last executing test programs:

2.948957125s ago: executing program 0 (id=53):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000040)='%+9llu \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x43}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0x4}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xc4, 0xfffffffe}}, 0xe8)
socket$l2tp(0x2, 0x2, 0x73)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c)

2.244942946s ago: executing program 2 (id=64):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x70}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x210, 0x230, 0x230, 0x210, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x7f510100, 0x4, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)
timerfd_gettime(r6, &(0x7f0000000440))
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f0000000a40)=""/4096, 0x1000, <r7=>0x0, &(0x7f0000000380)=""/111, 0x6f}}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r4, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='kfree\x00', r8, 0x0, 0x1ffffffffffffffd}, 0x18)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0)
read$rfkill(r9, &(0x7f0000000040), 0x8)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
ioctl$TIOCVHANGUP(r10, 0x5437, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x4)
setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0xb, 0x0, &(0x7f0000000080))

2.19687204s ago: executing program 3 (id=66):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x103000, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
r4 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r4, &(0x7f0000000040), 0x10)
listen(r4, 0x0)
r5 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r5, &(0x7f0000000080), 0x10)
r6 = syz_io_uring_setup(0x172, &(0x7f0000000780)={0x0, 0x4f5c, 0x10100, 0xfffffffe, 0x2a0}, &(0x7f00000001c0)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27})
io_uring_enter(r6, 0x567, 0x0, 0x0, 0x0, 0x0)
sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)
r9 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_GET(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x200, 0x70bd2d, 0x25dfdbfc}, 0x10}}, 0x4000000)
sendto$inet6(r5, 0x0, 0x62, 0x0, 0x0, 0x0)
r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r10, r4, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
fadvise64(r3, 0x7f, 0x0, 0x4)
r11 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r2, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0], <r12=>0x0, 0xc7, &(0x7f0000000740)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0xbf, 0x8, 0x8, &(0x7f0000000800)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
timerfd_settime(r11, 0x0, &(0x7f0000000100)={{0x0, 0x989680}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x18, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000500000000000000a1ffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001832000003000000000000000000000018220000", @ANYRES32=r3, @ANYBLOB="0000000003000000bf910000f8ff000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0xc, 0x58, &(0x7f0000000600)=""/88, 0x41100, 0x58, '\x00', 0x0, @fallback=0xf, r11, 0x8, &(0x7f0000000280)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x1, 0x6, 0x6}, 0x10, r12, r2, 0x9, 0x0, &(0x7f0000000980)=[{0x3, 0x2, 0x2, 0x1}, {0x2, 0x5, 0xc, 0xab6fc72faea44c1e}, {0x0, 0x5, 0xc, 0x1}, {0x1, 0x1, 0x10, 0x5}, {0x0, 0x2, 0xe, 0x3}, {0x5, 0x5, 0x1, 0x7}, {0x2, 0x1, 0xa, 0x1}, {0x5, 0x4, 0x8, 0x3}, {0x4, 0x4, 0xb, 0x8}], 0x10, 0x6}, 0x94)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000002000000000000000900000018110000", @ANYRES32=r0, @ANYRESHEX], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r13}, 0x10)

2.123511327s ago: executing program 0 (id=68):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
listen(r0, 0xda90)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e23, 0x262, @local, 0x3}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x6c)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x68, r2, 0x1, 0x9, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x1804}, 0x20000000)
recvmmsg(r0, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40000000, 0x0)

2.070218753s ago: executing program 2 (id=69):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x400)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x2, 0xffff0000, 0x0, 'queue0\x00', 0x5})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
close(r0)

1.980898622s ago: executing program 3 (id=70):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
inotify_init1(0x0)
socket(0x2, 0x2, 0x3a)
syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file2\x00', 0x4204, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f00000008c0)={[{@debug}, {@minixdf}], [{@uid_gt}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x37, 0x39, 0x66, 0x33, 0x38, 0x38, 0x65], 0x2d, [0x38, 0x30, 0x30, 0x35], 0x2d, [0x31, 0x35, 0x36, 0x31], 0x2d, [0x62, 0x31, 0x38, 0x57], 0x2d, [0x31, 0x36, 0x6d, 0x63, 0x65, 0x64, 0x8, 0x66]}}}, {@subj_user={'subj_user', 0x3d, '\\&-'}}, {@flag='lazytime'}, {@permit_directio}, {@fowner_eq}, {@context={'context', 0x3d, 'staff_u'}}, {@fowner_gt}, {@flag='ro'}]}, 0x5, 0x775, &(0x7f0000001180)="$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")
r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x100, 0x10020, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0x9, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe90}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10)
pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
inotify_init()
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
sendfile(r1, r1, 0x0, 0x7a680000)

1.980508312s ago: executing program 0 (id=71):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x800002, 0x0)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000200)=0x7ffffffc)
ioctl$EVIOCGRAB(r0, 0x40044590, 0x0)

1.947036265s ago: executing program 2 (id=72):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18)
ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x2)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00'}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r2}, 0x18)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r4, 0x0, r6, 0x0, 0x8000f28, 0x0)
splice(r5, 0x0, r4, 0x0, 0x7f, 0xe)
write(r3, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00')
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
lseek(r7, 0x2004, 0x420000000000000)
fcntl$notify(0xffffffffffffffff, 0x402, 0x8000001f)

