29, 0x1b, &(0x7f0000000340)="1b45ffc2e2bf70a088f38bf5086941050b048134", 0x14)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000000)=ANY=[@ANYRESOCT=r2, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000240)="f2f64405eeca36ed9c5e40488000", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000080)={'dummy0\x00'})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10)
r8 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$selinux_access(r8, &(0x7f0000000580)={'system_u:object_r:shell_exec_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x4}, 0x4e)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x20f})

1.583632575s ago: executing program 4 (id=3920):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x550, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x10000}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18)
socket$key(0xf, 0x3, 0x2)
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000800)='ext4_allocate_blocks\x00'}, 0x18)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0)

1.466228464s ago: executing program 6 (id=3921):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)

1.354367683s ago: executing program 1 (id=3922):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000400)={0x1, 'vlan0\x00'})
mmap$IORING_OFF_SQES(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x4, 0x1010, r2, 0x10000000)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]})
close_range(r4, 0xffffffffffffffff, 0x0)

1.350607493s ago: executing program 1 (id=3923):
unshare(0x6a040000)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x18)
setitimer(0x2, 0x0, 0x0)
r3 = socket(0x15, 0x5, 0x0)
getsockopt(r3, 0x200000000114, 0x271c, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r3)
sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x1a4, r4, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x138, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "2c3b3c0771883b5289350e799eb534c0884aae630dc26b8e218f"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "5c1e295caff0f7112399f4af684d5c23d896b4e5131e7f736873ec614b789549a73b00e2"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x94, 0x3, "a5c1a93255aa742519c832d7c121f9ec8574807f96f4eb60ec1f299a2968e321c8145c27e8d5a7626071bef3a450fbbaab0a25a443bcf9d53da378e1ad132fe43c32ab278a221f2a3c002cd771cef30b6d3682b255e06250ca5a969411f652a2693474c7cde95f2a36ac76a129948a841a7a2250fa7d2ba79e9b03ce0145735d0e7fcc328806f573efdabf3104da4e9c"}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa5d7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9e7}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4000044}, 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x70bd29}, 0x10}}, 0x0)

1.233778242s ago: executing program 3 (id=3924):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000001980)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x5}}, './file0\x00'})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pipe2$9p(0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
socket$key(0xf, 0x3, 0x2)
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$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")
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
pwritev2(r1, &(0x7f0000000100), 0x0, 0x5412, 0x0, 0x0)

716.933313ms ago: executing program 3 (id=3925):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x8205, &(0x7f0000000080)={[{@user_xattr}]}, 0x81, 0x633, &(0x7f0000000600)="$eJzs3c9rHNcdAPDvzGplyVYruxRTm5YKerChWD9cU7c92b7UB0MN9aGUHiwsyRVe2cKSoXYNlqGHBhIIIdcQfMk/kHswueYWAkluOQecEBxySII3zOyMvKx25bWs3ZW9nw/s6s2bmX3vu6O3897Mzk4AQ2sqe0ojjkTE5SRismneRDRmThXLPf7m7pXskUS9/vevk0iKvHL5J8XfA9lTEjEWER+fi/hFZWu5a7fvXJuv1RvuRcysr6zOrN2+c2J5Zf7q4tXF63Mn/3Tq9Oyf507N7UqcZVznL/zt12/8799/XPqkdiKJM3Gp+t+F1jh2y1RMxZMixOb8kYg4nSXavC8vmzKEZMD1YGcqxf9jNSIOx2RUYt/mvMlYfn2glQN6ql6JqANDKtls/9XBVgTos7IfUI7tezEO3ssenW0MgLbGP9I4NhJj+dho/+MkHyeVsvHuwV0oPyvjx7tH38ke0eE4xMgulNPJxv2I+FW7+JO8bgfzozhZ/GmkTetl6dmIGC3ei3SH5U+1TPf7/+954m/eDlm8Z4q/Wf65HZY/6PgBGE4PzxY78o1s6un+L+sZlv2faOn/JMW5odZ9104Mev/Xuf9X7u/H8mPkaUs/LHsPLrZ/yWprxhevnX+rU/nN/b/skZVf9gX74dH9iKMt8f8/78wlm9s/adP/zRa53GUZf/30q/Od5g06/vqDiGNtxz9Pz2hlqZn1ldUyr+X85MzScm1xtvHctowPPvrXe53KH3T82faPDvFvt/2zvNUuy3j/4oOVTvMmnhl/+uVocilPjRY5/5lfX785FzGaXCgWaco/ubli24+ncpnyNbL4j/+uffvfJv58Q290Gf/qP649bqS2niXtevtv+VTJPal3WYdOsvgXdrj93+yyjO/+ees3LVnjZWK7+Me3vlTS7XsOAAAAAAAAwyjNz8Em6fRmOk2npxvX8P4y9qe1G2vrv1+6cev6QsTx/PuQ1bQ80z3ZmE6y6bni+7Dl9MmW6T9ExKGIeLsynk9PX7lRWxh08AAAAAAAAAAAAAAAAAAAALBHHCiu/y/vU/1tpXH9f1fWD/e4dkDP9fIGc8Depv3D8Mrbfxd3cN3Xh7oA/WX/D8NL+4fhpf3D8NL+YXg12n8XBwCBV479Pwwv7R+Gl/YPAAAAAK+kQ799+HkSERt/Gc8fmdFiXnWgNQN6rbmNj3W1xlTP6gL0V6WvqwF7yeapf9/+haHT1Rj/++LHAXtfHWAAknaZeeegvn3jf9h2TQAAAAAAAAAAAACgB44dcf0/DKs0Pnyexev1+r3eVQboqxe4kN9vAMBLzk//w/AyxgeedRV/x98GdP0/AAAAAAAAAAAAAPTNRP5I0uniFqATkabT0xE/i4iDUU2WlmuLsxHx84j4rFLdl03PDbrSAAAAAAAAAAAAAAAAAAAA8IpZu33n2nyttnizOfHDlpweJ8q7i3WzcIc6v0iivAtqP0PuNhFJ/wsdj4i9EHtvEiNNOUnERrbl90TFbq7FnqhGmldjgB9KAAAAAAAAAAAAAAAAAAAwpJquPW7v6Lt9rhEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9N/T+//vPJE843UGHSMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8HL6KQAA//9SFzeV")
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
syz_pidfd_open(0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2001000012001307"], 0x120}}, 0x0)
mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2200830, 0x0)

689.470955ms ago: executing program 6 (id=3926):
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x34}, 0x18)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x3}, {0x0, 0x100000}, &(0x7f0000000440)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1, 0x60, 0x4}}], 0x48, 0x8004}, 0x0)
r3 = creat(&(0x7f0000000100)='./bus\x00', 0x8)
fallocate(r3, 0x0, 0x0, 0x1000f4)
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x1)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x18)
r7 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r7, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
r8 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
r9 = fsmount(r8, 0x0, 0x0)
fchdir(r9)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

688.620975ms ago: executing program 4 (id=3927):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x48, &(0x7f0000000280)=ANY=[@ANYBLOB="8809"], 0x10)
getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1813000007000000eab4040000000000001000000000", @ANYRES32, @ANYBLOB="827400"/19, @ANYRES32, @ANYRES32], 0x50)
r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000040)={0x9, 0x8, 0x0, 0x100, 0x8}, 0x14)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x8}, 0x20a8, 0x4005, 0x8000000b, 0x0, 0x3, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r7, 0x58, &(0x7f00000002c0)}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000305ff810000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="1748000040000200280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r3], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0)

665.466027ms ago: executing program 3 (id=3928):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040))
mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}})

602.160112ms ago: executing program 3 (id=3929):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r2, 0x0, 0xa}, 0x18) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000030900010073797a310000000054000000030a010400000000000000000100ffff0900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a31"], 0xe8}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$inet(r0, 0x0, 0x0) (async)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='scalable', 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) (async, rerun: 64)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x4000000, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0xfffffffe, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async, rerun: 64)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)

601.908512ms ago: executing program 6 (id=3930):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
prctl$PR_SET_NAME(0xf, &(0x7f00000014c0)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9\xd3F\xaa\xa2fUk@\xeb\xb5~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00')
socket(0x10, 0x803, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket(0x10, 0x3, 0x9)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"/3816], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @local, {[], {{0x4e24, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x3, 0x0, 0x3}}}}}}}, 0x0)
kexec_load(0x3, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x116094000, 0x41000000}], 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB="dc105b00"/23, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000f7ffffffffff17110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001600)={0x60, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd59}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}]}]}, 0x60}}, 0x11)
umount2(0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r2, @ANYBLOB="0008263d7000ffdbdf253a00000008000300", @ANYRES32=r8], 0xb8}, 0x1, 0x0, 0x0, 0x190}, 0x20000000)
sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="890200dcdf16000000080003", @ANYRES32=r8, @ANYBLOB="0c00990078e00000430000000a001a0008021100000000000a001a000802110000010000"], 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x50044881)
prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)