1.914237308s ago: executing program 0 (id=73):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x800002, 0x0)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000200)=0x7ffffffc)
ioctl$EVIOCGRAB(r0, 0x40044590, 0x0)

1.819457638s ago: executing program 0 (id=75):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES32=r0], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r3=>r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000004000), &(0x7f00000003c0)}, 0x20)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12)
recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESOCT=r3], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r6}, 0x10)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4)
r8 = socket(0x2, 0xa, 0x300)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r8], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r9}, 0x10)
setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)
sendto$inet6(r7, 0x0, 0x41, 0x4000005, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000400)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18)
add_key$keyring(&(0x7f0000000200), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x0, 0x0)
getdents(r11, &(0x7f0000000080)=""/43, 0x39)

1.760857894s ago: executing program 4 (id=76):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x20, 0x700, 0x3, 0x6, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x68, 0x0, 0x6, 0x2f, 0x0, @empty, @remote}}}})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c51de8c7955ef6b, @perf_config_ext={0x7, 0x3}, 0x100202, 0x0, 0xfffffffb, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x973, &(0x7f0000006680))
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000)
r3 = syz_clone(0x20000000, 0x0, 0xf, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28})
futex(&(0x7f0000000000)=0x1, 0x6, 0x22, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f000000cffc), 0x5, 0x300, 0x0, &(0x7f0000000000)=0x6, 0x4ffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7fff}, 0x18)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000280)={[{@journal_async_commit}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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")
chdir(&(0x7f0000000400)='./file0\x00')
mkdir(&(0x7f0000000040)='./control\x00', 0x0)

1.231885047s ago: executing program 1 (id=77):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x98142, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x4190, 0xaea}, 0x4105, 0x2e, 0x6, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40000000000a9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
syz_emit_ethernet(0xc6, &(0x7f0000000700)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0xb8, 0x4fe, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x42}, {[@cipso={0x86, 0x6, 0x3}]}}, {0x800, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "6fdfa0d2001efbb3e29a4ac275ca11b984ff5def6ed2e4ea9bc0eabdd34c732b", "df23520b57e4c98679c7795a27c7bf3e7d776b600ba8d82d6ba417e219edd86fb708441efcf75fe803412dae374281c2", "5df814aa2e34e4f8a759805b993e2d69a8f476de686861a9850edbe3", {"2cfee9b9d5b0b2b5710c00", "e40ca7e0a7b4bbc4bc9720c876a57954"}}}}}}}, 0x0)

1.142595256s ago: executing program 1 (id=78):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000c00000000000000008500000007000000040000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000c00000000000000008500000007000000040000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
kexec_load(0x4, 0xa, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_rdma(0x10, 0x3, 0x14)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/stat\x00', 0x0, 0x0)
read$rfkill(r3, &(0x7f0000000040), 0x8) (async)
read$rfkill(r3, &(0x7f0000000040), 0x8)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
pwrite64(r5, &(0x7f00000002c0)="8c", 0x1, 0x7fffffffffffffff)
gettid() (async)
r6 = gettid()
ustat(0x3, &(0x7f0000000040)) (async)
ustat(0x3, &(0x7f0000000040))
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020100000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020100000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000100)='kfree\x00', r8, 0x0, 0x4}, 0x18)
sendmsg$NFT_BATCH(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a01010000000000000000020000000900020073797a31000000000900010073797a300000000054000380080002400000000840000380140001006272696467655f736c6176655f31000014000100776732000000000000000000000000001400010077673200000000000000000000000000080001"], 0xa8}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a0703000000000000000002000b09080003400000000a0900010073797a30000000000c000640000008000000000214000000020a01"], 0x70}}, 0x0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r6, @ANYBLOB="2a997dee7022a69a668b5d91e4fc5efe77bcb02013af3a43884aa6fd8b38b1bc00000101000000db19717495fcb791b6"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)
socket(0xa, 0xa, 0x3) (async)
socket(0xa, 0xa, 0x3)
epoll_create(0x4) (async)
epoll_create(0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10)

1.071040513s ago: executing program 2 (id=79):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="700000001900010000000000000000001d01000005000d0001000000150003000000000000000000f02d3f6aa0f998570000000015000200000000000000000003ef7506ecbef9700300000008000900", @ANYRES32=0x0, @ANYBLOB="0c000bfffffffeffffffff0008000e0091e92b84c91391c4b510d37668b24a3628b40757fa7027bca9b80d64dbc26f5103fd3dd8df131b561faf20d4139b8ee1197ca4db4be1ea5ee893f3507a4fd066182365a1ff12a62a5a1de023", @ANYRES32=0x0, @ANYBLOB="08000500f8000000"], 0x70}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x210, 0x230, 0x230, 0x210, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x7f510100, 0x4, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)
timerfd_gettime(r6, &(0x7f0000000440))
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f0000000a40)=""/4096, 0x1000, <r7=>0x0, &(0x7f0000000380)=""/111, 0x6f}}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r4, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='kfree\x00', r8, 0x0, 0x1ffffffffffffffd}, 0x18)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0)
read$rfkill(r9, &(0x7f0000000040), 0x8)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
ioctl$TIOCVHANGUP(r10, 0x5437, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_dev$tty1(0xc, 0x4, 0x4)
setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0xb, 0x0, &(0x7f0000000080))

992.964881ms ago: executing program 1 (id=80):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100004, 0x2, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0x1a2)
r2 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001600)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}})

981.310762ms ago: executing program 2 (id=81):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'veth1_vlan\x00', 0x4000})
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x0, 0x5, 0x2060005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0\x00', 0x18001, &(0x7f00000012c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYRES32, @ANYRES64], 0x8, 0x2f0, &(0x7f0000000880)="$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")

936.960847ms ago: executing program 0 (id=82):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32, @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
fadvise64(r0, 0x2, 0x0, 0x4)

934.792957ms ago: executing program 1 (id=83):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
syz_emit_ethernet(0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x800002, 0x0)
ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000200)=0x7ffffffc)
ioctl$EVIOCGRAB(r1, 0x40044590, 0x0)

874.648793ms ago: executing program 4 (id=84):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x400)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x2, 0xffff0000, 0x0, 'queue0\x00', 0x5})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
close(r0)

862.116564ms ago: executing program 3 (id=85):
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31)

734.429356ms ago: executing program 1 (id=86):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef)

580.548402ms ago: executing program 4 (id=87):
r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x141000, 0x0)
r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/195, 0xc3}], 0x1, 0x0, 0x1})
io_uring_enter(r1, 0x52e4, 0x2000, 0xe, 0x0, 0x0)

579.694702ms ago: executing program 3 (id=88):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x98142, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x4190, 0xaea}, 0x4105, 0x2e, 0x6, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40000000000a9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
syz_emit_ethernet(0xc6, &(0x7f0000000700)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0xb8, 0x4fe, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x42}, {[@cipso={0x86, 0x6, 0x3}]}}, {0x800, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "6fdfa0d2001efbb3e29a4ac275ca11b984ff5def6ed2e4ea9bc0eabdd34c732b", "df23520b57e4c98679c7795a27c7bf3e7d776b600ba8d82d6ba417e219edd86fb708441efcf75fe803412dae374281c2", "5df814aa2e34e4f8a759805b993e2d69a8f476de686861a9850edbe3", {"2cfee9b9d5b0b2b5710c00", "e40ca7e0a7b4bbc4bc9720c876a57954"}}}}}}}, 0x0)

556.078505ms ago: executing program 1 (id=89):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x78}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20)
fadvise64(0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x3)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x1000000005)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x22000402, &(0x7f0000000a40)={[{@dioread_lock}, {@noblock_validity}, {@noinit_itable}, {@discard}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@mb_optimize_scan}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x85, 0x4e6, &(0x7f00000001c0)="$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")
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b8100008549736a45000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kfree\x00', r5}, 0x18)
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0xfffffffffffffccc, 0x0)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
fgetxattr(r6, &(0x7f0000000000)=ANY=[], 0x0, 0x0)
r7 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r7, &(0x7f00000003c0)=@file={0x1, './file1\x00'}, 0x6e)

335.813507ms ago: executing program 3 (id=90):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x2c, r2, 0xc4fc9e906872338b, 0x70bd2a, 0x1000, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc040000}, 0x4008040)

161.823894ms ago: executing program 3 (id=91):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="700000001900010000000000000000001d01000005000d0001000000150003000000000000000000f02d3f6aa0f998570000000015000200000000000000000003ef7506ecbef9700300000008000900", @ANYRES32=0x0, @ANYBLOB="0c000bfffffffeffffffff0008000e0091e92b84c91391c4b510d37668b24a3628b40757fa7027bca9b80d64dbc26f5103fd3dd8df131b561faf20d4139b8ee1197ca4db4be1ea5ee893f3507a4fd066182365a1ff12a62a5a1de023", @ANYRES32=0x0, @ANYBLOB="08000500f8000000"], 0x70}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x210, 0x230, 0x230, 0x210, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x7f510100, 0x4, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)
timerfd_gettime(r6, &(0x7f0000000440))
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f0000000a40)=""/4096, 0x1000, <r7=>0x0, &(0x7f0000000380)=""/111, 0x6f}}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r4, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='kfree\x00', r8, 0x0, 0x1ffffffffffffffd}, 0x18)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0)
read$rfkill(r9, &(0x7f0000000040), 0x8)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
ioctl$TIOCVHANGUP(r10, 0x5437, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_dev$tty1(0xc, 0x4, 0x4)
setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0xb, 0x0, &(0x7f0000000080))

96.940891ms ago: executing program 4 (id=92):
syz_emit_ethernet(0x4a, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5e}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x7f}}}}}}}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
close_range(r1, 0xffffffffffffffff, 0x0)