268.979858ms ago: executing program 4 (id=3931):
r0 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800)
sendmsg(r0, &(0x7f00000017c0)={&(0x7f0000000040)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x80, &(0x7f00000013c0)=[{&(0x7f00000000c0)="6cddba4859f35a3d0d5503fe97aa8c7655f9d09fc49fa6ed0789ae76e38c0eaa21b7363451f02199d84deeeb78bede", 0x2f}, {&(0x7f0000000100)="b0bc2cda1620e1ad11862a14aa86aa5696123721af3862356ee2c96575ff5788609f3b02dcdaafd8b9c411701e63be5651ebf987b3847cc5cde34c5a8c51bd4ae692d7d901c325b33da694b0de35bfc6b16c61db6e113eba48644afc49bbc502251e8a0b84e4b8ae64c1717765a8536005aa65e668cbf4298d2c53d199b2358cc0187420aaf013dd74708b5d87d1c30f4bd3f70175e2fece1d3c5cd2600087ea5a148ceeca04d1b2a282ea8899ee76229252684eab96ef4d474eaa47b44a0316aed8be85ecae23abf58b14f40d310401358b31a2423e727624059d45ab9bc9bcc9b22ab666b49ead03f814444614a077d4e0498a4afab753637ac033104fdc16088d0b27f915e95f7da67ff0169ba2d8b6d535173b8a87e213517e3a8da1c2134ccafc809e913f78ee2ec34bebcf95c995a8213d5a8b8fb9aaecf827b091ce3d61656fd202e042a3b46b0981622a19b48b8cac25585e7327db69e7ffcfc0fe8fc4b2fd9f5449c5d7c11ae5b12c65a92f115119f6720c1102e4011f7bceec7c9062186711303b64ff2013bd35e61ec54c466a0c92c3ad43950bd8ed465f0fce31a3ca6c32f6c520e1a1144d544cfda7eb973d52813110bb225e6afadb3f212dd64e704c3f8aa0f670f61d7df400538c019e142a19044d6b21ac93169c7cc53f3fd869c1c8858f386094b8bc4da80a646247bef7ec4f8a34367b366d309b81c30dd3198f5a9429368396514391838765c13f06113c405b530c201f59498bd1036395a5b52c1f80ee78d8aef96e6afa7f7d5ba6be57beace7427786d950c140c865695948c72a61153e308d7907d1d2490472b356906bda2e318f2d2ae883c863c970b867c2463a0b84ad067e9285791695a1fcd3acd8b77f33b98b805ab083ed0acf4c53f5d022e4cac6f6723ddf8d43ce7c5ca01b96ac0032e26c6e4987a468abdf1d440d55e860813ba088cc7b1ed57f9e04a5da4335806946eb11960f12ffcd092148d665eabe1fe3d0e25f8392823380b457b40a7fc9849d49ee17a736e04d191234d50a172bdf9137f09d6d3fd58b12d06a37aa845d569df08b1c4e30f4be77d3adc1f0213cd6b866bf061e12a355603c673af083767ed24199f7dc879e1499fd8cfdea630749983414677a90d338eec648f86a91f6127d76f3a50a33b7482f855d240b5d59eb3b8bca1f6462b79d45b2e492c2e2b578b8f1c18a56aee951927edb50a6543aabd70e1e408325a01a9fa5d0a24cce1c1fd62b400b34488c63609e7d713e17306d627dd66b29464c82b3f089ad8160dc8eb7bf1d22cfadcba534eb2ea3fbd950b59eeceed174a058f4388c439c6cc90f3ceb22a0578c7aae9a329ba4f924090c42832b9d3dfcb941101e2317bbe277eca321034cb04c0023e54ce8c687ef6f7eea985b7ed5356d8327b725a5f7834dac36b77f7e50ad3c7178557e0361fdcb65fe6bea44d81af61b8bfbc955ded1ac439b40b241fe284ce8f2c6ac7cf2dbe7f46d9b50359a4b69883d28c417904b5584b3dcaed1902cbacfaca1af8ecd87a3f28acb3ac39cb06e96fe062672adae4093d522a8bb66a1286f8bb6d50c78bcf8664ccafb824412bc6f2858a3bb1bacfa615acb3058a912878935bf54d2ef233b46f5cdd09aaa06b3c5e80a1ef53b1e2659a7f33ccd98acf2abb6dcfbb8b40f979e0c1b30c6eff419b13d598b7c997e290bdfe2c8d57299d76ac8aca04f8ad6784ebd4269b526d1a310509605487cb1a43dc5cd04864ec1eac3115d7119e8ddc741b29a93412b3e90ce9f41ec035d34f0a2615707a5057a9d186345fc33fae0e3cee8d7404bf96e83bc0f7dfa5946967d34acea7c8054ea1ac325ad449fbbc890cb276b2312c490ab7f68a61d618771a56c92b68a67ddd02cb6a1505d9a22a8763516ebcd4c3ed00246e27c0ce73951e4fa8f7b565712cca42c0dd2b3e863ceea164c3be1afd978447ecfc81e10fdfb3376388d64f35fcbb0d10926e4a0a67fb343f98fe098d33ae6bf77fc074c3d81194dc46bc175a4debdfbf56d6743009877119432be5c32fa648ff168c08e7a96c41057feddba1d9ddd6a43bc34db23eeb8d5e2ee0109599839f1096e7c429c58f29724e98375e96e5d0770ee14778793e111a043a470af940d6d7701e71f9a48b956f972b7b611d90935038b6f8ffe3784a5404d45d819a6d29151ef8998a0c4f020b90b7798d8741c1deeab21f47e50a2bfb8d788ba7d0d2c2be148c5ff8232b534ed2ab8d45fc5b390cc506ca551f7f09005ed35609c4a54546dc7f5551d6f55aded96691df97b417b9b61806de404b7e36579bf2e7108e73028d72892ba0f118557fe7cdfd7256036447c4410ebe5f0a01289c3fe3fc853eeface3d75ecfc046620a86071c58d099261278bd5d4e173a419fe2f5d251374bc021ce014f1402c4c333ded25fd5a6af046c775384a72fc11db538021ccd90d05c3e77750871d4f13a11346ab1ce0216fb15e416b66d79fe865f4842e7b9c3345118fe34f95aded8805dc103c1da240c44972b99b2e32e6c6722a38a7aa2a8a478e8e07090d284264880922b771f0119b3ef13e136e1812ae6223c09d697c846db4f3f39da5228d688dbc5ed67b67d13d885361addc497467ce816ce412ef9352d1b953cad9419951e70d923bda3a62b7996afaf036013e3d842de1638c7c3750f896bac603613963cde2fa14198bcb0cde6c77e35b4adb38f17a11417083a5c9dd62ddcc82915282569cf0a0cf6c7ef53e58685f1d62311b52eef49f41c7d4ec0f6e0ec527b9db021f6f55412aca40828eb60443e2dc57788714ecc79e42d839b965d773347ee9359e3f46e0ed7dab172ca8871dcf3a6148a282ab19e502a0986bb9aa7fec7f256453276a290c389728b379d2e4e80dbe82bac43843378132322c0a013332f3423ec44fe455458895ce03c3692bf8c6fe245289137b4fabe21a0aba34da6b61b03797e698a90bc783f55bc86a7a3086342dab312c0e6b89d4483e7072fcf6959f6dda85377dbd1c2496de414952015ee6da9e2de5abe1adccb4a622029ab42621f848fbc6bad8a99a25fb198a3817a621f13b559c772145b7ad55a46cf915107ec863aa4e70062313721a4a072ec37222586f8cfc8deb23c0ecbc33ae86cf730f1eb1bb0cee1a82426f4d8fdbf3c9df9c407cdf9ec74a11fa685ab748be52f462af7704f4c4ecff781db6fe76c359241efcbe623d86a8416ba5e5691d7419d4a182f003f370a7ef9501bff78f7f6060233e6283858f3c81f59a44938dc4241559f2bfa8e9359ea17279f9a1434ca62f041e914570b12f528e59b57b13f14947d9a03898342f5c711a94794b269ab20b49162c1b1413453e0d95853e1800281d0f3909bc6e49b0ac4d1ebbf80ba12fdd5b1197122de2a74863b325e54b577b43c36fe3c1e5579cf3490aa5e53671b3c7d4841b09982f365c164e18efb72f5ba40eafae9a2c17dff3823f00b751484389784c4acf8e61609a76e52b6d14e16f5cc3096502c7d6c84eda5956b723e4870eb0944c921f986a52d33b060756df550343692276f3b853161ed9d5d19aa4092d2d53298945644792c8567f93caf855aba77598af030cf32736aafd4ec93bd64beff370e5a334387bdba470cebcb6383b6342aeb8c4af597c03845048d770a07c8de106ac6f887776db2cded11577ca9065a35dd8255d2fda6aba013d99e32cab907c22e3b21a32fc09864d24cb131ad76f9d3d9644214cdd67c10e5722010de6a0cafd42ffa5cbe2df7929bd2b3e94721b20607c67726b3c1667768f11431d796815f8f73d35027f0e53c5dac0a2d363fe6c6ab3b2a4f7ba527117836ae8b68fd1b9e1daa897a1b33cc0b073b448dee3f652d2814c4b7d8431542674c01540563661364aada9849402817c5952d80ba806f98f124df7420477cf5490406d8577f47fbfbfee15fd0ac3747d41caafb487f691fe78f94c885a04e2a087c28d6a77031601953cee30b313f2ddabd499aee669a0af7dd3beb77beb28334bc18695d47cdf224d800fc154e45d3b99072965022b05e6fb705c87f094912a54946e9ce98c23069a5ece9f9b7f4f241fb1b2b7cd2d818016545909c7fec97ddca32b733d15d220c32581a24178ab559c1c471666d85f72e7779d463e5bd81b6c09d26d9890ac65d12e97c5f995cce38a805a8af71aa0ae2d2799a61c13879feb7472ad1d792a887fc7f7e2044fd7b02f839206c6c8db754f245844eed2f8b8bb14e3253af48e64ff64f493e038563a72cb3b5903c51a231ca24a9ccd9fa867b2ca059fe02c210228428354585390be0cc09b119426a219ebd6cd087f4ac42ccf890e392cd441608cd959e6ff402f50b46931e92e806918c96c053d0b0d6aaa01905ba75f7bb533ce163d108ab6f12f8a2b1689d83e9f561505d325e02dba2fd53e10579256558e2b5fb7ee50461424f44de91a435e25d209a751f5d5457d9eed5b88fea7c19e66234a8dd4e46c6e983a93db67d780c48be5727ffda6c5c8f42c0dbcc3a348df0be270ef14226a3aa930e4d462d23ced848a2f5d712fb4970a7c6eac051a733c8460475996afa361ab6aff8e491cbab7c1cda013d549c55e2fd2319078a690c61d74f4f03b2368fbb5e4faa956415a550acc72cf31aa48aee54cb5e8b5c119be116051a4caaa20648228559e699e4c97d5b4cc393da6ca6b1329f4762ae34d077dc18377804540fa37e01768f1307fa7c3add756de175466a411caa9882090b7b3c672f0993f8d89c3fcd99b04ad580ac880c5584287590a8170f7b18d7e57fd5e442a02dee854aafbf985f2974e2454ce8878e812f333e69be681b7601d5a5fba0ff8d80509c823287286096f6747701b39e10208c00ca0ba59c029afe3b6a2110bf434d3e2040062fb5572bfefa92eda7c3ef7dfa8b3948e3e9f81bdeff64288e359cef9f07fd8b7bc2f257a339cf352d9ba51219579213e4e9673cc5fefdb7ae64e43544df51afa4b1a47f7510503ae95123b2e96fc8467bfb66742e6edbf27386337c9c7772b3966a740e0cf61c8eb38faf7c1dd31c050f69a02bbe3c9d5169cacaf3d8d7e7a9b97bbfa3df3bfc357a219c766533df9b64cc43da2e6bee4a727a26b37166e8fd96f4c23ad4d3ab3d356110fbd38e7f53c8e02797b31cf5b330a0319b196181817420b0945b42070e93411328229ac807a8508be1f6c8f84e0a7e25ee75223849b04186be5e1867329261435e312737224b8ce2d68ea1d7a3f3177f28dbeb13c2ae5704a01ee830cb816df1914019c33d5a10bad051545375a3a342d4826bdd788db27b9c51b14c94b30354ea43e6d1dc612452dcc3cd102169d668f358e03115bd22afd4a4d247ac1ed664ce91a16e9460708ddeb403111e51e84265d99d0a5b54c93193a7ed4724a5696d5667d5e81a7a713ad5b530ce529339290a7643fdd2a4f85e41f769b8aa2b7af82f803ebad4dcc2834a1cdb9dc384c9254ebce4ef2ddb0f51a7efc3bc8b019f7d3167fc553db8e5802e4c70b4c1425fadbb9de9c6a1d922d6c17c8c8a40fff4341c07b022c410cb936ec92bb9d316dac9278c223e46191edf9ee9e135232b8fec0763cb9c79565aea08b75983a399b16ae75719c376ffd54d2dbc1f5e5fb058aba7ae6c933ac2296fec859ebe150e219bd0269ac982d5b93a3fc296a13bfd22346207b0d58be0a9387d71f7bcfd844093a586c6196904d1bb49514aded3cf8a06e4f422fbe6a1cfbd9e100ef3585b6213a2eee1a79e49c7ac7cd946f0c8d231664cf102d5fe4", 0x1000}, {&(0x7f0000001100)="0930c05d56a3258fc5e555153ed6cd8de0f7465fbee385b42520857e2bc0c251440e521671f1fb04cfed1ee5f967132086a7d068714a87c1ebe752b5b1941837016bbc62011450c09a8daafeb982ce38", 0x50}, {&(0x7f0000001180)="f7840e1cbcb9eb9eec60b794e850e19ddf40bcae81ce3ef69dc3fd07f629ac5613404b3513e5b5bcd93125ce90dfad82ba7ad42435d7e4cb9237e2895beec6296c904baad4e65d66d9c67276cf03aa1c28efff1f3b5192ffe075b82bdcb2e8cad51562159be6afea261e3519b30f8cae4abaa1310b994300a95dd77679695e92a4f5ed7aec4dccdf854f5e7a849fb2", 0x8f}, {&(0x7f0000001240)="b3eb2d2c017e59a4db66fcc8640da74c64d0363bcb21f01aef4a7fdc12cb", 0x1e}, {&(0x7f0000001280)="515e8b8ce8b63b0b0d926b1df90b8d8bf2c9cd33031b2783049acab2f95dfd2573ba422931e15055be0c9e68881303d73de51ee6d665ed0144fe61b7b8b587f671e55abc8d070145ae52b5d5de06b997e9b63df90f52a6cd2f298cdf2bb82b179fc321f9c9c93ce69cb45feb6b4097f03ea784baec4369ec31a8c3e3888e5fd2a020e133a8998a26404d8c1b7633d371a83ab49c38a7218fe46d22fa123d918b2764b383c7836bf3de8e98cc4e2c283240dfb753be41ec2eee186f6e86fb43c2f4", 0xc1}, {&(0x7f0000001380)="934bb80b2e085123dee0", 0xa}], 0x7, &(0x7f0000001440)=[{0x100, 0x29, 0x6, "0299cc400c9bef5ee9034e83a330564595988af2a96e6514f6342b7c3bd92e56b4455e8a6622d3a0e8644f4cae9246a846258b9c6a0871da98e5a7c1cf93e5b1e7ecd25096c64b352fc99368433799ae779f35569d93c2fd71e79cfd4b2fa00d8e9e0eca25116cd3395fbb0267c81293d0c346d99d5b41f6881c715cce95b783763234aade26af9c930f4d28735a1020d23eea9cb0cbc5e4a777f58afe37e0c3b101dd3292f40e95a3a0e6aa7d0cb74f934cfad8e7938b0734e9592ea25e42b9487e7748243242c85f9bf22aefc8b7b4b2f2974bae48e0505170283a00dc2e6f36ac8fe8d7b40f1eadf0823ef32418"}, {0xd8, 0x110, 0x1e, "71879b0eb6d4de59b527ee398b13e64277986767c8186e2a18ebe1824cc4c2cac1f973340062bd878911e5bff713d7aae3a7178c1720895bc09f0109828a0f82846661a2d25791e02dcd75a2b5db41427f3748fc43448be2c0ca83141714b419f2e3c8d74b3d64bee941cac0c47ccb8c776448f8041b36ea739a5b4d38f52a7aaa4ce7a5245e9a0a072afce6cedf3e577d696101d57c82c0c09da7f3e2a0af37d02d0e25c21a303b0f0f6b0eef1588c74b480bd6484bc504b4707713f56c088de7ef7b6d"}, {0x100, 0xff, 0xf, "9fddf41418974f370e31db703cd7b142bf5a195496df6b1eaeeb7269da191bac0ed7b43b1ada76437f277e38c90bf05a6e709ce8fc4d53e199e799b70eeab46eebb2d428292c08b2cb5d62a2d6c3ba08d25c068a62db5500b53f4f940614472ebd9f870b014f8ee6bacaf19c13b554c3d8d2c086fb9e1ccd1eb52d5f1416d6c78eb36eb3c5b13895998f75bdf5c070504ef73a37fedc11ccee5bbae1fd1b6338bc223a0d6ce3c8566757a6dfb7f8a847c751939eac4a79c150956dfb359d4476283d938fec4aea3774109cd77fb4870026104e13e8c24fd25787e8dd23ac34187a08c6bc9c614f86d9a3d2"}, {0x40, 0x10c, 0x27b01919, "c6dd4a4d55270af5b0010e3e324e23704c8bc376640698ba3494778a4accf91634e178034b25dab5196a"}, {0x28, 0x1, 0x7, "510fa5ab46b777ec1bb7a9d6743613db69"}, {0x40, 0x10c, 0x8, "c82d73a1ecf744e3104af48d71a7a350d6fda02a0272b6e5f89a13ba3c5472a1aefe20a0e5763c822e9acef7"}], 0x380}, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001800), 0x40000, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000001980)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x64, r2, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_SEQ={0x10, 0xa, "335aa2b5bc83021b356af40c"}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x200408c0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000001a40)={'syztnl2\x00', &(0x7f00000019c0)={'syztnl1\x00', <r3=>0x0, 0x7, 0x0, 0xf, 0x22, {{0x16, 0x4, 0x2, 0x6, 0x58, 0x66, 0x0, 0x1, 0x2f, 0x0, @broadcast, @private=0xa010101, {[@timestamp_prespec={0x44, 0x14, 0x2b, 0x3, 0x6, [{@loopback, 0x2}, {@multicast2, 0x80000001}]}, @ssrr={0x89, 0x17, 0xf7, [@remote, @broadcast, @rand_addr=0x64010100, @private=0xa010101, @multicast1]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x13, 0x4, [@loopback, @dev={0xac, 0x14, 0x14, 0x36}, @dev={0xac, 0x14, 0x14, 0x3d}, @empty]}]}}}}})
bind$packet(r1, &(0x7f0000001a80)={0x11, 0x16, r3, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)
munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000)
recvfrom$inet(r1, &(0x7f0000001ac0)=""/14, 0xe, 0x40002100, &(0x7f0000001b00)={0x2, 0x4e23, @empty}, 0x10)
setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000001b40)={@broadcast, @rand_addr=0x64010100, 0x1, "888b6227c943e98c85025791203dc19d18557dea57f1baf5e763297128278e6a", 0x955c, 0x6, 0x40000, 0x401}, 0x3c)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000001b80)={{0x2, 0x0, 0x9, 0x2, 0xfff}, 0x3, 0x40, 0x4})
setsockopt$inet_int(r1, 0x0, 0x18, &(0x7f0000001c00)=0x6, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001c80)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x28, r2, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xa, 0x43}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x2010, r1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000001d80)='bbr', 0x3)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000001e00)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001dc0)={<r5=>0xffffffffffffffff}, 0x2, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000001e40)={0x15, 0x110, 0xfa00, {r5, 0x2, 0x0, 0x0, 0x0, @ib={0x1b, 0x63, 0x9, {"62dd42c84ce0c6f0afee5e0243238871"}, 0x1a, 0x5, 0x7}, @in={0x2, 0x4e20, @private=0xa010102}}}, 0x118)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x10001, 0x81, &(0x7f0000001f80))
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000001fc0)=0x1)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002040), r1)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x28, r6, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x20b, 0x36}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000002340)={0x5, 0x10, 0xfa00, {&(0x7f0000002140), r5, 0x2}}, 0x18)
ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000023c0)={0x0, &(0x7f0000002380)})
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000002440)={{{@in=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @private}}, 0x0, @in6=@ipv4={""/10, ""/2, @empty}}}, &(0x7f0000002540)=0xe8)
sendmsg$nl_xfrm(r1, &(0x7f0000002640)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x80004081}, 0xc, &(0x7f0000002600)={&(0x7f0000002580)=@migrate={0x50, 0x21, 0x10, 0x70bd2d, 0x25dfdbff, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2d}, @in=@multicast2, 0x4e23, 0x9, 0x4e21, 0x9, 0x9d9869db6ac7fbfb, 0x80, 0x80, 0x29, r3, r7}, 0x6e6bb6, 0x1}}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
r8 = openat$cgroup_ro(r1, &(0x7f0000002680)='blkio.bfq.io_merged\x00', 0x0, 0x0)
bind$inet6(r1, &(0x7f00000026c0)={0xa, 0x4e24, 0x3ff, @private1, 0x7}, 0x1c)
accept$nfc_llcp(r8, &(0x7f0000002700), &(0x7f0000002780)=0x60)
ioctl$KDFONTOP_SET(r8, 0x4b72, &(0x7f0000002bc0)={0x0, 0x0, 0xb, 0xb, 0x1ab, &(0x7f00000027c0)="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"})

229.917822ms ago: executing program 3 (id=3932):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRES64=r0], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r2 = socket$key(0xf, 0x3, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000008c0)='kfree\x00', r1}, 0x18)
perf_event_open(0x0, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
r6 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r6)
setresuid(0xee00, 0xee00, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xe, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000400000000000000030000008520"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='rss_stat\x00', r3}, 0x18)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
r7 = inotify_init1(0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$netlink(0x10, 0x3, 0x1)
ioctl$FICLONE(r7, 0x40049409, r8)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000002c0)={'vxcan0\x00', <r10=>0x0})
bind$xdp(r5, &(0x7f0000000300)={0x2c, 0x0, r10, 0x22, r2}, 0x10)
setsockopt$inet6_tcp_int(r9, 0x6, 0x8, 0x0, 0x0)

174.579656ms ago: executing program 1 (id=3933):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000400)={0x1, 'vlan0\x00'})
mmap$IORING_OFF_SQES(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x4, 0x1010, r2, 0x10000000)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]})
close_range(r4, 0xffffffffffffffff, 0x0)

174.099496ms ago: executing program 2 (id=3934):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x2000005, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000080)="240000001a007f0214f9f407000904080a000000000000050002000008000f40fe00000e", 0x24)
close_range(r1, r1, 0x0)

149.265028ms ago: executing program 1 (id=3935):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000001980)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x5}}, './file0\x00'})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pipe2$9p(0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
socket$key(0xf, 0x3, 0x2)
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$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")
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
pwritev2(r1, &(0x7f0000000100)=[{0x0}], 0x1, 0x5412, 0x0, 0x0)

130.361769ms ago: executing program 2 (id=3936):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100004, 0x2, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x204000, &(0x7f0000001600)={[{@debug}, {@min_batch_time={'min_batch_time', 0x3d, 0x4ab}}, {@data_err_ignore}, {@nobarrier}, {@inlinecrypt}, {@orlov}, {@nogrpid}, {@discard}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000c40)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0xce342, 0x0)
pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='nilfs2_mdt_submit_block\x00', r0}, 0x18)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r4)
sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000ffdbdf25090000006400038008000100010000000800030004000000140002007665744e315f6d616376746170000000060004000200000008000500e0000000140002006970766c616e31"], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