56.939175ms ago: executing program 2 (id=93):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c51de8c7955ef6b, @perf_config_ext={0x7, 0x3}, 0x100202, 0x0, 0xfffffffb, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000001580)={[{@minixdf}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$eJzs3M9vFFUcAPDvzLYgP1sRf4CoVWJs/NHSgsrBi0YTDxhN9IDH2hZCWKihNRFCpBqDFxND1LPxaOJf4M2LUU8mXvVuSIhyAT3VzOwM7C67pYXtLnQ/n2SX92Ze+963b97Mm3m7BNC3RrK3JGJrRPwREUO1bGOBkdo/Vy+fnf738tnpJJaW3v47yctduXx2uixa/tyWIjOaRqSfJkUljeZPnzk+Va3Oniry4wsn3h+fP33muWMnpo7OHp09OXnw4IH9Ey++MPn8Mq3fuOI4s7iu7P5obs+u19+98Mb04Qvv/fJ91t6txf76ODplJAv8n6Vc3eYvs7cnO11Zj22rSycDPWwIq1KJiKy7BvPxPxSVuN55Q/HaJz1tHLCmsmvTMlfRxSVgHUtihcViZQWBu0V5oc/uf8tXl6Yed4RLL9dugLK4rxav2p6BSIsyg033t500EhGHF//7JnvFGj2HAACo9/n014fi2VbzvzQeqCu3vVhDGY6IeyNiR0TcFxE7I+L+iLzsgxHxUNuaNrTc2rw0dOP8J714y8GtQDb/e6lY22qc/5Wzv8pwpchty+MfTI4cq87uK/4mozG4MctPLFPHj6/+/kW7ffXzv+yV1V/OBYt2XBxoekA3M7UwlU9KO+DSxxG7B1rFn1xbCchu/XdFxO7V/ertZeLY09/taVfo5vEvowPrTEvfRjxV6//FaIq/lCy/Pjl+T1Rn942XR8WNfv3t/Fvt6r+t+Dsg6//Njcd/c5HhpH69dn71dZz/87O29zS3evxvSN7J+6U8q3w4tbBwaiJiQ3Iozzdsn7z+s2W+LJ/FP7q39fjfUUtsyt4ejojsIH4kIh6NiMeKtj8eEU9ExN5l4v/5lfb77oT+n2l5/rt2/Df1/+oTleM//dCu/pX1/4E8NVpsyc9/N7HSBt7O3w4AAADuFmn+GfgkHbuWTtOxsdpn+HfG5rQ6N7/wzJG5D07O1D4rPxyDafmka6jueehEslj8xlp+snhWXO7fXzw3/qqyKc+PTc9VZ3ocO/S7LW3Gf+avSq9bB6y5Vutoky3Xaxu+yAasA83jP23Mnnuzm40Busr3taF/3WT8p91qB9B9rv/Qv1qN/3NNeWsBsD65/kP/Mv6hfxn/0L+Mf+hLt/O9/n5OZKfMO6AZ1aGiH7tfe6S9jl1iLRKt/58mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAu9X/AQAA//9l+OT1")
chdir(&(0x7f0000000400)='./file0\x00')
mkdir(&(0x7f0000000040)='./control\x00', 0x0) (fail_nth: 5)

889.38µs ago: executing program 4 (id=94):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
syz_emit_ethernet(0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x800002, 0x0)
ioctl$EVIOCGRAB(r1, 0x40044590, 0x0)

0s ago: executing program 4 (id=95):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94)
rt_sigaction(0x13, &(0x7f000000ba80)={0x0, 0x2, 0x0, {[0x8]}}, 0x0, 0x8, &(0x7f000000bb80))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans='])