0s ago: executing program 3 (id=3937):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0xb}, 0x18)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
migrate_pages(0xffffffffffffffff, 0x7f, 0x0, &(0x7f0000000040)=0x8000001)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20008005}, 0x11)
close_range(r1, 0xffffffffffffffff, 0x200000000000000)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18)
lsetxattr$security_selinux(&(0x7f0000000c00)='./cgroup.net/devices.allow\x00', &(0x7f0000000c40), &(0x7f0000000c80)='system_u:object_r:pam_console_exec_t:s0\x00', 0x28, 0x2)
r3 = gettid()
ioperm(0xd, 0x6, 0x4)
ioperm(0x7, 0x9a, 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, 0x0, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000bbdffc)=<r5=>0x0)
r6 = socket$nl_audit(0x10, 0x3, 0x9)
socket(0x10, 0x803, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r7 = open_tree(0xffffffffffffffff, 0x0, 0x80000)
fcntl$lock(r7, 0x5, &(0x7f0000000040)={0x2, 0x2, 0x2, 0xffffffffffffae5d, r3})
sendmmsg$inet(r6, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="759892c3eb", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a40)}}], 0x2, 0x4000014)
timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

kernel console output (not intermixed with test programs):

: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  243.220253][T15552] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.284648][T18964] IPVS: stopping master sync thread 18970 ...
[  243.356253][T18983] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3301'.
[  243.561831][T13057] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.639167][T18995] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  243.666029][T19000] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3303'.
[  243.678121][T19000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3303'.
[  243.687461][T19000] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  243.694960][T19000] batman_adv: batadv0: Removing interface: batadv_slave_0
[  243.702966][T19000] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  243.710479][T19000] batman_adv: batadv0: Removing interface: batadv_slave_1
[  243.723651][T18995] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3304'.
[  243.880360][T13057] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.925431][T19018] FAULT_INJECTION: forcing a failure.
[  243.925431][T19018] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  243.938573][T19018] CPU: 0 UID: 0 PID: 19018 Comm: syz.4.3309 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  243.938603][T19018] Tainted: [W]=WARN
[  243.938609][T19018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  243.938624][T19018] Call Trace:
[  243.938633][T19018]  <TASK>
[  243.938640][T19018]  __dump_stack+0x1d/0x30
[  243.938694][T19018]  dump_stack_lvl+0xe8/0x140
[  243.938716][T19018]  dump_stack+0x15/0x1b
[  243.938733][T19018]  should_fail_ex+0x265/0x280
[  243.938808][T19018]  should_fail+0xb/0x20
[  243.938827][T19018]  should_fail_usercopy+0x1a/0x20
[  243.938909][T19018]  _copy_from_iter+0xcf/0xe70
[  243.938935][T19018]  ? __alloc_skb+0x3bb/0x4d0
[  243.939005][T19018]  ? __alloc_skb+0x24d/0x4d0
[  243.939030][T19018]  netlink_sendmsg+0x471/0x6b0
[  243.939064][T19018]  ? __pfx_netlink_sendmsg+0x10/0x10
[  243.939096][T19018]  __sock_sendmsg+0x145/0x180
[  243.939121][T19018]  ____sys_sendmsg+0x31e/0x4a0
[  243.939231][T19018]  ___sys_sendmsg+0x17b/0x1d0
[  243.939268][T19018]  __x64_sys_sendmsg+0xd4/0x160
[  243.939298][T19018]  x64_sys_call+0x17ba/0x3000
[  243.939356][T19018]  do_syscall_64+0xd8/0x2c0
[  243.939390][T19018]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.939413][T19018] RIP: 0033:0x7f323d4cf749
[  243.939427][T19018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  243.939485][T19018] RSP: 002b:00007f323bf2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  243.939505][T19018] RAX: ffffffffffffffda RBX: 00007f323d725fa0 RCX: 00007f323d4cf749
[  243.939518][T19018] RDX: 0000000004000c00 RSI: 0000200000000180 RDI: 0000000000000006
[  243.939608][T19018] RBP: 00007f323bf2f090 R08: 0000000000000000 R09: 0000000000000000
[  243.939621][T19018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  243.939634][T19018] R13: 00007f323d726038 R14: 00007f323d725fa0 R15: 00007ffed2a7b448
[  243.939653][T19018]  </TASK>
[  244.389161][T19045] netlink: 'syz.8.3313': attribute type 12 has an invalid length.
[  244.484863][T19049] random: crng reseeded on system resumption
[  245.394532][T19077] syzkaller0: entered promiscuous mode
[  245.400156][T19077] syzkaller0: entered allmulticast mode
[  245.596529][T19086] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.649155][T19099] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  245.661715][T19099] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  245.686365][T19099] pimreg: entered allmulticast mode
[  245.692505][T19099] pimreg: left allmulticast mode
[  245.722531][T19086] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.759657][T19117] 9p: Bad value for 'wfdno'
[  245.782474][T19111] EXT4-fs: Ignoring removed bh option
[  245.793502][T19086] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.815759][T19111] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  245.863442][T15552] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.881660][T19086] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.982564][ T4805] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  246.009371][ T4805] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  246.038935][ T4805] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  246.058112][  T573] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  246.076818][ T4805] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  246.110660][T19186] team0: Port device team_slave_1 removed
[  246.136953][T19179] lo speed is unknown, defaulting to 1000
[  246.163787][T19212] set_capacity_and_notify: 6 callbacks suppressed
[  246.163797][T19212] loop6: detected capacity change from 0 to 128
[  246.195712][T19212] bio_check_eod: 96 callbacks suppressed
[  246.195727][T19212] syz.6.3346: attempt to access beyond end of device
[  246.195727][T19212] loop6: rw=2049, sector=154, nr_sectors = 6 limit=128
[  246.224817][T19230] loop4: detected capacity change from 0 to 512
[  246.241854][T19230] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.3350: Parent and EA inode have the same ino 15
[  246.254733][T19212] syz.6.3346: attempt to access beyond end of device
[  246.254733][T19212] loop6: rw=8390657, sector=158, nr_sectors = 2 limit=128
[  246.268504][T19212] Buffer I/O error on dev loop6, logical block 79, lost async page write
[  246.288124][T19230] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.3350: Parent and EA inode have the same ino 15
[  246.314641][T19212] syz.6.3346: attempt to access beyond end of device
[  246.314641][T19212] loop6: rw=8390657, sector=160, nr_sectors = 2 limit=128
[  246.328367][T19212] Buffer I/O error on dev loop6, logical block 80, lost async page write
[  246.345231][T19230] EXT4-fs (loop4): 1 orphan inode deleted
[  246.360515][T19230] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  246.379051][T19212] syz.6.3346: attempt to access beyond end of device
[  246.379051][T19212] loop6: rw=2049, sector=162, nr_sectors = 6 limit=128
[  246.405349][T19212] syz.6.3346: attempt to access beyond end of device
[  246.405349][T19212] loop6: rw=8390657, sector=166, nr_sectors = 2 limit=128
[  246.419041][T19212] Buffer I/O error on dev loop6, logical block 83, lost async page write
[  246.429090][T19212] syz.6.3346: attempt to access beyond end of device
[  246.429090][T19212] loop6: rw=8390657, sector=168, nr_sectors = 2 limit=128
[  246.442892][T19212] Buffer I/O error on dev loop6, logical block 84, lost async page write
[  246.452645][T19212] syz.6.3346: attempt to access beyond end of device
[  246.452645][T19212] loop6: rw=2049, sector=186, nr_sectors = 6 limit=128
[  246.452790][T15552] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.466535][T19212] syz.6.3346: attempt to access beyond end of device
[  246.466535][T19212] loop6: rw=8390657, sector=190, nr_sectors = 2 limit=128
[  246.488723][T19212] Buffer I/O error on dev loop6, logical block 95, lost async page write
[  246.497303][T19212] syz.6.3346: attempt to access beyond end of device
[  246.497303][T19212] loop6: rw=8390657, sector=192, nr_sectors = 2 limit=128
[  246.511035][T19212] Buffer I/O error on dev loop6, logical block 96, lost async page write
[  246.555765][T19212] syz.6.3346: attempt to access beyond end of device
[  246.555765][T19212] loop6: rw=2049, sector=194, nr_sectors = 6 limit=128
[  246.600761][T19212] Buffer I/O error on dev loop6, logical block 99, lost async page write
[  246.628171][T19212] Buffer I/O error on dev loop6, logical block 100, lost async page write
[  246.656580][T19260] loop4: detected capacity change from 0 to 512
[  246.661463][T19212] Buffer I/O error on dev loop6, logical block 111, lost async page write
[  246.671807][T19260] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  246.682031][T19260] EXT4-fs error (device loop4): ext4_get_journal_inode:5849: comm syz.4.3355: inode #1792: comm syz.4.3355: iget: illegal inode #
[  246.698905][T19212] Buffer I/O error on dev loop6, logical block 112, lost async page write
[  246.733778][T19260] EXT4-fs (loop4): Remounting filesystem read-only
[  246.740361][T19260] EXT4-fs (loop4): no journal found
[  246.745540][T19260] EXT4-fs (loop4): can't get journal size
[  246.789807][T19260] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  246.820292][T19260] EXT4-fs (loop4): Errors on filesystem, clearing orphan list.
[  246.832907][T19260] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  246.924056][T19274] __nla_validate_parse: 9 callbacks suppressed
[  246.924068][T19274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3358'.
[  246.955019][T19274] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3358'.
[  247.000578][T15552] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  247.068960][T19285] syzkaller0: entered promiscuous mode
[  247.074641][T19285] syzkaller0: entered allmulticast mode
[  247.083507][T19293] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=19293 comm=syz.0.3360
[  247.098795][T19292] lo speed is unknown, defaulting to 1000
[  247.121282][T19293] netlink: 'syz.0.3360': attribute type 4 has an invalid length.
[  247.317778][T19337] loop6: detected capacity change from 0 to 2048
[  247.335552][T19337] EXT4-fs: Ignoring removed bh option
[  247.382001][T19337] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  247.444357][T12008] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  247.522653][T19378] lo speed is unknown, defaulting to 1000
[  247.973488][T19452] loop0: detected capacity change from 0 to 2048
[  248.005623][T19452] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  248.045016][   T29] kauditd_printk_skb: 508 callbacks suppressed
[  248.045065][   T29] audit: type=1400 audit(248.026:14947): avc:  denied  { map } for  pid=19451 comm="syz.0.3372" path="/50/file1/cgroup.controllers" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  248.116783][T16919] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.171267][T19492] geneve2: entered promiscuous mode
[  248.184422][T17608] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 56735 - 0
[  248.196670][   T29] audit: type=1400 audit(248.176:14948): avc:  denied  { connect } for  pid=19491 comm="syz.0.3373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  248.200037][T17608] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 56735 - 0
[  248.245509][T17608] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 56735 - 0
[  248.259366][   T29] audit: type=1400 audit(248.236:14949): avc:  denied  { create } for  pid=19498 comm="syz.0.3374" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  248.279736][   T29] audit: type=1400 audit(248.236:14950): avc:  denied  { write } for  pid=19498 comm="syz.0.3374" name="file0" dev="tmpfs" ino=293 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  248.301846][   T29] audit: type=1400 audit(248.236:14951): avc:  denied  { open } for  pid=19498 comm="syz.0.3374" path="/52/file0" dev="tmpfs" ino=293 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  248.324157][   T29] audit: type=1400 audit(248.236:14952): avc:  denied  { getopt } for  pid=19498 comm="syz.0.3374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  248.347460][T17608] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 56735 - 0
[  248.376073][   T29] audit: type=1400 audit(248.346:14953): avc:  denied  { unlink } for  pid=16919 comm="syz-executor" name="file0" dev="tmpfs" ino=293 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  248.464552][T19521] 
@0Ù: renamed from bond_slave_1 (while UP)
[  248.548884][T19533] loop8: detected capacity change from 0 to 2048
[  248.556318][T19533] EXT4-fs: Ignoring removed bh option
[  248.577462][T19533] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  248.634192][T13057] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.669518][   T29] audit: type=1400 audit(248.656:14954): avc:  denied  { create } for  pid=19555 comm="syz.8.3382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  248.705111][   T29] audit: type=1400 audit(248.686:14955): avc:  denied  { bind } for  pid=19555 comm="syz.8.3382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  248.766403][   T29] audit: type=1326 audit(248.746:14956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19564 comm="syz.8.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f0eaf749 code=0x7ffc0000
[  248.848967][T19571] loop0: detected capacity change from 0 to 2048
[  248.879747][T15955]  loop0: p1 < > p4
[  248.890128][T15955] loop0: p4 size 722688 extends beyond EOD, truncated
[  248.898621][T19573] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=19573 comm=syz.8.3384
[  248.923178][T19571]  loop0: p1 < > p4
[  248.927753][T19571] loop0: p4 size 722688 extends beyond EOD, truncated
[  248.945114][T19584] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.3390'.
[  248.962562][T19584] netlink: zone id is out of range
[  248.967710][T19584] netlink: zone id is out of range
[  248.998818][ T4130] udevd[4130]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  248.998877][T15955] udevd[15955]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  249.018676][T19584] netlink: zone id is out of range
[  249.028673][T19584] netlink: zone id is out of range
[  249.040198][T19584] netlink: zone id is out of range
[  249.042090][T19603] loop0: detected capacity change from 0 to 512
[  249.045618][T19584] netlink: zone id is out of range
[  249.057858][T19584] netlink: zone id is out of range
[  249.066457][T19603] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  249.094914][T19584] netlink: set zone limit has 8 unknown bytes
[  249.104616][ T4130] udevd[4130]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  249.104695][T15955] udevd[15955]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  249.241340][T19620] lo speed is unknown, defaulting to 1000
[  249.264713][T19613] loop0: detected capacity change from 0 to 2048
[  249.302083][T19613] EXT4-fs: Ignoring removed bh option
[  249.343635][T19613] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  249.379489][T19634] lo speed is unknown, defaulting to 1000
[  249.427040][T19667] vlan0: entered allmulticast mode
[  249.509640][T19691] 9p: Bad value for 'wfdno'
[  249.522570][T16919] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.670473][T19716] serio: Serial port ttyS3
[  249.713821][T19726] lo speed is unknown, defaulting to 1000
[  249.720092][T19718] usb usb8: usbfs: process 19718 (syz.6.3403) did not claim interface 0 before use
[  249.761193][T19732] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.3405'.
[  249.785201][T19732] netlink: zone id is out of range
[  249.790457][T19732] netlink: zone id is out of range
[  249.925516][T19775] loop4: detected capacity change from 0 to 512
[  249.932433][T19775] EXT4-fs: Ignoring removed nomblk_io_submit option
[  249.939938][T19775] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  249.948657][T19775] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  249.960628][T19775] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.3410: Allocating blocks 41-42 which overlap fs metadata
[  249.975570][T19775] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.3410: Allocating blocks 41-42 which overlap fs metadata
[  249.989554][T19775] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.3410: Failed to acquire dquot type 1
[  250.000946][T19775] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  250.015533][T19775] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.3410: corrupted inode contents
[  250.027760][T19775] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.3410: mark_inode_dirty error
[  250.039460][T19775] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.3410: corrupted inode contents
[  250.058523][T19775] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.3410: mark_inode_dirty error
[  250.070520][T19775] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.3410: corrupted inode contents
[  250.082597][T19775] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  250.091289][T19775] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.3410: corrupted inode contents
[  250.103326][T19775] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.3410: mark_inode_dirty error
[  250.114550][T19775] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[  250.123698][T19775] EXT4-fs (loop4): 1 truncate cleaned up
[  250.130653][T19775] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  250.146304][T19775] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  250.163848][T19775] EXT4-fs (loop4): shut down requested (1)
[  250.192442][T19775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3410'.
[  250.210792][T19775] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop4 ino=12
[  250.212918][T19811] 9p: Bad value for 'wfdno'
[  250.235519][T15552] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.350835][T19834] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=19834 comm=syz.4.3414
[  250.538302][T19869] netlink: 'syz.6.3418': attribute type 13 has an invalid length.
[  250.547243][T19869] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3418'.
[  250.714282][T19898] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3423'.
[  250.733477][T19898] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3423'.
[  250.791405][T19911] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3424'.
[  250.820276][T19907] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  250.821612][T19911] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19911 comm=syz.6.3424
[  250.925005][T19937] 9p: Bad value for 'wfdno'
[  250.976131][T19947] EXT4-fs: Ignoring removed bh option