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.51' (ED25519) to the list of known hosts.
[   35.100218][   T29] audit: type=1400 audit(1763039774.137:62): avc:  denied  { mounton } for  pid=3304 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   35.123286][   T29] audit: type=1400 audit(1763039774.157:63): avc:  denied  { mount } for  pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   35.124280][ T3304] cgroup: Unknown subsys name 'net'
[   35.151067][   T29] audit: type=1400 audit(1763039774.187:64): avc:  denied  { unmount } for  pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   35.264160][ T3304] cgroup: Unknown subsys name 'cpuset'
[   35.270515][ T3304] cgroup: Unknown subsys name 'rlimit'
[   35.381685][   T29] audit: type=1400 audit(1763039774.417:65): avc:  denied  { setattr } for  pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   35.409961][   T29] audit: type=1400 audit(1763039774.417:66): avc:  denied  { create } for  pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   35.430467][   T29] audit: type=1400 audit(1763039774.417:67): avc:  denied  { write } for  pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   35.451387][   T29] audit: type=1400 audit(1763039774.417:68): avc:  denied  { read } for  pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   35.460712][ T3308] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   35.471829][   T29] audit: type=1400 audit(1763039774.417:69): avc:  denied  { mounton } for  pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   35.505169][   T29] audit: type=1400 audit(1763039774.417:70): avc:  denied  { mount } for  pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   35.528413][   T29] audit: type=1400 audit(1763039774.517:71): avc:  denied  { relabelto } for  pid=3308 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   35.560786][ T3304] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   37.761374][ T3314] chnl_net:caif_netlink_parms(): no params data found
[   37.831656][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.838825][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.846262][ T3314] bridge_slave_0: entered allmulticast mode
[   37.852705][ T3314] bridge_slave_0: entered promiscuous mode
[   37.861481][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.868648][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.875925][ T3314] bridge_slave_1: entered allmulticast mode
[   37.882454][ T3314] bridge_slave_1: entered promiscuous mode
[   37.936589][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   37.946939][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.014901][ T3317] chnl_net:caif_netlink_parms(): no params data found
[   38.037110][ T3314] team0: Port device team_slave_0 added
[   38.058835][ T3314] team0: Port device team_slave_1 added
[   38.091441][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.098506][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.124545][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.137832][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.144845][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.170830][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.181955][ T3315] chnl_net:caif_netlink_parms(): no params data found
[   38.193879][ T3320] chnl_net:caif_netlink_parms(): no params data found
[   38.214795][ T3322] chnl_net:caif_netlink_parms(): no params data found
[   38.262038][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.269156][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.276352][ T3317] bridge_slave_0: entered allmulticast mode
[   38.282756][ T3317] bridge_slave_0: entered promiscuous mode
[   38.293216][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.300471][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.307659][ T3317] bridge_slave_1: entered allmulticast mode
[   38.314283][ T3317] bridge_slave_1: entered promiscuous mode
[   38.354356][ T3314] hsr_slave_0: entered promiscuous mode
[   38.360478][ T3314] hsr_slave_1: entered promiscuous mode
[   38.392433][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.406961][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.414055][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.421150][ T3315] bridge_slave_0: entered allmulticast mode
[   38.427951][ T3315] bridge_slave_0: entered promiscuous mode
[   38.437849][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.447103][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.454346][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.461570][ T3320] bridge_slave_0: entered allmulticast mode
[   38.468232][ T3320] bridge_slave_0: entered promiscuous mode
[   38.475003][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.482110][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.489370][ T3320] bridge_slave_1: entered allmulticast mode
[   38.496018][ T3320] bridge_slave_1: entered promiscuous mode
[   38.507357][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.514502][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.521637][ T3315] bridge_slave_1: entered allmulticast mode
[   38.528169][ T3315] bridge_slave_1: entered promiscuous mode
[   38.575930][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.588646][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.602648][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.609802][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.617187][ T3322] bridge_slave_0: entered allmulticast mode
[   38.623591][ T3322] bridge_slave_0: entered promiscuous mode
[   38.630748][ T3317] team0: Port device team_slave_0 added
[   38.645181][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.654337][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.661412][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.668634][ T3322] bridge_slave_1: entered allmulticast mode
[   38.675006][ T3322] bridge_slave_1: entered promiscuous mode
[   38.681872][ T3317] team0: Port device team_slave_1 added
[   38.701436][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.740415][ T3320] team0: Port device team_slave_0 added
[   38.750294][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.759821][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.766867][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.792867][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.804300][ T3315] team0: Port device team_slave_0 added
[   38.810755][ T3320] team0: Port device team_slave_1 added
[   38.825259][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.840071][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.847116][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.873050][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.886126][ T3315] team0: Port device team_slave_1 added
[   38.912361][ T3322] team0: Port device team_slave_0 added
[   38.935106][ T3322] team0: Port device team_slave_1 added
[   38.948375][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.955409][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.981464][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   39.010270][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0