[  250.981640][T19947] EXT4-fs: inline encryption not supported
[  251.002200][T19947] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  251.024965][T19947] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ee018, mo2=0000]
[  251.040188][T19947] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 2: comm syz.6.3426: lblock 2 mapped to illegal pblock 2 (length 1)
[  251.069628][T19947] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 48: comm syz.6.3426: lblock 0 mapped to illegal pblock 48 (length 1)
[  251.099710][T19947] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.3426: Failed to acquire dquot type 0
[  251.114788][T19947] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  251.124400][T19947] EXT4-fs error (device loop6): ext4_evict_inode:253: inode #11: comm syz.6.3426: mark_inode_dirty error
[  251.142859][T19947] EXT4-fs warning (device loop6): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  251.153182][T19947] EXT4-fs (loop6): 1 orphan inode deleted
[  251.160239][T19947] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  251.179654][ T8098] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:22: lblock 1 mapped to illegal pblock 1 (length 1)
[  251.208545][T19946] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #2: block 16: comm syz.6.3426: lblock 0 mapped to illegal pblock 16 (length 1)
[  251.211168][ T8098] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:22: Failed to release dquot type 0
[  251.255585][T12008] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.280168][T12008] EXT4-fs error (device loop6): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0
[  251.294664][T12008] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  251.304935][T12008] EXT4-fs error (device loop6): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error
[  251.359039][T20006] set_capacity_and_notify: 3 callbacks suppressed
[  251.359056][T20006] loop6: detected capacity change from 0 to 512
[  251.374469][T20006] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  251.396738][T20006] EXT4-fs (loop6): 1 truncate cleaned up
[  251.413204][T20006] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  251.446551][T16919] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.476389][T20027] 9p: Bad value for 'wfdno'
[  251.483187][T20006] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.3431'.
[  251.555201][T20006] rdma_op ffff88813d25ad80 conn xmit_rdma 0000000000000000
[  251.675767][T20049] loop6: detected capacity change from 0 to 512
[  251.718502][T20049] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3442: bg 0: block 248: padding at end of block bitmap is not set
[  251.750804][T20049] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.3442: Failed to acquire dquot type 1
[  251.774028][T20049] EXT4-fs (loop6): 1 truncate cleaned up
[  252.405933][T20096] 9p: Bad value for 'wfdno'
[  252.507061][T20097] loop4: detected capacity change from 0 to 8192
[  252.532493][T20097] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  252.678818][T20112] loop6: detected capacity change from 0 to 512
[  252.764424][T20118] lo speed is unknown, defaulting to 1000
[  252.836745][T20145] loop9: detected capacity change from 0 to 7
[  252.858252][T20145] buffer_io_error: 15 callbacks suppressed
[  252.858275][T20145] Buffer I/O error on dev loop9, logical block 0, async page read
[  252.887868][T20145] Buffer I/O error on dev loop9, logical block 0, async page read
[  252.895834][T20145]  loop9: unable to read partition table
[  252.928655][T20145] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ �â·û
[  252.928655][T20145] 
) failed (rc=-5)
[  252.931246][T15955] Buffer I/O error on dev loop9, logical block 0, async page read
[  252.979399][T15955] Buffer I/O error on dev loop9, logical block 0, async page read
[  253.001393][T15955] Buffer I/O error on dev loop9, logical block 0, async page read
[  253.021070][T15955] Buffer I/O error on dev loop9, logical block 0, async page read
[  253.057595][T15955] Buffer I/O error on dev loop9, logical block 0, async page read
[  253.068787][   T29] kauditd_printk_skb: 392 callbacks suppressed
[  253.068798][   T29] audit: type=1326 audit(253.046:15340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20170 comm="syz.6.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359eddf749 code=0x7ffc0000
[  253.080428][T20174] loop8: detected capacity change from 0 to 1024
[  253.099806][   T29] audit: type=1326 audit(253.086:15341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20170 comm="syz.6.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f359eddf749 code=0x7ffc0000
[  253.127585][   T29] audit: type=1326 audit(253.086:15342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20170 comm="syz.6.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359eddf749 code=0x7ffc0000
[  253.150653][   T29] audit: type=1326 audit(253.086:15343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20170 comm="syz.6.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359eddf749 code=0x7ffc0000
[  253.173105][T20176] 9p: Bad value for 'wfdno'
[  253.175724][   T29] audit: type=1326 audit(253.156:15344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20170 comm="syz.6.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f359eddf749 code=0x7ffc0000
[  253.200967][   T29] audit: type=1326 audit(253.156:15345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20170 comm="syz.6.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359eddf749 code=0x7ffc0000
[  253.224101][   T29] audit: type=1326 audit(253.156:15346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20170 comm="syz.6.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359eddf749 code=0x7ffc0000
[  253.259913][T20174] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  253.260219][   T29] audit: type=1326 audit(253.236:15347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20170 comm="syz.6.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f359eddf749 code=0x7ffc0000
[  253.287787][T20174] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  253.292386][   T29] audit: type=1326 audit(253.236:15348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20170 comm="syz.6.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359eddf749 code=0x7ffc0000
[  253.325589][   T29] audit: type=1326 audit(253.236:15349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20170 comm="syz.6.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359eddf749 code=0x7ffc0000
[  253.350482][T20174] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  253.362665][T20174] EXT4-fs (loop8): orphan cleanup on readonly fs
[  253.373947][T20174] EXT4-fs error (device loop8): ext4_read_inode_bitmap:167: comm syz.8.3459: Inode bitmap for bg 0 marked uninitialized
[  253.397561][T20189] syzkaller0: entered promiscuous mode
[  253.403139][T20189] syzkaller0: entered allmulticast mode
[  253.424458][T20174] netlink: 272 bytes leftover after parsing attributes in process `syz.8.3459'.
[  253.435658][T20174] EXT4-fs (loop8): ext4_remount: Checksum for group 0 failed (32298!=35945)
[  253.459243][T13057] EXT4-fs error (device loop8): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /169/file0: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[  253.519525][T13057] EXT4-fs error (device loop8): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11
[  253.541764][T13057] EXT4-fs error (device loop8): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11
[  253.675621][T20219] loop6: detected capacity change from 0 to 2048
[  253.871155][  T573] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.897414][T20219] syzkaller0: entered promiscuous mode
[  253.913862][T20219] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  253.923057][  T573] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.941672][T20218] syzkaller0: left promiscuous mode
[  254.029005][T20253] lo speed is unknown, defaulting to 1000
[  254.080787][  T573] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.197822][T20288] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=20288 comm=syz.6.3469
[  254.986068][  T573] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.557117][  T573] bridge_slave_1: left allmulticast mode
[  255.563010][  T573] bridge_slave_1: left promiscuous mode
[  255.568756][  T573] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.598791][T20411] FAULT_INJECTION: forcing a failure.
[  255.598791][T20411] name failslab, interval 1, probability 0, space 0, times 0
[  255.611553][T20411] CPU: 1 UID: 0 PID: 20411 Comm: syz.4.3473 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  255.611587][T20411] Tainted: [W]=WARN
[  255.611594][T20411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  255.611605][T20411] Call Trace:
[  255.611611][T20411]  <TASK>
[  255.611619][T20411]  __dump_stack+0x1d/0x30
[  255.611712][T20411]  dump_stack_lvl+0xe8/0x140
[  255.611779][T20411]  dump_stack+0x15/0x1b
[  255.611797][T20411]  should_fail_ex+0x265/0x280
[  255.611880][T20411]  should_failslab+0x8c/0xb0
[  255.611935][T20411]  kmem_cache_alloc_lru_noprof+0x6d/0x4c0
[  255.611958][T20411]  ? __d_alloc+0x37/0x340
[  255.612022][T20411]  __d_alloc+0x37/0x340
[  255.612048][T20411]  ? security_inode_permission+0x4a/0xb0
[  255.612074][T20411]  d_alloc+0x2e/0x100
[  255.612096][T20411]  vfs_tmpfile+0xf3/0x520
[  255.612171][T20411]  do_tmpfile+0xa8/0x190
[  255.612244][T20411]  path_openat+0x2043/0x23b0
[  255.612272][T20411]  ? _parse_integer_limit+0x170/0x190
[  255.612290][T20411]  ? _parse_integer+0x27/0x40
[  255.612380][T20411]  ? kstrtoull+0x111/0x140
[  255.612416][T20411]  ? kstrtouint+0x76/0xc0
[  255.612435][T20411]  do_filp_open+0x109/0x230
[  255.612469][T20411]  ? __pfx_page_put_link+0x10/0x10
[  255.612498][T20411]  do_sys_openat2+0xa6/0x150
[  255.612533][T20411]  __x64_sys_openat+0xf2/0x120
[  255.612561][T20411]  x64_sys_call+0x2b07/0x3000
[  255.612582][T20411]  do_syscall_64+0xd8/0x2c0
[  255.612640][T20411]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.612661][T20411] RIP: 0033:0x7f323d4cf749
[  255.612689][T20411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  255.612705][T20411] RSP: 002b:00007f323bf2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  255.612791][T20411] RAX: ffffffffffffffda RBX: 00007f323d725fa0 RCX: 00007f323d4cf749
[  255.612802][T20411] RDX: 0000000000515a02 RSI: 00002000000000c0 RDI: 0000000000000004
[  255.612818][T20411] RBP: 00007f323bf2f090 R08: 0000000000000000 R09: 0000000000000000
[  255.612904][T20411] R10: 52abe154ad664f26 R11: 0000000000000246 R12: 0000000000000001
[  255.612915][T20411] R13: 00007f323d726038 R14: 00007f323d725fa0 R15: 00007ffed2a7b448
[  255.612934][T20411]  </TASK>
[  255.839203][  T573] bridge_slave_0: left allmulticast mode
[  255.844870][  T573] bridge_slave_0: left promiscuous mode
[  255.850614][  T573] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.961174][T20423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3474'.
[  256.031711][  T573] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  256.042248][  T573] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  256.051900][  T573] bond0 (unregistering): Released all slaves
[  256.064082][T20253] chnl_net:caif_netlink_parms(): no params data found
[  256.087765][T20442] loop4: detected capacity change from 0 to 512
[  256.114615][T20442] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  256.144087][  T573] hsr_slave_0: left promiscuous mode
[  256.152308][  T573] hsr_slave_1: left promiscuous mode
[  256.157970][  T573] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  256.165401][  T573] batman_adv: batadv0: Removing interface: batadv_slave_0
[  256.204233][T20480] loop4: detected capacity change from 0 to 512
[  256.219951][  T573] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  256.227353][  T573] batman_adv: batadv0: Removing interface: batadv_slave_1
[  256.244627][T20480] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.3476: Parent and EA inode have the same ino 15
[  256.260151][  T573] veth1_macvtap: left promiscuous mode
[  256.265627][  T573] veth0_macvtap: left promiscuous mode
[  256.289555][T20480] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.3476: Parent and EA inode have the same ino 15
[  256.301982][  T573] veth1_vlan: left promiscuous mode
[  256.307210][  T573] veth0_vlan: left promiscuous mode
[  256.319692][T20480] EXT4-fs (loop4): 1 orphan inode deleted
[  256.431523][T20490] loop6: detected capacity change from 0 to 8192
[  256.460445][T20490] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  256.502006][  T573] team0 (unregistering): Port device team_slave_0 removed
[  256.503560][T20517] loop4: detected capacity change from 0 to 2048
[  256.567734][T20517] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3479: bg 0: block 345: padding at end of block bitmap is not set
[  256.599761][T20517] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1 with error 117
[  256.612242][T20517] EXT4-fs (loop4): This should not happen!! Data will be lost
[  256.612242][T20517] 
[  256.687874][T20538] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=20538 comm=syz.0.3480
[  256.707127][T20253] bridge0: port 1(bridge_slave_0) entered blocking state
[  256.714298][T20253] bridge0: port 1(bridge_slave_0) entered disabled state
[  256.778706][T20253] bridge_slave_0: entered allmulticast mode
[  256.785373][T20576] netlink: 83 bytes leftover after parsing attributes in process `syz.3.3482'.
[  256.817084][T20253] bridge_slave_0: entered promiscuous mode
[  256.842170][T20253] bridge0: port 2(bridge_slave_1) entered blocking state
[  256.849271][T20253] bridge0: port 2(bridge_slave_1) entered disabled state
[  256.874207][T20253] bridge_slave_1: entered allmulticast mode
[  256.886218][T20582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3484'.
[  256.900088][T20253] bridge_slave_1: entered promiscuous mode
[  256.937908][T20582] team0: Port device team_slave_1 removed
[  256.977205][T20253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  256.988141][  T573] IPVS: stop unused estimator thread 0...
[  257.001762][T20253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  257.066511][T20253] team0: Port device team_slave_0 added
[  257.085555][T20651] loop4: detected capacity change from 0 to 512
[  257.091976][T20648] loop6: detected capacity change from 0 to 512
[  257.099285][T20253] team0: Port device team_slave_1 added
[  257.099844][T20651] EXT4-fs: Ignoring removed nomblk_io_submit option
[  257.134852][T20648] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  257.144804][T20648] EXT4-fs (loop6): bad geometry: first data block 1 is beyond end of filesystem (0)
[  257.156458][T20651] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  257.164443][T20651] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102]
[  257.195865][T20651] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80)
[  257.205465][T20651] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features
[  257.219473][T20253] batman_adv: batadv0: Adding interface: batadv_slave_0
[  257.226421][T20253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  257.252377][T20253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  257.285659][T20651] veth1_to_bond: entered allmulticast mode
[  257.292002][T20253] batman_adv: batadv0: Adding interface: batadv_slave_1
[  257.299026][T20253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  257.325071][T20253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  257.383470][T20651] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3488'.
[  257.456754][T20651] team0 (unregistering): Port device team_slave_0 removed
[  257.502430][T20686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3488'.
[  257.517049][T20701] lo speed is unknown, defaulting to 1000
[  257.525975][T20253] hsr_slave_0: entered promiscuous mode
[  257.540485][T20253] hsr_slave_1: entered promiscuous mode
[  257.556610][T20253] debugfs: 'hsr0' already exists in 'hsr'
[  257.562592][T20253] Cannot create hsr debugfs directory
[  257.572872][T20649] veth1_to_bond: left allmulticast mode
[  258.798877][   T29] kauditd_printk_skb: 153 callbacks suppressed
[  258.798893][   T29] audit: type=1400 audit(258.776:15503): avc:  denied  { unmount } for  pid=16919 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  258.841916][T20253] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  258.851167][T20253] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  258.878598][   T29] audit: type=1326 audit(258.836:15504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20880 comm="syz.0.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aee64f749 code=0x7ffc0000
[  258.901687][   T29] audit: type=1326 audit(258.836:15505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20880 comm="syz.0.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9aee64f749 code=0x7ffc0000
[  258.924634][   T29] audit: type=1326 audit(258.836:15506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20880 comm="syz.0.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aee64f749 code=0x7ffc0000
[  258.947605][   T29] audit: type=1326 audit(258.836:15507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20880 comm="syz.0.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aee64f749 code=0x7ffc0000
[  258.970540][   T29] audit: type=1326 audit(258.846:15508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20880 comm="syz.0.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f9aee64f749 code=0x7ffc0000
[  258.993411][   T29] audit: type=1326 audit(258.846:15509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20880 comm="syz.0.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aee64f749 code=0x7ffc0000
[  259.016376][   T29] audit: type=1326 audit(258.846:15510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20880 comm="syz.0.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aee64f749 code=0x7ffc0000
[  259.039356][   T29] audit: type=1326 audit(258.846:15511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20880 comm="syz.0.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9aee64f749 code=0x7ffc0000
[  259.062207][   T29] audit: type=1326 audit(258.846:15512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20880 comm="syz.0.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aee64f749 code=0x7ffc0000
[  259.349313][T20253] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  259.369946][T20253] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  259.384761][T20896] loop4: detected capacity change from 0 to 2048
[  259.421600][T20896] EXT4-fs mount: 11 callbacks suppressed
[  259.421688][T20896] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  259.451959][T20253] 8021q: adding VLAN 0 to HW filter on device bond0
[  259.467958][T20253] 8021q: adding VLAN 0 to HW filter on device team0