[   39.017288][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   39.043223][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   39.054456][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0
[   39.061420][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   39.087374][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   39.098487][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1
[   39.105491][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   39.131514][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   39.149981][ T3317] hsr_slave_0: entered promiscuous mode
[   39.156116][ T3317] hsr_slave_1: entered promiscuous mode
[   39.161977][ T3317] debugfs: 'hsr0' already exists in 'hsr'
[   39.167747][ T3317] Cannot create hsr debugfs directory
[   39.173736][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1
[   39.180687][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   39.206661][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   39.217803][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1
[   39.224797][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   39.250737][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   39.294468][ T3320] hsr_slave_0: entered promiscuous mode
[   39.300614][ T3320] hsr_slave_1: entered promiscuous mode
[   39.306641][ T3320] debugfs: 'hsr0' already exists in 'hsr'
[   39.312364][ T3320] Cannot create hsr debugfs directory
[   39.370722][ T3322] hsr_slave_0: entered promiscuous mode
[   39.376899][ T3322] hsr_slave_1: entered promiscuous mode
[   39.382812][ T3322] debugfs: 'hsr0' already exists in 'hsr'
[   39.388607][ T3322] Cannot create hsr debugfs directory
[   39.396402][ T3315] hsr_slave_0: entered promiscuous mode
[   39.402334][ T3315] hsr_slave_1: entered promiscuous mode
[   39.408487][ T3315] debugfs: 'hsr0' already exists in 'hsr'
[   39.414493][ T3315] Cannot create hsr debugfs directory
[   39.449418][ T3314] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   39.475291][ T3314] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   39.490448][ T3314] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   39.501491][ T3314] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   39.603580][ T3320] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   39.621411][ T3320] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   39.635691][ T3320] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   39.644642][ T3320] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   39.672652][ T3317] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   39.682388][ T3317] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   39.691588][ T3317] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   39.701132][ T3317] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   39.731100][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.760745][ T3314] 8021q: adding VLAN 0 to HW filter on device team0
[   39.777295][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   39.787173][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   39.802594][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   39.812394][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   39.824014][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.831164][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.845484][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.852571][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.882150][ T3322] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   39.890986][ T3322] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   39.901930][ T3322] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   39.912658][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.926707][ T3322] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   39.952457][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.962398][ T3320] 8021q: adding VLAN 0 to HW filter on device team0
[   39.984871][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.992015][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.003778][ T3317] 8021q: adding VLAN 0 to HW filter on device team0
[   40.015045][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.022123][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.031030][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.038131][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.055517][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.062669][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.095663][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0
[   40.120179][ T3317] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   40.130658][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   40.165417][ T3315] 8021q: adding VLAN 0 to HW filter on device team0
[   40.185924][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.217208][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0
[   40.226328][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.233559][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.242715][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.249810][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.273743][ T3322] 8021q: adding VLAN 0 to HW filter on device team0
[   40.289177][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.317779][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.324901][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.350194][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.357310][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.393031][ T3322] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   40.403542][ T3322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   40.420786][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.445853][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.535924][ T3314] veth0_vlan: entered promiscuous mode
[   40.553601][ T3314] veth1_vlan: entered promiscuous mode
[   40.576646][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.587108][ T3317] veth0_vlan: entered promiscuous mode
[   40.614451][ T3314] veth0_macvtap: entered promiscuous mode
[   40.622611][ T3314] veth1_macvtap: entered promiscuous mode
[   40.634652][ T3317] veth1_vlan: entered promiscuous mode
[   40.658075][ T3320] veth0_vlan: entered promiscuous mode
[   40.666500][ T3320] veth1_vlan: entered promiscuous mode
[   40.676800][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.696964][ T3317] veth0_macvtap: entered promiscuous mode
[   40.707929][ T3315] veth0_vlan: entered promiscuous mode
[   40.720190][ T3320] veth0_macvtap: entered promiscuous mode
[   40.727373][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.735732][ T3317] veth1_macvtap: entered promiscuous mode
[   40.755933][ T3315] veth1_vlan: entered promiscuous mode
[   40.762624][ T1712] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.774024][ T3320] veth1_macvtap: entered promiscuous mode
[   40.785890][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.794572][ T1712] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.804582][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.823481][ T1712] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.832669][   T29] kauditd_printk_skb: 9 callbacks suppressed
[   40.832684][   T29] audit: type=1400 audit(1763039779.867:81): avc:  denied  { mounton } for  pid=3314 comm="syz-executor" path="/root/syzkaller.Ez3Txi/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   40.835486][ T3315] veth0_macvtap: entered promiscuous mode
[   40.838793][   T29] audit: type=1400 audit(1763039779.867:82): avc:  denied  { mount } for  pid=3314 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   40.865889][ T3315] veth1_macvtap: entered promiscuous mode
[   40.868764][   T29] audit: type=1400 audit(1763039779.867:83): avc:  denied  { mounton } for  pid=3314 comm="syz-executor" path="/root/syzkaller.Ez3Txi/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   40.906126][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.921599][   T29] audit: type=1400 audit(1763039779.867:84): avc:  denied  { mount } for  pid=3314 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   40.928885][ T1712] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.950564][   T29] audit: type=1400 audit(1763039779.867:85): avc:  denied  { mounton } for  pid=3314 comm="syz-executor" path="/root/syzkaller.Ez3Txi/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   40.966144][ T3322] veth0_vlan: entered promiscuous mode
[   40.985937][   T29] audit: type=1400 audit(1763039779.867:86): avc:  denied  { mounton } for  pid=3314 comm="syz-executor" path="/root/syzkaller.Ez3Txi/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4830 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   41.018880][   T29] audit: type=1400 audit(1763039779.867:87): avc:  denied  { unmount } for  pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   41.044743][   T29] audit: type=1400 audit(1763039780.087:88): avc:  denied  { mounton } for  pid=3314 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   41.048144][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0
[   41.067559][   T29] audit: type=1400 audit(1763039780.087:89): avc:  denied  { mount } for  pid=3314 comm="syz-executor" name="/" dev="gadgetfs" ino=3691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   41.076653][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1
[   41.105907][ T1712] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.115923][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1
[   41.125818][ T3322] veth1_vlan: entered promiscuous mode
[   41.125927][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   41.147153][ T1712] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   41.156057][ T1712] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   41.178876][   T29] audit: type=1400 audit(1763039780.217:90): avc:  denied  { read write } for  pid=3314 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   41.203841][ T3486] loop4: detected capacity change from 0 to 512
[   41.207476][ T1712] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.213216][ T3486] EXT4-fs: Ignoring removed oldalloc option
[   41.226776][ T3322] veth0_macvtap: entered promiscuous mode
[   41.256315][ T3486] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.5: Parent and EA inode have the same ino 15
[   41.257146][ T3322] veth1_macvtap: entered promiscuous mode
[   41.279287][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.290583][ T3486] EXT4-fs (loop4): Remounting filesystem read-only
[   41.302884][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0
[   41.310525][ T3486] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -30)
[   41.327028][ T3492] loop2: detected capacity change from 0 to 128
[   41.334908][ T3486] EXT4-fs (loop4): 1 orphan inode deleted
[   41.334973][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   41.335435][ T3486] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.340750][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   41.371572][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1
[   41.404326][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.424189][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.433881][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.442763][ T3494] syz.2.3: attempt to access beyond end of device
[   41.442763][ T3494] loop2: rw=1, sector=145, nr_sectors = 16 limit=128
[   41.479070][ T3496] loop4: detected capacity change from 0 to 512
[   41.488843][ T3494] syz.2.3: attempt to access beyond end of device
[   41.488843][ T3494] loop2: rw=1, sector=169, nr_sectors = 8 limit=128
[   41.503645][ T1712] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   41.506467][ T3494] syz.2.3: attempt to access beyond end of device
[   41.506467][ T3494] loop2: rw=1, sector=185, nr_sectors = 8 limit=128
[   41.514357][ T3496] EXT4-fs: Ignoring removed oldalloc option
[   41.545653][ T1712] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   41.581042][ T3496] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.6: Parent and EA inode have the same ino 15
[   41.591408][ T3494] syz.2.3: attempt to access beyond end of device
[   41.591408][ T3494] loop2: rw=1, sector=201, nr_sectors = 8 limit=128
[   41.609248][ T1712] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.618949][ T3501] loop9: detected capacity change from 0 to 7
[   41.635469][ T3494] syz.2.3: attempt to access beyond end of device
[   41.635469][ T3494] loop2: rw=1, sector=217, nr_sectors = 8 limit=128
[   41.635517][ T3496] EXT4-fs (loop4): Remounting filesystem read-only
[   41.655288][ T3501] Buffer I/O error on dev loop9, logical block 0, async page read
[   41.667441][ T1712] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.688759][ T3496] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -30)
[   41.703608][ T3501] Buffer I/O error on dev loop9, logical block 0, async page read
[   41.711492][ T3501]  loop9: unable to read partition table
[   41.719309][ T1712] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   41.734168][ T3496] EXT4-fs (loop4): 1 orphan inode deleted
[   41.743607][ T3494] syz.2.3: attempt to access beyond end of device
[   41.743607][ T3494] loop2: rw=1, sector=233, nr_sectors = 8 limit=128
[   41.747983][ T3501] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[   41.747983][ T3501] 
) failed (rc=-5)
[   41.757896][ T3305] Buffer I/O error on dev loop9, logical block 0, async page read
[   41.771666][ T1712] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   41.784203][ T3496] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.798991][ T1712] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.823693][ T3494] syz.2.3: attempt to access beyond end of device
[   41.823693][ T3494] loop2: rw=1, sector=249, nr_sectors = 8 limit=128
[   41.837035][ T3305] Buffer I/O error on dev loop9, logical block 0, async page read
[   41.857044][ T3496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6'.
[   41.866189][ T3305] Buffer I/O error on dev loop9, logical block 0, async page read
[   41.878053][ T3305] Buffer I/O error on dev loop9, logical block 0, async page read
[   41.896214][ T3494] syz.2.3: attempt to access beyond end of device
[   41.896214][ T3494] loop2: rw=1, sector=265, nr_sectors = 8 limit=128
[   41.909625][ T3305] Buffer I/O error on dev loop9, logical block 0, async page read
[   41.916486][ T3522] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   41.924994][ T3494] syz.2.3: attempt to access beyond end of device
[   41.924994][ T3494] loop2: rw=1, sector=281, nr_sectors = 8 limit=128