[  259.494614][T15552] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.506006][ T4805] bridge0: port 1(bridge_slave_0) entered blocking state
[  259.513087][ T4805] bridge0: port 1(bridge_slave_0) entered forwarding state
[  259.540441][ T4805] bridge0: port 2(bridge_slave_1) entered blocking state
[  259.547550][ T4805] bridge0: port 2(bridge_slave_1) entered forwarding state
[  259.591372][T20913] loop4: detected capacity change from 0 to 2048
[  259.629563][T20913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  259.665144][T20913] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3501: bg 0: block 345: padding at end of block bitmap is not set
[  259.696097][T20253] 8021q: adding VLAN 0 to HW filter on device batadv0
[  259.711407][T20913] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1 with error 117
[  259.723845][T20913] EXT4-fs (loop4): This should not happen!! Data will be lost
[  259.723845][T20913] 
[  259.792188][T15552] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.930338][T20253] veth0_vlan: entered promiscuous mode
[  259.937669][T20253] veth1_vlan: entered promiscuous mode
[  259.969549][T20253] veth0_macvtap: entered promiscuous mode
[  259.977285][T20253] veth1_macvtap: entered promiscuous mode
[  259.988777][T20253] batman_adv: batadv0: Interface activated: batadv_slave_0
[  260.002374][T20253] batman_adv: batadv0: Interface activated: batadv_slave_1
[  260.014523][   T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  260.027990][   T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  260.043675][   T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  260.056582][   T42] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  260.093820][T20948] loop9: detected capacity change from 0 to 512
[  260.186928][T20958] loop9: detected capacity change from 0 to 512
[  260.205667][T20958] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  260.214162][T20958] EXT4-fs (loop9): bad geometry: block count 204800 exceeds size of device (128 blocks)
[  260.314989][T20971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3508'.
[  260.337324][T20971] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3508'.
[  260.401306][T20986] netlink: 72 bytes leftover after parsing attributes in process `syz.9.3512'.
[  260.580507][T20994] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=20994 comm=syz.9.3513
[  260.705114][T21003] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21003 comm=syz.4.3516
[  260.985896][T21017] FAULT_INJECTION: forcing a failure.
[  260.985896][T21017] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  260.999081][T21017] CPU: 0 UID: 0 PID: 21017 Comm: syz.4.3521 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  260.999117][T21017] Tainted: [W]=WARN
[  260.999124][T21017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  260.999137][T21017] Call Trace:
[  260.999188][T21017]  <TASK>
[  260.999194][T21017]  __dump_stack+0x1d/0x30
[  260.999223][T21017]  dump_stack_lvl+0xe8/0x140
[  260.999245][T21017]  dump_stack+0x15/0x1b
[  260.999265][T21017]  should_fail_ex+0x265/0x280
[  260.999362][T21017]  should_fail+0xb/0x20
[  260.999379][T21017]  should_fail_usercopy+0x1a/0x20
[  260.999401][T21017]  _copy_from_iter+0xcf/0xe70
[  260.999424][T21017]  ? __alloc_skb+0x3bb/0x4d0
[  260.999546][T21017]  ? __alloc_skb+0x24d/0x4d0
[  260.999571][T21017]  netlink_sendmsg+0x471/0x6b0
[  260.999614][T21017]  ? __pfx_netlink_sendmsg+0x10/0x10
[  260.999644][T21017]  __sock_sendmsg+0x145/0x180
[  260.999661][T21017]  ____sys_sendmsg+0x31e/0x4a0
[  260.999704][T21017]  ___sys_sendmsg+0x17b/0x1d0
[  260.999798][T21017]  __x64_sys_sendmsg+0xd4/0x160
[  260.999827][T21017]  x64_sys_call+0x17ba/0x3000
[  260.999853][T21017]  do_syscall_64+0xd8/0x2c0
[  260.999965][T21017]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.999987][T21017] RIP: 0033:0x7f323d4cf749
[  261.000000][T21017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  261.000035][T21017] RSP: 002b:00007f323bf2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  261.000053][T21017] RAX: ffffffffffffffda RBX: 00007f323d725fa0 RCX: 00007f323d4cf749
[  261.000064][T21017] RDX: 0000000004000c00 RSI: 0000200000000180 RDI: 0000000000000006
[  261.000075][T21017] RBP: 00007f323bf2f090 R08: 0000000000000000 R09: 0000000000000000
[  261.000113][T21017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  261.000139][T21017] R13: 00007f323d726038 R14: 00007f323d725fa0 R15: 00007ffed2a7b448
[  261.000154][T21017]  </TASK>
[  261.209432][T21019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3522'.
[  261.259079][T21023] loop6: detected capacity change from 0 to 8192
[  261.279126][T21023] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  261.366354][T21032] lo speed is unknown, defaulting to 1000
[  261.414028][T21057] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  261.448073][T21037] lo speed is unknown, defaulting to 1000
[  261.504216][T21070] loop9: detected capacity change from 0 to 4096
[  261.526667][T21070] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  261.564208][T20253] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.714227][T21124] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3530'.
[  261.947293][T21146] loop6: detected capacity change from 0 to 2048
[  261.949139][T21146] EXT4-fs: Ignoring removed bh option
[  261.994959][T21146] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  262.089093][T12008] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.679647][T21226] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=21226 comm=syz.9.3538
[  263.162829][T21269] lo speed is unknown, defaulting to 1000
[  263.178156][T21273] loop6: detected capacity change from 0 to 4096
[  263.205184][T21273] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  263.222245][T21285] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  263.277833][T12008] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.467327][T21325] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3543'.
[  263.488026][T21325] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3543'.
[  263.679381][T21350] 9p: Bad value for 'wfdno'
[  263.835237][T21383] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3550'.
[  263.847592][   T29] kauditd_printk_skb: 152 callbacks suppressed
[  263.847606][   T29] audit: type=1400 audit(263.826:15665): avc:  denied  { read } for  pid=21382 comm="syz.0.3550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  263.878836][T21372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3549'.
[  263.913586][   T29] audit: type=1400 audit(263.896:15666): avc:  denied  { getopt } for  pid=21382 comm="syz.0.3550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  263.987746][T21391] loop6: detected capacity change from 0 to 8192
[  263.996989][T21391] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  264.283923][   T29] audit: type=1326 audit(264.266:15667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21442 comm="syz.6.3552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359eddf749 code=0x7ffc0000
[  264.306938][   T29] audit: type=1326 audit(264.266:15668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21442 comm="syz.6.3552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f359eddf749 code=0x7ffc0000
[  264.348308][   T29] audit: type=1326 audit(264.266:15669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21442 comm="syz.6.3552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359eddf749 code=0x7ffc0000
[  264.409103][   T29] audit: type=1326 audit(264.386:15670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21462 comm="syz.6.3554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359eddf749 code=0x7ffc0000
[  264.432128][   T29] audit: type=1326 audit(264.386:15671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21462 comm="syz.6.3554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f359eddf749 code=0x7ffc0000
[  264.455035][   T29] audit: type=1326 audit(264.386:15672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21462 comm="syz.6.3554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359eddf749 code=0x7ffc0000
[  264.477988][   T29] audit: type=1326 audit(264.386:15673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21462 comm="syz.6.3554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f359eddf749 code=0x7ffc0000
[  264.500984][   T29] audit: type=1326 audit(264.386:15674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21462 comm="syz.6.3554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359eddf749 code=0x7ffc0000
[  264.545381][T21479] lo speed is unknown, defaulting to 1000
[  264.578447][T21479] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  264.728287][T21516] netlink: 'syz.6.3554': attribute type 12 has an invalid length.
[  264.736140][T21516] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3554'.
[  265.092808][T21530] loop0: detected capacity change from 0 to 8192
[  265.384095][T21543] 9p: Bad value for 'wfdno'
[  265.450894][T21549] 9p: Bad value for 'wfdno'
[  265.750254][T21568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3569'.
[  265.790691][T21568] net_ratelimit: 114 callbacks suppressed
[  265.790705][T21568] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  265.829710][T21572] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3569'.
[  265.842918][T21574] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  265.842918][T21570] lo speed is unknown, defaulting to 1000
[  265.954202][T21597] lo speed is unknown, defaulting to 1000
[  265.968439][T21604] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  266.100182][T21633] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  266.117055][T21633] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  266.130714][T21633] vhci_hcd vhci_hcd.2: invalid port number 96
[  266.136822][T21633] vhci_hcd vhci_hcd.2: default hub control req: 1f00 vfffa i0060 l0
[  266.253708][T21650] loop9: detected capacity change from 0 to 8192
[  266.270387][T21650] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  266.545437][T21702] loop9: detected capacity change from 0 to 512
[  266.562691][T21702] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  266.587984][T20253] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.626927][T21724] syzkaller0: entered promiscuous mode
[  266.632399][T21724] syzkaller0: entered allmulticast mode
[  266.853567][T21778] loop9: detected capacity change from 0 to 4096
[  266.866930][T21778] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  266.903424][T21778] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3580'.
[  267.079272][T20253] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.086972][T21799] loop6: detected capacity change from 0 to 4096
[  267.094779][T21804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3583'.
[  267.104996][T21799] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  267.120870][T21804] erspan0: entered promiscuous mode
[  267.130303][T21804] macvtap1: entered promiscuous mode
[  267.135642][T21804] macvtap1: entered allmulticast mode
[  267.141100][T21804] erspan0: entered allmulticast mode
[  267.161154][T21799] sctp: [Deprecated]: syz.6.3584 (pid 21799) Use of struct sctp_assoc_value in delayed_ack socket option.
[  267.161154][T21799] Use struct sctp_sack_info instead
[  267.213657][T21818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3586'.
[  267.245038][T21829] syzkaller0: entered promiscuous mode
[  267.250558][T21829] syzkaller0: entered allmulticast mode
[  267.267187][T12008] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.493158][T21872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3597'.
[  267.521246][T21876] FAULT_INJECTION: forcing a failure.
[  267.521246][T21876] name failslab, interval 1, probability 0, space 0, times 0
[  267.533989][T21876] CPU: 0 UID: 0 PID: 21876 Comm: syz.3.3598 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  267.534070][T21876] Tainted: [W]=WARN
[  267.534077][T21876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  267.534089][T21876] Call Trace:
[  267.534095][T21876]  <TASK>
[  267.534102][T21876]  __dump_stack+0x1d/0x30
[  267.534127][T21876]  dump_stack_lvl+0xe8/0x140
[  267.534146][T21876]  dump_stack+0x15/0x1b
[  267.534222][T21876]  should_fail_ex+0x265/0x280
[  267.534245][T21876]  should_failslab+0x8c/0xb0
[  267.534264][T21876]  __kmalloc_cache_noprof+0x65/0x4c0
[  267.534350][T21876]  ? audit_log_d_path+0x8d/0x150
[  267.534393][T21876]  audit_log_d_path+0x8d/0x150
[  267.534415][T21876]  audit_log_d_path_exe+0x42/0x70
[  267.534435][T21876]  audit_log_task+0x1e9/0x250
[  267.534493][T21876]  ? kstrtouint+0x76/0xc0
[  267.534545][T21876]  audit_seccomp+0x61/0x100
[  267.534653][T21876]  ? __seccomp_filter+0x832/0x1260
[  267.534680][T21876]  __seccomp_filter+0x843/0x1260
[  267.534755][T21876]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  267.534783][T21876]  ? vfs_write+0x7e8/0x960
[  267.534874][T21876]  ? __cond_resched+0x4e/0x90
[  267.534897][T21876]  __secure_computing+0x82/0x150
[  267.534965][T21876]  syscall_trace_enter+0xcf/0x1e0
[  267.534986][T21876]  do_syscall_64+0xb2/0x2c0
[  267.535015][T21876]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.535035][T21876] RIP: 0033:0x7fa29628f749
[  267.535056][T21876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  267.535109][T21876] RSP: 002b:00007fa294cf7038 EFLAGS: 00000246 ORIG_RAX: 000000000000008d
[  267.535128][T21876] RAX: ffffffffffffffda RBX: 00007fa2964e5fa0 RCX: 00007fa29628f749
[  267.535142][T21876] RDX: 0000000000000000 RSI: 00000000000000ff RDI: 0000000000000002
[  267.535155][T21876] RBP: 00007fa294cf7090 R08: 0000000000000000 R09: 0000000000000000
[  267.535177][T21876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  267.535187][T21876] R13: 00007fa2964e6038 R14: 00007fa2964e5fa0 R15: 00007fff96e4bb88
[  267.535268][T21876]  </TASK>
[  267.749820][T21872] erspan0: entered promiscuous mode
[  267.755155][T21872] macvtap1: entered promiscuous mode
[  267.760509][T21872] macvtap1: entered allmulticast mode
[  267.765863][T21872] erspan0: entered allmulticast mode
[  267.833819][T21886] loop0: detected capacity change from 0 to 1024
[  267.842791][T21893] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  267.850304][T21893] vhci_hcd vhci_hcd.2: invalid port number 96
[  267.856364][T21893] vhci_hcd vhci_hcd.2: default hub control req: 1f00 vfffa i0060 l0
[  267.881248][T21889] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  267.904208][T21886] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  267.929255][T21886] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  267.939843][T21886] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  267.948668][T21905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3601'.
[  267.971137][T21886] EXT4-fs (loop0): orphan cleanup on readonly fs
[  267.978625][T21907] netlink: 'syz.6.3605': attribute type 30 has an invalid length.
[  267.986607][T21892] loop9: detected capacity change from 0 to 8192
[  267.995259][T21886] EXT4-fs error (device loop0): ext4_read_inode_bitmap:167: comm syz.0.3599: Inode bitmap for bg 0 marked uninitialized
[  267.997991][T21892] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  268.029640][T21886] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  268.050924][T21886] EXT4-fs (loop0): ext4_remount: Checksum for group 0 failed (32298!=35945)
[  268.075196][T16919] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /92/file0: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[  268.076434][T21907] loop6: detected capacity change from 0 to 2048
[  268.095741][T16919] EXT4-fs error (device loop0): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11
[  268.126319][T16919] EXT4-fs error (device loop0): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11
[  268.140639][T15955] Alternate GPT is invalid, using primary GPT.
[  268.147143][T15955]  loop6: p2 p3 p7
[  268.170352][T21389] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.189670][T21907] Alternate GPT is invalid, using primary GPT.
[  268.196157][T21907]  loop6: p2 p3 p7
[  268.222673][ T8098] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.232495][ T8098] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 56735 - 0
[  268.308051][T21941] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=21941 comm=syz.4.3609
[  268.333130][ T8098] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.342941][ T8098] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 56735 - 0
[  268.421190][ T8098] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.431045][ T8098] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 56735 - 0
[  268.455551][T21940] netlink: 'syz.3.3607': attribute type 4 has an invalid length.
[  268.521746][ T8098] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.531544][ T8098] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 56735 - 0
[  268.592528][T21944] lo speed is unknown, defaulting to 1000
[  268.702754][ T8098] bridge_slave_1: left allmulticast mode
[  268.708430][ T8098] bridge_slave_1: left promiscuous mode
[  268.714143][ T8098] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.773841][ T8098] bridge_slave_0: left allmulticast mode
[  268.779531][ T8098] bridge_slave_0: left promiscuous mode
[  268.785158][ T8098] bridge0: port 1(bridge_slave_0) entered disabled state
[  268.917704][T22000] loop9: detected capacity change from 0 to 764
[  268.938565][ T8098] erspan0 (unregistering): left allmulticast mode
[  268.948556][T22003] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  268.956649][T22000] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  268.986310][T22000] Symlink component flag not implemented
[  268.989294][T22003] vhci_hcd vhci_hcd.2: invalid port number 96
[  268.998003][T22003] vhci_hcd vhci_hcd.2: default hub control req: 1f00 vfffa i0060 l0
[  269.008173][T22000] Symlink component flag not implemented (7)
[  269.082590][ T8098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  269.111776][ T8098] bond0 (unregistering): (slave 
c
@0Ù): Releasing backup interface
[  269.136439][T22008] loop4: detected capacity change from 0 to 4096
[  269.144276][ T8098] bond0 (unregistering): Released all slaves
[  269.188457][T22008] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  269.211813][T22017] dummy0: entered promiscuous mode
[  269.219279][T22017] macsec1: entered allmulticast mode
[  269.229341][T22017] dummy0: entered allmulticast mode
[  269.248211][ T8098] hsr_slave_0: left promiscuous mode
[  269.273788][T22027] loop9: detected capacity change from 0 to 1024
[  269.385346][ T8098] hsr_slave_1: left promiscuous mode
[  269.392353][ T8098] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  269.399807][ T8098] batman_adv: batadv0: Removing interface: batadv_slave_0
[  269.414852][T22027] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  269.491964][T22034] cgroup: name respecified
[  269.496576][   T29] kauditd_printk_skb: 274 callbacks suppressed
[  269.496590][   T29] audit: type=1400 audit(269.476:15949): avc:  denied  { read write } for  pid=22029 comm="syz.6.3619" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  269.526356][   T29] audit: type=1400 audit(269.476:15950): avc:  denied  { open } for  pid=22029 comm="syz.6.3619" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  269.549864][   T29] audit: type=1400 audit(269.476:15951): avc:  denied  { mounton } for  pid=22029 comm="syz.6.3619" path="/file0" dev="ramfs" ino=47850 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  269.621998][ T8098] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  269.629418][ T8098] batman_adv: batadv0: Removing interface: batadv_slave_1
[  269.725259][ T8098] veth1_macvtap: left promiscuous mode
[  269.761447][ T8098] veth0_macvtap: left promiscuous mode
[  269.800718][ T8098] veth1_vlan: left promiscuous mode
[  269.834051][ T8098] veth0_vlan: left promiscuous mode
[  269.857020][T22027] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  269.871453][T22027] EXT4-fs (loop9): revision level too high, forcing read-only mode
[  269.882581][T22027] EXT4-fs (loop9): orphan cleanup on readonly fs
[  269.889107][T22027] EXT4-fs error (device loop9): ext4_read_inode_bitmap:167: comm syz.9.3618: Inode bitmap for bg 0 marked uninitialized
[  269.902414][T22027] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  269.936477][ T8098] pimreg (unregistering): left allmulticast mode
[  269.969360][ T8098] team0 (unregistering): Port device team_slave_0 removed
[  269.977902][T22027] EXT4-fs (loop9): ext4_remount: Checksum for group 0 failed (32298!=35945)
[  270.017507][T20253] EXT4-fs error (device loop9): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /23/file0: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[  270.046436][T20253] EXT4-fs error (device loop9): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11
[  270.085919][T15552] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.114549][T21944] chnl_net:caif_netlink_parms(): no params data found
[  270.166110][T20253] EXT4-fs error (device loop9): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11
[  270.217519][T22153] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.3624'.
[  270.244071][   T29] audit: type=1326 audit(270.226:15952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22168 comm="syz.3.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29628f749 code=0x7ffc0000
[  270.267094][   T29] audit: type=1326 audit(270.226:15953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22168 comm="syz.3.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29628f749 code=0x7ffc0000
[  270.300063][T21944] bridge0: port 1(bridge_slave_0) entered blocking state
[  270.307166][T21944] bridge0: port 1(bridge_slave_0) entered disabled state
[  270.324837][T22180] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  270.339439][T21944] bridge_slave_0: entered allmulticast mode
[  270.348490][   T29] audit: type=1326 audit(270.276:15954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22168 comm="syz.3.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa29628f749 code=0x7ffc0000
[  270.359838][T21944] bridge_slave_0: entered promiscuous mode
[  270.371757][   T29] audit: type=1326 audit(270.276:15955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22168 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29628f749 code=0x7ffc0000
[  270.399930][   T29] audit: type=1326 audit(270.276:15956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22168 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29628f749 code=0x7ffc0000
[  270.411531][T22148] lo speed is unknown, defaulting to 1000
[  270.422338][   T29] audit: type=1326 audit(270.276:15957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22168 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa29628f749 code=0x7ffc0000
[  270.428346][T21944] bridge0: port 2(bridge_slave_1) entered blocking state
[  270.450572][   T29] audit: type=1326 audit(270.276:15958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22168 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29628f749 code=0x7ffc0000
[  270.457339][T21944] bridge0: port 2(bridge_slave_1) entered disabled state
[  270.503536][T22187] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=22187 comm=syz.3.3625
[  270.550331][T20253] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.599352][T21944] bridge_slave_1: entered allmulticast mode
[  270.621124][T21944] bridge_slave_1: entered promiscuous mode
[  270.745095][T21944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  270.758450][ T8098] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.780048][T21944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  270.818031][ T8098] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.853123][T21944] team0: Port device team_slave_0 added
[  270.860397][T21944] team0: Port device team_slave_1 added
[  270.883134][ T8098] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.910163][T21944] batman_adv: batadv0: Adding interface: batadv_slave_0
[  270.917174][T21944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  270.943112][T21944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  270.962184][T21944] batman_adv: batadv0: Adding interface: batadv_slave_1
[  270.969152][T21944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  270.995071][T21944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  271.018659][ T8098] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.172888][T22376] loop6: detected capacity change from 0 to 512
[  271.210691][T22376] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  271.218670][T22376] EXT4-fs (loop6): orphan cleanup on readonly fs
[  271.228997][T22376] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm +}[@: corrupted inode contents
[  271.240741][T22376] EXT4-fs (loop6): Remounting filesystem read-only
[  271.247362][T22376] EXT4-fs (loop6): 1 truncate cleaned up
[  271.369985][  T291] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  271.380640][  T291] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  271.394562][T21944] hsr_slave_0: entered promiscuous mode
[  271.401377][T21944] hsr_slave_1: entered promiscuous mode
[  271.407237][T21944] debugfs: 'hsr0' already exists in 'hsr'
[  271.412980][T21944] Cannot create hsr debugfs directory
[  271.418470][T22375] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3635'.
[  271.425774][  T291] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started
[  271.427431][T22375] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3635'.
[  271.448477][T22376] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  271.461218][T22376] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.506134][T22263] lo speed is unknown, defaulting to 1000
[  271.537229][T22346] lo speed is unknown, defaulting to 1000
[  271.580655][T22439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3636'.
[  271.595506][T22439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3636'.
[  271.629524][T22508] FAULT_INJECTION: forcing a failure.
[  271.629524][T22508] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  271.642902][T22508] CPU: 1 UID: 0 PID: 22508 Comm: syz.3.3637 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  271.642940][T22508] Tainted: [W]=WARN
[  271.642947][T22508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  271.642960][T22508] Call Trace:
[  271.642966][T22508]  <TASK>
[  271.642974][T22508]  __dump_stack+0x1d/0x30
[  271.643000][T22508]  dump_stack_lvl+0xe8/0x140
[  271.643023][T22508]  dump_stack+0x15/0x1b
[  271.643079][T22508]  should_fail_ex+0x265/0x280
[  271.643103][T22508]  should_fail+0xb/0x20
[  271.643123][T22508]  should_fail_usercopy+0x1a/0x20
[  271.643148][T22508]  _copy_from_user+0x1c/0xb0
[  271.643255][T22508]  __sys_bpf+0x183/0x7c0
[  271.643282][T22508]  __x64_sys_bpf+0x41/0x50
[  271.643315][T22508]  x64_sys_call+0x28e1/0x3000
[  271.643417][T22508]  do_syscall_64+0xd8/0x2c0
[  271.643522][T22508]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.643542][T22508] RIP: 0033:0x7fa29628f749
[  271.643554][T22508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  271.643569][T22508] RSP: 002b:00007fa294cf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  271.643586][T22508] RAX: ffffffffffffffda RBX: 00007fa2964e5fa0 RCX: 00007fa29628f749
[  271.643662][T22508] RDX: 0000000000000050 RSI: 0000200000000200 RDI: 0000000000000000
[  271.643673][T22508] RBP: 00007fa294cf7090 R08: 0000000000000000 R09: 0000000000000000
[  271.643756][T22508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  271.643769][T22508] R13: 00007fa2964e6038 R14: 00007fa2964e5fa0 R15: 00007fff96e4bb88
[  271.643831][T22508]  </TASK>
[  271.862592][ T8098] bridge_slave_1: left allmulticast mode
[  271.868262][ T8098] bridge_slave_1: left promiscuous mode
[  271.873906][ T8098] bridge0: port 2(bridge_slave_1) entered disabled state
[  271.893449][ T8098] bridge_slave_0: left allmulticast mode
[  271.899110][ T8098] bridge_slave_0: left promiscuous mode
[  271.904949][ T8098] bridge0: port 1(bridge_slave_0) entered disabled state
[  271.914006][T22520] netlink: 236 bytes leftover after parsing attributes in process `syz.3.3638'.
[  272.021284][ T8098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  272.031215][ T8098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  272.042214][ T8098] bond0 (unregistering): Released all slaves
[  272.073167][T22564] FAULT_INJECTION: forcing a failure.
[  272.073167][T22564] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  272.086254][T22564] CPU: 0 UID: 0 PID: 22564 Comm: syz.6.3641 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  272.086289][T22564] Tainted: [W]=WARN
[  272.086297][T22564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  272.086386][T22564] Call Trace:
[  272.086393][T22564]  <TASK>
[  272.086401][T22564]  __dump_stack+0x1d/0x30
[  272.086493][T22564]  dump_stack_lvl+0xe8/0x140
[  272.086518][T22564]  dump_stack+0x15/0x1b
[  272.086557][T22564]  should_fail_ex+0x265/0x280
[  272.086601][T22564]  should_fail+0xb/0x20
[  272.086626][T22564]  should_fail_usercopy+0x1a/0x20
[  272.086653][T22564]  strncpy_from_user+0x27/0x260
[  272.086690][T22564]  path_setxattrat+0xeb/0x310
[  272.086785][T22564]  __x64_sys_lsetxattr+0x71/0x90
[  272.086813][T22564]  x64_sys_call+0x2ef0/0x3000
[  272.086843][T22564]  do_syscall_64+0xd8/0x2c0
[  272.086883][T22564]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.086923][T22564] RIP: 0033:0x7f359eddf749
[  272.086944][T22564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  272.086961][T22564] RSP: 002b:00007f359d847038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd
[  272.086977][T22564] RAX: ffffffffffffffda RBX: 00007f359f035fa0 RCX: 00007f359eddf749
[  272.086997][T22564] RDX: 0000200000000240 RSI: 00002000000000c0 RDI: 0000200000000100
[  272.087017][T22564] RBP: 00007f359d847090 R08: 0000000000000000 R09: 0000000000000000
[  272.087032][T22564] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001
[  272.087042][T22564] R13: 00007f359f036038 R14: 00007f359f035fa0 R15: 00007ffd4f23c018
[  272.087069][T22564]  </TASK>
[  272.277403][ T8098] hsr_slave_0: left promiscuous mode
[  272.283993][ T8098] hsr_slave_1: left promiscuous mode
[  272.292889][ T8098] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  272.300302][ T8098] batman_adv: batadv0: Removing interface: batadv_slave_0
[  272.313562][ T8098] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  272.321026][ T8098] batman_adv: batadv0: Removing interface: batadv_slave_1
[  272.354316][ T8098] veth1_macvtap: left promiscuous mode
[  272.376825][ T8098] veth0_macvtap: left promiscuous mode
[  272.386805][ T8098] veth1_vlan: left promiscuous mode
[  272.392463][T22589] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=22589 comm=syz.6.3644
[  272.411787][ T8098] veth0_vlan: left promiscuous mode
[  272.490808][T22604] netlink: 'syz.3.3647': attribute type 3 has an invalid length.
[  272.498556][T22604] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3647'.
[  272.561656][ T8098] team0 (unregistering): Port device team_slave_1 removed
[  272.582298][ T8098] team0 (unregistering): Port device team_slave_0 removed
[  272.716527][T22263] chnl_net:caif_netlink_parms(): no params data found
[  272.802311][T22263] bridge0: port 1(bridge_slave_0) entered blocking state
[  272.809439][T22263] bridge0: port 1(bridge_slave_0) entered disabled state
[  272.834230][T22263] bridge_slave_0: entered allmulticast mode
[  272.851478][T22263] bridge_slave_0: entered promiscuous mode
[  272.861366][T22263] bridge0: port 2(bridge_slave_1) entered blocking state
[  272.868487][T22263] bridge0: port 2(bridge_slave_1) entered disabled state
[  272.895237][T22263] bridge_slave_1: entered allmulticast mode
[  272.910271][T22263] bridge_slave_1: entered promiscuous mode
[  272.953552][T22263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  272.974188][T22263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  273.041454][T22263] team0: Port device team_slave_0 added
[  273.054727][T22263] team0: Port device team_slave_1 added
[  273.092222][T22263] batman_adv: batadv0: Adding interface: batadv_slave_0
[  273.099157][T22263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  273.125237][T22263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  273.141921][T22263] batman_adv: batadv0: Adding interface: batadv_slave_1
[  273.148938][T22263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  273.174942][T22263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  273.221576][T22263] hsr_slave_0: entered promiscuous mode
[  273.227605][T22263] hsr_slave_1: entered promiscuous mode
[  273.233876][T22263] debugfs: 'hsr0' already exists in 'hsr'
[  273.239686][T22263] Cannot create hsr debugfs directory
[  273.340538][T21944] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  273.348781][T22884] loop6: detected capacity change from 0 to 1024
[  273.360139][T21944] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  273.367314][T22884] EXT4-fs: inline encryption not supported
[  273.378243][T21944] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  273.393617][T21944] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  273.437743][T21944] 8021q: adding VLAN 0 to HW filter on device bond0
[  273.452176][T21944] 8021q: adding VLAN 0 to HW filter on device team0
[  273.466258][ T8098] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.473297][ T8098] bridge0: port 1(bridge_slave_0) entered forwarding state
[  273.485251][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.492296][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  273.584862][T23001] loop4: detected capacity change from 0 to 512
[  273.594196][T22263] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  273.595201][T23001] EXT4-fs: Mount option(s) incompatible with ext3
[  273.629778][T22263] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  273.651058][T22263] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  273.678686][T22263] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  273.688602][T21944] 8021q: adding VLAN 0 to HW filter on device batadv0
[  273.761104][T22263] 8021q: adding VLAN 0 to HW filter on device bond0
[  273.781440][T22263] 8021q: adding VLAN 0 to HW filter on device team0
[  273.791150][T23034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3655'.
[  273.810379][T17609] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.817448][T17609] bridge0: port 1(bridge_slave_0) entered forwarding state
[  273.845714][T17609] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.852831][T17609] bridge0: port 2(bridge_slave_1) entered forwarding state
[  273.863926][T23037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3656'.
[  273.880800][T23037] veth1_macvtap: left promiscuous mode
[  273.905548][T21944] veth0_vlan: entered promiscuous mode
[  273.915628][T21944] veth1_vlan: entered promiscuous mode
[  273.934287][T21944] veth0_macvtap: entered promiscuous mode
[  273.942222][T21944] veth1_macvtap: entered promiscuous mode
[  273.955144][T21944] batman_adv: batadv0: Interface activated: batadv_slave_0
[  273.966506][T21944] batman_adv: batadv0: Interface activated: batadv_slave_1
[  273.976443][T22263] 8021q: adding VLAN 0 to HW filter on device batadv0
[  273.988438][T17609] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  273.998069][  T291] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  274.013983][  T291] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  274.034128][  T291] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  274.171526][T23063] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=23063 comm=syz.3.3657
[  274.242316][T22263] veth0_vlan: entered promiscuous mode
[  274.252561][T22263] veth1_vlan: entered promiscuous mode
[  274.277057][T22263] veth0_macvtap: entered promiscuous mode
[  274.317056][T23074] lo speed is unknown, defaulting to 1000
[  274.364536][T23074] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3659'.
[  274.377370][T22263] veth1_macvtap: entered promiscuous mode
[  274.407451][T22263] batman_adv: batadv0: Interface activated: batadv_slave_0
[  274.417501][T23076] cgroup2: Unknown parameter 'memor9_hugetlb_accounting'
[  274.427213][T23076] netlink: 'syz.6.3659': attribute type 21 has an invalid length.
[  274.468232][T22263] batman_adv: batadv0: Interface activated: batadv_slave_1
[  274.607706][T17616] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  274.651907][T17616] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  274.682861][T17616] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  274.714063][T17616] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  274.744731][T23110] loop1: detected capacity change from 0 to 4096
[  274.747623][T23112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3665'.
[  274.751156][   T29] kauditd_printk_skb: 258 callbacks suppressed
[  274.751169][   T29] audit: type=1400 audit(274.724:16211): avc:  denied  { create } for  pid=23111 comm="syz.4.3665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  274.785446][   T29] audit: type=1400 audit(274.724:16212): avc:  denied  { audit_write } for  pid=23111 comm="syz.4.3665" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  274.806158][   T29] audit: type=1107 audit(274.724:16213): pid=23111 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='ä'
[  274.857113][T23110] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  274.858766][   T29] audit: type=1400 audit(274.834:16214): avc:  denied  { append } for  pid=23111 comm="syz.4.3665" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  274.965478][T22263] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.977090][   T29] audit: type=1400 audit(274.964:16215): avc:  denied  { write } for  pid=23122 comm="syz.3.3666" path="socket:[50215]" dev="sockfs" ino=50215 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  275.045743][   T29] audit: type=1326 audit(275.024:16216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23122 comm="syz.3.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29628f749 code=0x7ffc0000
[  275.091135][   T29] audit: type=1326 audit(275.064:16217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23122 comm="syz.3.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29628f749 code=0x7ffc0000
[  275.114238][   T29] audit: type=1326 audit(275.064:16218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23122 comm="syz.3.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa29628f749 code=0x7ffc0000
[  275.137246][   T29] audit: type=1326 audit(275.064:16219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23122 comm="syz.3.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa29628f783 code=0x7ffc0000
[  275.160095][   T29] audit: type=1326 audit(275.064:16220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23122 comm="syz.3.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa29628f783 code=0x7ffc0000
[  275.192274][T23132] SELinux:  policydb magic number 0x34343831 does not match expected magic number 0xf97cff8c
[  275.202486][T23132] SELinux: failed to load policy
[  275.231987][T23150] netlink: 'syz.4.3672': attribute type 6 has an invalid length.
[  275.270201][T23154] loop4: detected capacity change from 0 to 512
[  275.304457][T23161] loop4: detected capacity change from 0 to 512
[  275.321867][T23161] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  275.358497][T15552] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.501510][T23183] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=23183 comm=syz.4.3676
[  275.777835][T23208] loop6: detected capacity change from 0 to 2048
[  275.805053][T23208] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  275.832334][T12008] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.910173][T23220] loop6: detected capacity change from 0 to 4096
[  275.930477][T23220] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  276.029414][T12008] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  276.145778][T23237] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  276.174622][T23237] vhci_hcd vhci_hcd.2: invalid port number 96
[  276.180755][T23237] vhci_hcd vhci_hcd.2: default hub control req: 1f00 vfffa i0060 l0
[  276.250032][T23240] netlink: 'syz.6.3696': attribute type 21 has an invalid length.
[  276.304926][T23243] SELinux: ebitmap: truncated map
[  276.316016][T23243] SELinux: failed to load policy
[  276.316096][T23251] loop1: detected capacity change from 0 to 512
[  276.322479][T23244] SELinux: ebitmap: truncated map
[  276.334168][T23244] SELinux: failed to load policy
[  276.489995][T23277] __nla_validate_parse: 11 callbacks suppressed
[  276.490011][T23277] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3705'.
[  276.533885][T23280] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  276.541346][T23280] vhci_hcd vhci_hcd.2: invalid port number 96
[  276.547485][T23280] vhci_hcd vhci_hcd.2: default hub control req: 1f00 vfffa i0060 l0
[  276.621136][T23288] 9p: Bad value for 'wfdno'
[  276.658051][T23295] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23295 comm=syz.1.3710
[  276.677414][T23289] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=23289 comm=syz.2.3707
[  276.742004][T23295] netlink: 'syz.1.3710': attribute type 1 has an invalid length.
[  276.760359][T23295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3710'.
[  276.833904][T23312] netlink: 'syz.4.3713': attribute type 2 has an invalid length.
[  276.973075][T23346] --map-set only usable from mangle table
[  277.043427][T23351] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  277.061004][T23351] vhci_hcd vhci_hcd.2: invalid port number 96
[  277.067094][T23351] vhci_hcd vhci_hcd.2: default hub control req: 1f00 vfffa i0060 l0
[  277.146915][T23360] 9p: Bad value for 'wfdno'
[  277.184103][T23364] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3721'.
[  277.213461][T23364] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3721'.
[  277.283256][T23370] loop4: detected capacity change from 0 to 1024
[  277.317207][T23370] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  277.472083][T15552] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.627922][T23408] sch_tbf: peakrate 7 is lower than or equals to rate 19 !
[  277.637237][T23407] loop4: detected capacity change from 0 to 512
[  277.704942][T23413] --map-set only usable from mangle table
[  277.741462][T23420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3731'.
[  277.757114][T23420] netlink: 312 bytes leftover after parsing attributes in process `syz.3.3731'.
[  277.767230][T23423] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  277.780469][T23423] vhci_hcd vhci_hcd.2: invalid port number 96
[  277.786590][T23423] vhci_hcd vhci_hcd.2: default hub control req: 1f00 vfffa i0060 l0
[  277.832009][T23426] 9p: Bad value for 'wfdno'
[  277.882309][T23431] lo speed is unknown, defaulting to 1000
[  277.898892][T23431] lo speed is unknown, defaulting to 1000
[  277.905109][T23431] lo speed is unknown, defaulting to 1000
[  277.985858][T23431] infiniband s
z1: set down
[  277.990418][T23431] infiniband s
z1: added lo
[  277.994929][ T3395] lo speed is unknown, defaulting to 1000
[  278.120419][T23431] RDS/IB: s
z1: added
[  278.124522][T23431] smc: adding ib device s
z1 with port count 1
[  278.140350][T23431] smc:    ib device s
z1 port 1 has no pnetid
[  278.149495][ T3395] lo speed is unknown, defaulting to 1000
[  278.165265][T23431] lo speed is unknown, defaulting to 1000
[  278.230554][T23431] lo speed is unknown, defaulting to 1000
[  278.277368][T23453] netlink: 'syz.4.3736': attribute type 12 has an invalid length.
[  278.285294][T23453] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3736'.
[  278.405839][T23447] veth4: entered promiscuous mode
[  278.410978][T23447] veth4: entered allmulticast mode
[  278.635824][T23431] lo speed is unknown, defaulting to 1000
[  279.018919][T23482] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3740'.
[  279.065724][T23431] lo speed is unknown, defaulting to 1000
[  279.078831][T23484] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3740'.
[  279.195602][T23499] 9p: Bad value for 'wfdno'
[  279.242538][T23431] lo speed is unknown, defaulting to 1000
[  279.290021][T23508] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3746'.
[  279.345353][T23431] lo speed is unknown, defaulting to 1000
[  279.379368][T23431] lo speed is unknown, defaulting to 1000
[  279.475661][T23524] lo speed is unknown, defaulting to 1000
[  279.506019][T23524] lo speed is unknown, defaulting to 1000
[  279.815348][T23578] blkio.reset_stats is deprecated
[  279.839440][T23578] xt_connbytes: Forcing CT accounting to be enabled
[  279.852946][   T29] kauditd_printk_skb: 294 callbacks suppressed
[  279.852960][   T29] audit: type=1326 audit(279.834:16515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23582 comm="syz.1.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e1f9f749 code=0x7ffc0000
[  279.856455][T23583] 9p: Bad value for 'wfdno'
[  279.882178][T23578] Cannot find set identified by id 0 to match
[  279.889836][   T29] audit: type=1326 audit(279.834:16516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23582 comm="syz.1.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e1f9f749 code=0x7ffc0000
[  279.916046][   T29] audit: type=1326 audit(279.834:16517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23582 comm="syz.1.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77e1f9f749 code=0x7ffc0000
[  279.939012][   T29] audit: type=1326 audit(279.834:16518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23582 comm="syz.1.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e1f9f749 code=0x7ffc0000
[  279.962026][   T29] audit: type=1326 audit(279.834:16519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23582 comm="syz.1.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e1f9f749 code=0x7ffc0000
[  279.985055][   T29] audit: type=1326 audit(279.834:16520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23582 comm="syz.1.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f77e1f9f749 code=0x7ffc0000
[  280.007937][   T29] audit: type=1326 audit(279.834:16521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23582 comm="syz.1.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e1f9f749 code=0x7ffc0000
[  280.030967][   T29] audit: type=1326 audit(279.834:16522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23582 comm="syz.1.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f77e1f9f749 code=0x7ffc0000
[  280.053969][   T29] audit: type=1326 audit(279.834:16523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23582 comm="syz.1.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e1f9f749 code=0x7ffc0000
[  280.076986][   T29] audit: type=1326 audit(279.834:16524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23582 comm="syz.1.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f77e1f9f749 code=0x7ffc0000
[  280.690369][T23684] 9p: Bad value for 'wfdno'
[  280.938610][T23720] netlink: 'syz.4.3773': attribute type 14 has an invalid length.
[  280.960338][T23716] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=23716 comm=syz.2.3772
[  281.069696][T23732] sch_tbf: burst 0 is lower than device lo mtu (18) !
[  281.363451][T23770] set_capacity_and_notify: 2 callbacks suppressed
[  281.363467][T23770] loop1: detected capacity change from 0 to 2048
[  281.394895][T23770] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  281.422903][T22263] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.508522][T23788] 9p: Bad value for 'wfdno'
[  281.707921][T23798] loop1: detected capacity change from 0 to 128
[  281.721034][T23798] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  281.742582][T23800] bond1: Unable to set up delay as MII monitoring is disabled
[  281.751476][T23800] bond1 (unregistering): Released all slaves
[  281.765036][T23798] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[  281.772989][T23798] FAT-fs (loop1): Filesystem has been set read-only
[  281.780014][T23798] bio_check_eod: 29 callbacks suppressed
[  281.780031][T23798] syz.1.3782: attempt to access beyond end of device
[  281.780031][T23798] loop1: rw=8912896, sector=2065, nr_sectors = 8 limit=128
[  281.799588][T23798] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[  281.807418][T23798] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[  281.816877][T23873] syz.1.3782: attempt to access beyond end of device
[  281.816877][T23873] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  281.831680][T23798] syz.1.3782: attempt to access beyond end of device
[  281.831680][T23798] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  281.845759][T23873] syz.1.3782: attempt to access beyond end of device
[  281.845759][T23873] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  281.851061][T23838] __nla_validate_parse: 4 callbacks suppressed
[  281.851077][T23838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3784'.
[  281.860016][T23873] syz.1.3782: attempt to access beyond end of device
[  281.860016][T23873] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  281.889084][T23798] syz.1.3782: attempt to access beyond end of device
[  281.889084][T23798] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  281.910503][T23838] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  281.918041][T23838] batman_adv: batadv0: Removing interface: batadv_slave_0
[  281.932386][T23328] Bluetooth: hci0: Frame reassembly failed (-84)
[  281.939490][T23879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3786'.
[  281.962822][T23838] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  281.970610][T23838] batman_adv: batadv0: Removing interface: batadv_slave_1
[  282.018939][T23879] team0 (unregistering): Port device team_slave_0 removed
[  282.033707][T23879] team0 (unregistering): Port device team_slave_1 removed
[  282.177370][T23931] FAULT_INJECTION: forcing a failure.
[  282.177370][T23931] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  282.190643][T23931] CPU: 1 UID: 0 PID: 23931 Comm: syz.4.3791 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  282.190680][T23931] Tainted: [W]=WARN
[  282.190687][T23931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  282.190763][T23931] Call Trace:
[  282.190769][T23931]  <TASK>
[  282.190776][T23931]  __dump_stack+0x1d/0x30
[  282.190813][T23931]  dump_stack_lvl+0xe8/0x140
[  282.190837][T23931]  dump_stack+0x15/0x1b
[  282.190858][T23931]  should_fail_ex+0x265/0x280
[  282.190958][T23931]  should_fail+0xb/0x20
[  282.190978][T23931]  should_fail_usercopy+0x1a/0x20
[  282.191003][T23931]  strncpy_from_user+0x27/0x260
[  282.191036][T23931]  ? __fget_files+0x184/0x1c0
[  282.191110][T23931]  __se_sys_add_key+0x86/0x350
[  282.191146][T23931]  __x64_sys_add_key+0x67/0x80
[  282.191176][T23931]  x64_sys_call+0x2ea3/0x3000
[  282.191255][T23931]  do_syscall_64+0xd8/0x2c0
[  282.191290][T23931]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.191314][T23931] RIP: 0033:0x7f323d4cf749
[  282.191331][T23931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  282.191354][T23931] RSP: 002b:00007f323bf2f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  282.191373][T23931] RAX: ffffffffffffffda RBX: 00007f323d725fa0 RCX: 00007f323d4cf749
[  282.191385][T23931] RDX: 0000200000000840 RSI: 0000000000000000 RDI: 00002000000001c0
[  282.191448][T23931] RBP: 00007f323bf2f090 R08: ffffffffffffffff R09: 0000000000000000
[  282.191461][T23931] R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000001
[  282.191473][T23931] R13: 00007f323d726038 R14: 00007f323d725fa0 R15: 00007ffed2a7b448
[  282.191492][T23931]  </TASK>
[  282.447850][T23948] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3796'.
[  282.456886][T23945] loop4: detected capacity change from 0 to 4096
[  282.489139][T23950] ipt_ECN: cannot use operation on non-tcp rule
[  282.531456][T23945] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  282.594825][T15552] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.641329][T23957] vlan0: entered allmulticast mode
[  282.932137][T23983] loop4: detected capacity change from 0 to 512
[  282.970526][T23983] EXT4-fs (loop4): 1 truncate cleaned up
[  282.976703][T23983] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  283.014702][T23993] xt_hashlimit: max too large, truncated to 1048576
[  283.152216][T24008] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3807'.
[  283.181380][T24011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3808'.
[  283.198230][T24014] loop1: detected capacity change from 0 to 2048
[  283.246613][T24014] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  283.352001][T24014] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3809: bg 0: block 345: padding at end of block bitmap is not set
[  283.390027][T24014] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1 with error 117
[  283.402558][T24014] EXT4-fs (loop1): This should not happen!! Data will be lost
[  283.402558][T24014] 
[  283.487883][T24031] netlink: 'syz.3.3811': attribute type 12 has an invalid length.
[  283.495831][T24031] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3811'.
[  283.796826][T24007] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3802: bg 0: block 465: padding at end of block bitmap is not set
[  283.844690][T24007] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  283.857160][T24007] EXT4-fs (loop4): This should not happen!! Data will be lost
[  283.857160][T24007] 
[  283.866803][T24007] EXT4-fs (loop4): Total free blocks count 0
[  283.872798][T24007] EXT4-fs (loop4): Free/Dirty block details
[  283.878680][T24007] EXT4-fs (loop4): free_blocks=0
[  283.883631][T24007] EXT4-fs (loop4): dirty_blocks=10168
[  283.888985][T24007] EXT4-fs (loop4): Block reservation details
[  283.894995][T24007] EXT4-fs (loop4): i_reserved_data_blocks=10168
[  283.951429][T17618] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28
[  284.030517][ T3792] Bluetooth: hci0: command 0x1003 tx timeout
[  284.036928][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  284.286185][T22263] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.415377][T24049] loop4: detected capacity change from 0 to 1024
[  284.459055][T24042] lo speed is unknown, defaulting to 1000
[  284.500609][T24053] loop1: detected capacity change from 0 to 2048
[  284.511917][T24042] lo speed is unknown, defaulting to 1000
[  284.529393][T24049] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  284.561633][T24053] ext4: Unknown parameter 'nouser_xattr'
[  284.601730][T24049] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  284.707943][T24049] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  284.770392][T24049] EXT4-fs (loop4): orphan cleanup on readonly fs
[  284.780977][T24063] lo speed is unknown, defaulting to 1000
[  284.800785][T24069] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  284.824037][T24049] EXT4-fs error (device loop4): ext4_read_inode_bitmap:167: comm syz.4.3813: Inode bitmap for bg 0 marked uninitialized
[  284.842916][T24063] lo speed is unknown, defaulting to 1000
[  284.894524][T24049] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  284.914408][T24093] lo speed is unknown, defaulting to 1000
[  284.931919][T24049] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (32298!=35945)
[  284.950092][T24098] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  284.981827][T24093] lo speed is unknown, defaulting to 1000
[  285.005251][T15552] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.147231][T24142] loop4: detected capacity change from 0 to 512
[  285.184958][T24142] __quota_error: 453 callbacks suppressed
[  285.184974][T24142] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6).
[  285.205738][T24142] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  285.226169][T24142] EXT4-fs (loop4): mount failed
[  285.496029][   T29] audit: type=1326 audit(285.474:16978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24209 comm="syz.2.3823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6f4f5f749 code=0x7ffc0000
[  285.532646][   T29] audit: type=1326 audit(285.474:16979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24209 comm="syz.2.3823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6f4f5f749 code=0x7ffc0000
[  285.537537][T24212] loop1: detected capacity change from 0 to 512
[  285.555816][   T29] audit: type=1326 audit(285.474:16980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24209 comm="syz.2.3823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6f4f5f749 code=0x7ffc0000
[  285.584902][   T29] audit: type=1326 audit(285.474:16981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24209 comm="syz.2.3823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6f4f5f749 code=0x7ffc0000
[  285.608070][   T29] audit: type=1326 audit(285.474:16982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24209 comm="syz.2.3823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6f4f5f749 code=0x7ffc0000
[  285.610494][T24212] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  285.631123][   T29] audit: type=1326 audit(285.474:16983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24209 comm="syz.2.3823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6f4f5f749 code=0x7ffc0000
[  285.639793][T24212] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  285.671801][   T29] audit: type=1326 audit(285.474:16984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24209 comm="syz.2.3823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6f4f5f749 code=0x7ffc0000
[  285.672188][T24212] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.3822: Allocating blocks 41-42 which overlap fs metadata
[  285.694850][   T29] audit: type=1326 audit(285.474:16985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24209 comm="syz.2.3823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6f4f5f749 code=0x7ffc0000
[  285.708811][T24212] Quota error (device loop1): write_blk: dquota write failed
[  285.735466][T24210] netlink: 'syz.2.3823': attribute type 4 has an invalid length.
[  285.739246][T24212] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.3822: Allocating blocks 41-42 which overlap fs metadata
[  285.767820][T24212] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.3822: Failed to acquire dquot type 1
[  285.779567][T24212] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  285.794321][T24212] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.3822: corrupted inode contents
[  285.806696][T24212] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.3822: mark_inode_dirty error
[  285.825093][T24212] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.3822: corrupted inode contents
[  285.844650][T24212] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.3822: mark_inode_dirty error
[  285.856456][T24212] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.3822: corrupted inode contents
[  285.868484][T24212] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[  285.877363][T24212] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.3822: corrupted inode contents
[  285.889474][T24212] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.3822: mark_inode_dirty error
[  285.900791][T24212] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[  285.910174][T24212] EXT4-fs (loop1): 1 truncate cleaned up
[  285.916257][T24212] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  285.951987][T22263] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.113700][T24280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3827'.
[  286.126662][T24280] hub 9-0:1.0: USB hub found
[  286.131766][T24280] hub 9-0:1.0: 8 ports detected
[  286.140765][T24280] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24280 comm=syz.1.3827
[  286.199922][T24297] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3828'.
[  286.211206][T24297] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  286.256236][T24311] loop1: detected capacity change from 0 to 2048
[  286.283013][T24311] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  286.307930][T22263] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.379083][T24334] loop4: detected capacity change from 0 to 2048
[  286.412941][T24334] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  286.428971][T24334] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3831'.
[  286.453458][T15552] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.552699][T24353] lo speed is unknown, defaulting to 1000
[  286.558766][T24353] lo speed is unknown, defaulting to 1000
[  286.604774][T24369] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  286.671278][T24391] netlink: 'syz.2.3837': attribute type 4 has an invalid length.
[  286.940957][T24440] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3841'.
[  286.951042][T24440] bridge0: entered allmulticast mode
[  286.959663][T24440] loop6: detected capacity change from 0 to 512
[  286.967301][T24440] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  286.978954][T24440] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3841: invalid indirect mapped block 4294967295 (level 1)
[  286.993622][T24440] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3841: invalid indirect mapped block 4294967295 (level 1)
[  287.011661][T24440] EXT4-fs (loop6): 2 truncates cleaned up
[  287.018063][T24440] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  287.032071][T24440] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3841'.
[  287.041339][T24440] bridge_slave_1: left allmulticast mode
[  287.047011][T24440] bridge_slave_1: left promiscuous mode
[  287.052770][T24440] bridge0: port 2(bridge_slave_1) entered disabled state
[  287.060775][T24440] bridge_slave_0: left allmulticast mode
[  287.066437][T24440] bridge_slave_0: left promiscuous mode
[  287.072184][T24440] bridge0: port 1(bridge_slave_0) entered disabled state
[  287.085046][T24440] bridge0 (unregistering): left allmulticast mode
[  287.175638][T12008] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.280749][T24511] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3845'.
[  287.848615][T24606] FAULT_INJECTION: forcing a failure.
[  287.848615][T24606] name failslab, interval 1, probability 0, space 0, times 0
[  287.861275][T24606] CPU: 0 UID: 0 PID: 24606 Comm: syz.3.3860 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  287.861376][T24606] Tainted: [W]=WARN
[  287.861382][T24606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  287.861394][T24606] Call Trace:
[  287.861402][T24606]  <TASK>
[  287.861411][T24606]  __dump_stack+0x1d/0x30
[  287.861479][T24606]  dump_stack_lvl+0xe8/0x140
[  287.861499][T24606]  dump_stack+0x15/0x1b
[  287.861516][T24606]  should_fail_ex+0x265/0x280
[  287.861558][T24606]  should_failslab+0x8c/0xb0
[  287.861578][T24606]  kmem_cache_alloc_node_noprof+0x6b/0x4c0
[  287.861648][T24606]  ? __alloc_skb+0x324/0x4d0
[  287.861675][T24606]  __alloc_skb+0x324/0x4d0
[  287.861696][T24606]  ? __alloc_skb+0x24d/0x4d0
[  287.861762][T24606]  audit_log_start+0x3a0/0x720
[  287.861804][T24606]  ? kstrtouint+0x76/0xc0
[  287.861826][T24606]  audit_seccomp+0x48/0x100
[  287.861853][T24606]  ? __seccomp_filter+0x832/0x1260
[  287.861951][T24606]  __seccomp_filter+0x843/0x1260
[  287.861981][T24606]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  287.862010][T24606]  ? vfs_write+0x7e8/0x960
[  287.862098][T24606]  ? __cond_resched+0x4e/0x90
[  287.862125][T24606]  __secure_computing+0x82/0x150
[  287.862150][T24606]  syscall_trace_enter+0xcf/0x1e0
[  287.862173][T24606]  do_syscall_64+0xb2/0x2c0
[  287.862252][T24606]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.862273][T24606] RIP: 0033:0x7fa29628f749
[  287.862286][T24606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  287.862302][T24606] RSP: 002b:00007fa294cf7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e1
[  287.862319][T24606] RAX: ffffffffffffffda RBX: 00007fa2964e5fa0 RCX: 00007fa29628f749
[  287.862330][T24606] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  287.862369][T24606] RBP: 00007fa294cf7090 R08: 0000000000000000 R09: 0000000000000000
[  287.862458][T24606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  287.862471][T24606] R13: 00007fa2964e6038 R14: 00007fa2964e5fa0 R15: 00007fff96e4bb88
[  287.862487][T24606]  </TASK>
[  288.181385][T24613] --map-set only usable from mangle table
[  288.257503][T24615] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3862'.
[  288.288499][T24615] ip6gre1: entered promiscuous mode
[  288.293853][T24615] ip6gre1: entered allmulticast mode
[  288.463771][T24626] loop6: detected capacity change from 0 to 128
[  288.526060][T24626] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  288.655811][T24640] netlink: 'syz.3.3864': attribute type 12 has an invalid length.
[  288.663682][T24640] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3864'.
[  289.773902][T24684] loop4: detected capacity change from 0 to 512
[  290.468191][T24698] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3879'.
[  290.532383][T24709] lo speed is unknown, defaulting to 1000
[  290.559838][T24709] lo speed is unknown, defaulting to 1000
[  290.563207][T24716] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  290.655934][T24713] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3883'.
[  290.698503][T24713] loop4: detected capacity change from 0 to 512
[  290.724533][T24713] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  290.774567][T24713] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  290.818674][T24713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.876790][T24779] loop6: detected capacity change from 0 to 512
[  290.923785][T24783] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3887'.
[  291.109094][T24825] loop6: detected capacity change from 0 to 2048
[  291.116294][T24825] EXT4-fs: Ignoring removed bh option
[  291.145911][T24825] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  291.191053][T12008] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.318746][T24884] lo speed is unknown, defaulting to 1000
[  291.325566][T24884] lo speed is unknown, defaulting to 1000
[  291.626830][T24962] loop4: detected capacity change from 0 to 1024
[  291.634336][T24962] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  291.644955][T24962] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  291.645571][T24964] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  291.662981][T24964] vhci_hcd vhci_hcd.2: invalid port number 96
[  291.665564][T24962] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  291.669051][T24964] vhci_hcd vhci_hcd.2: default hub control req: 1f00 vfffa i0060 l0
[  291.692382][T24962] EXT4-fs (loop4): orphan cleanup on readonly fs
[  291.699493][T24962] EXT4-fs error (device loop4): ext4_read_inode_bitmap:167: comm syz.4.3897: Inode bitmap for bg 0 marked uninitialized
[  291.713079][T24962] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  291.766421][T24962] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (32298!=35945)
[  291.785951][T15552] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.807465][T24973] bond1: down delay (128) is not a multiple of miimon (7), value rounded to 126 ms
[  291.816888][T24973] bond1: peer notification delay (3) is not a multiple of miimon (7), value rounded to 0 ms
[  291.827096][T24973] bond1: entered allmulticast mode
[  291.844147][   T29] kauditd_printk_skb: 176 callbacks suppressed
[  291.844162][   T29] audit: type=1326 audit(547.829:17157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25007 comm="syz.2.3903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6f4f5f749 code=0x7ffc0000
[  291.851309][T25008] batadv_slave_0: entered promiscuous mode
[  291.881635][   T29] audit: type=1326 audit(547.829:17158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25007 comm="syz.2.3903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6f4f5f749 code=0x7ffc0000
[  291.904696][   T29] audit: type=1326 audit(547.829:17159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25007 comm="syz.2.3903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6f4f5f749 code=0x7ffc0000
[  291.927733][   T29] audit: type=1326 audit(547.829:17160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25007 comm="syz.2.3903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff6f4f5f749 code=0x7ffc0000
[  291.950673][   T29] audit: type=1326 audit(547.829:17161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25007 comm="syz.2.3903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6f4f5f749 code=0x7ffc0000
[  291.973585][   T29] audit: type=1326 audit(547.829:17162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25007 comm="syz.2.3903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6f4f5f749 code=0x7ffc0000
[  291.994175][T25019] loop4: detected capacity change from 0 to 2048
[  291.996550][   T29] audit: type=1326 audit(547.829:17163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25007 comm="syz.2.3903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6f4f5f749 code=0x7ffc0000
[  292.024388][T25019] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  292.025737][   T29] audit: type=1326 audit(547.829:17164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25007 comm="syz.2.3903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6f4f5f749 code=0x7ffc0000
[  292.041640][T25019] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3904: bg 0: block 345: padding at end of block bitmap is not set
[  292.060653][   T29] audit: type=1326 audit(547.829:17165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25007 comm="syz.2.3903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6f4f5f749 code=0x7ffc0000
[  292.075336][T25019] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1 with error 117
[  292.097842][   T29] audit: type=1326 audit(547.829:17166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25007 comm="syz.2.3903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6f4f5f749 code=0x7ffc0000
[  292.098432][T25008] batadv_slave_0: left promiscuous mode
[  292.110194][T25019] EXT4-fs (loop4): This should not happen!! Data will be lost
[  292.110194][T25019] 
[  292.232356][T15552] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.309421][T25046] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  292.335569][T25044] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3911'.
[  292.344936][T25046] vhci_hcd vhci_hcd.2: invalid port number 96
[  292.351204][T25046] vhci_hcd vhci_hcd.2: default hub control req: 1f00 vfffa i0060 l0
[  292.441178][T25059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3915'.
[  292.455574][T25055] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3913'.
[  292.492478][T25062] vlan0: entered allmulticast mode
[  292.528934][T25066] SELinux:  Context system_u:object_r:restorecond_exec_t:s0 is not valid (left unmapped).
[  292.618657][T25070] lo speed is unknown, defaulting to 1000
[  292.650137][T25070] lo speed is unknown, defaulting to 1000
[  293.048474][T25139] loop4: detected capacity change from 0 to 2048
[  293.071399][T25139] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  293.100853][T25139] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3920: bg 0: block 345: padding at end of block bitmap is not set
[  293.146363][T25139] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1 with error 117
[  293.158864][T25139] EXT4-fs (loop4): This should not happen!! Data will be lost
[  293.158864][T25139] 
[  293.191682][T25158] lo speed is unknown, defaulting to 1000
[  293.197936][T25158] lo speed is unknown, defaulting to 1000
[  293.233754][T25167] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  293.822765][T25288] loop6: detected capacity change from 0 to 2048
[  293.835581][T15552] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.846394][T25288] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  293.890060][T12008] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.890161][T25303] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3929'.
[  293.909815][T25303] netlink: 'syz.3.3929': attribute type 13 has an invalid length.
[  293.966406][T25303] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.973711][T25303] bridge0: port 1(bridge_slave_0) entered disabled state
[  294.051068][T25309] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=25309 comm=syz.6.3930
[  294.122271][T25300] vxcan2: entered allmulticast mode
[  294.128169][T25303] netlink: 'syz.3.3929': attribute type 13 has an invalid length.
[  294.139692][ T7958] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  294.148901][T25303] netlink: 'syz.3.3929': attribute type 13 has an invalid length.
[  294.156938][T23300] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  294.166512][T25303] netlink: 'syz.3.3929': attribute type 13 has an invalid length.
[  294.174879][T23300] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  294.185122][T25303] netlink: 'syz.3.3929': attribute type 13 has an invalid length.
[  294.193079][T23300] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  294.202349][T25303] netlink: 'syz.3.3929': attribute type 13 has an invalid length.
[  294.210580][T25303] netlink: 'syz.3.3929': attribute type 13 has an invalid length.
[  294.218756][T25303] netlink: 'syz.3.3929': attribute type 13 has an invalid length.
[  294.227051][T25303] netlink: 'syz.3.3929': attribute type 13 has an invalid length.
[  294.235387][T25303] netlink: 'syz.3.3929': attribute type 13 has an invalid length.
[  294.452422][T25329] loop1: detected capacity change from 0 to 2048
[  294.483189][T25334] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3936'.
[  294.505238][T25329] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  294.512957][T25334] IPVS: Error connecting to the multicast addr
[  294.554500][T25329] ==================================================================
[  294.562614][T25329] BUG: KCSAN: data-race in _copy_to_iter / memcpy_and_pad
[  294.569746][T25329] 
[  294.572066][T25329] read to 0xffff88817c1f3400 of 1024 bytes by task 15955 on cpu 1:
[  294.579951][T25329]  _copy_to_iter+0x130/0xe70
[  294.584549][T25329]  copy_page_to_iter+0x18f/0x2d0
[  294.589484][T25329]  filemap_read+0x407/0xa00
[  294.593986][T25329]  blkdev_read_iter+0x22d/0x2e0
[  294.599185][T25329]  vfs_read+0x64c/0x770
[  294.603331][T25329]  ksys_read+0xda/0x1a0
[  294.607486][T25329]  __x64_sys_read+0x40/0x50
[  294.611983][T25329]  x64_sys_call+0x2889/0x3000
[  294.616663][T25329]  do_syscall_64+0xd8/0x2c0
[  294.621172][T25329]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.627061][T25329] 
[  294.629377][T25329] write to 0xffff88817c1f3491 of 55 bytes by task 25329 on cpu 0:
[  294.637178][T25329]  memcpy_and_pad+0x5a/0x80
[  294.641698][T25329]  ext4_file_open+0x53d/0x600
[  294.646386][T25329]  do_dentry_open+0x54b/0xa60
[  294.651071][T25329]  vfs_open+0x37/0x1e0
[  294.655143][T25329]  path_openat+0x1ddd/0x23b0
[  294.659735][T25329]  do_filp_open+0x109/0x230
[  294.664244][T25329]  do_sys_openat2+0xa6/0x150
[  294.668851][T25329]  __x64_sys_openat+0xf2/0x120
[  294.673624][T25329]  x64_sys_call+0x2b07/0x3000
[  294.678306][T25329]  do_syscall_64+0xd8/0x2c0
[  294.682816][T25329]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.688712][T25329] 
[  294.691025][T25329] Reported by Kernel Concurrency Sanitizer on:
[  294.697171][T25329] CPU: 0 UID: 0 PID: 25329 Comm: syz.1.3935 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  294.708550][T25329] Tainted: [W]=WARN
[  294.712346][T25329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  294.722400][T25329] ==================================================================
[  294.767036][T22263] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.