[   41.938827][ T3494] syz.2.3: attempt to access beyond end of device
[   41.938827][ T3494] loop2: rw=1, sector=297, nr_sectors = 8 limit=128
[   41.960802][ T3514] loop0: detected capacity change from 0 to 2048
[   41.992318][ T3514] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.026140][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.036834][ T3530] loop1: detected capacity change from 0 to 164
[   42.067865][ T3530] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   42.099377][ T3530] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   42.139120][ T3530] rock: directory entry would overflow storage
[   42.145459][ T3530] rock: sig=0x4f50, size=4, remaining=3
[   42.151048][ T3530] iso9660: Corrupted directory entry in block 4 of inode 1792
[   42.177964][ T3530] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   42.186478][ T3530] Symlink component flag not implemented
[   42.192188][ T3530] Symlink component flag not implemented
[   42.199102][ T3530] Symlink component flag not implemented (7)
[   42.205237][ T3530] Symlink component flag not implemented (116)
[   42.245672][ T3541] FAULT_INJECTION: forcing a failure.
[   42.245672][ T3541] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   42.259187][ T3541] CPU: 0 UID: 0 PID: 3541 Comm: syz.1.16 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   42.259213][ T3541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   42.259225][ T3541] Call Trace:
[   42.259232][ T3541]  <TASK>
[   42.259240][ T3541]  __dump_stack+0x1d/0x30
[   42.259267][ T3541]  dump_stack_lvl+0xe8/0x140
[   42.259295][ T3541]  dump_stack+0x15/0x1b
[   42.259320][ T3541]  should_fail_ex+0x265/0x280
[   42.259420][ T3541]  should_fail_alloc_page+0xf2/0x100
[   42.259475][ T3541]  __alloc_frozen_pages_noprof+0xff/0x360
[   42.259498][ T3541]  alloc_pages_mpol+0xb3/0x260
[   42.259528][ T3541]  folio_alloc_noprof+0x97/0x150
[   42.259583][ T3541]  filemap_alloc_folio_noprof+0x66/0x210
[   42.259626][ T3541]  __filemap_get_folio+0x28f/0x650
[   42.259668][ T3541]  aio_setup_ring+0x26c/0x760
[   42.259711][ T3541]  ioctx_alloc+0x2c4/0x4e0
[   42.259807][ T3541]  ? fput+0x8f/0xc0
[   42.259825][ T3541]  __se_sys_io_setup+0x6b/0x1b0
[   42.259938][ T3541]  __x64_sys_io_setup+0x31/0x40
[   42.260121][ T3541]  x64_sys_call+0x2f0e/0x3000
[   42.260152][ T3541]  do_syscall_64+0xd2/0x200
[   42.260181][ T3541]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   42.260273][ T3541]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   42.260308][ T3541]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   42.260329][ T3541] RIP: 0033:0x7fe6f2e6f6c9
[   42.260383][ T3541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   42.260408][ T3541] RSP: 002b:00007fe6f18d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[   42.260441][ T3541] RAX: ffffffffffffffda RBX: 00007fe6f30c5fa0 RCX: 00007fe6f2e6f6c9
[   42.260457][ T3541] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003
[   42.260473][ T3541] RBP: 00007fe6f18d7090 R08: 0000000000000000 R09: 0000000000000000
[   42.260485][ T3541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   42.260567][ T3541] R13: 00007fe6f30c6038 R14: 00007fe6f30c5fa0 R15: 00007ffe209602e8
[   42.260592][ T3541]  </TASK>
[   42.664476][ T3514] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.754755][ T3567] loop4: detected capacity change from 0 to 128
[   42.807543][ T3571] FAULT_INJECTION: forcing a failure.
[   42.807543][ T3571] name failslab, interval 1, probability 0, space 0, times 1
[   42.820304][ T3571] CPU: 0 UID: 0 PID: 3571 Comm: syz.1.24 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   42.820406][ T3571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   42.820423][ T3571] Call Trace:
[   42.820431][ T3571]  <TASK>
[   42.820441][ T3571]  __dump_stack+0x1d/0x30
[   42.820500][ T3571]  dump_stack_lvl+0xe8/0x140
[   42.820525][ T3571]  dump_stack+0x15/0x1b
[   42.820543][ T3571]  should_fail_ex+0x265/0x280
[   42.820564][ T3571]  should_failslab+0x8c/0xb0
[   42.820643][ T3571]  kmem_cache_alloc_noprof+0x50/0x480
[   42.820703][ T3571]  ? security_inode_alloc+0x37/0x100
[   42.820728][ T3571]  security_inode_alloc+0x37/0x100
[   42.820751][ T3571]  inode_init_always_gfp+0x4b7/0x500
[   42.820780][ T3571]  ? __pfx_shmem_alloc_inode+0x10/0x10
[   42.820848][ T3571]  alloc_inode+0x58/0x170
[   42.820874][ T3571]  new_inode+0x1d/0xe0
[   42.820949][ T3571]  shmem_get_inode+0x244/0x750
[   42.821044][ T3571]  __shmem_file_setup+0x113/0x210
[   42.821065][ T3571]  shmem_file_setup+0x3b/0x50
[   42.821086][ T3571]  __se_sys_memfd_create+0x2c3/0x590
[   42.821114][ T3571]  __x64_sys_memfd_create+0x31/0x40
[   42.821151][ T3571]  x64_sys_call+0x2ac2/0x3000
[   42.821175][ T3571]  do_syscall_64+0xd2/0x200
[   42.821198][ T3571]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   42.821228][ T3571]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   42.821271][ T3571]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   42.821294][ T3571] RIP: 0033:0x7fe6f2e6f6c9
[   42.821310][ T3571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   42.821364][ T3571] RSP: 002b:00007fe6f18d6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[   42.821384][ T3571] RAX: ffffffffffffffda RBX: 00000000000004cd RCX: 00007fe6f2e6f6c9
[   42.821398][ T3571] RDX: 00007fe6f18d6ef0 RSI: 0000000000000000 RDI: 00007fe6f2ef2960
[   42.821478][ T3571] RBP: 0000200000001180 R08: 00007fe6f18d6bb7 R09: 00007fe6f18d6e40
[   42.821490][ T3571] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000
[   42.821503][ T3571] R13: 00007fe6f18d6ef0 R14: 00007fe6f18d6eb0 R15: 0000200000000080
[   42.821522][ T3571]  </TASK>
[   42.830362][ T3572] loop0: detected capacity change from 0 to 128
[   43.122402][ T3587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.26'.
[   43.199867][ T3594] loop1: detected capacity change from 0 to 128
[   43.242559][ T3594] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   43.271975][ T3594] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   43.495519][ T3658] netlink: 24 bytes leftover after parsing attributes in process `syz.0.30'.
[   43.646280][ T3677] loop3: detected capacity change from 0 to 164
[   43.706950][ T3677] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   43.735379][ T3680] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   43.753766][ T3677] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   43.770950][ T3677] rock: directory entry would overflow storage
[   43.777217][ T3677] rock: sig=0x4f50, size=4, remaining=3
[   43.782868][ T3677] iso9660: Corrupted directory entry in block 4 of inode 1792
[   43.806232][ T3680] loop0: detected capacity change from 0 to 1024
[   43.820523][ T3677] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   43.828886][ T3677] Symlink component flag not implemented
[   43.830171][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   43.834646][ T3677] Symlink component flag not implemented
[   43.853956][ T3680] EXT4-fs: Ignoring removed nobh option
[   43.859588][ T3680] EXT4-fs: Ignoring removed bh option
[   43.859890][ T3677] Symlink component flag not implemented (7)
[   43.871175][ T3677] Symlink component flag not implemented (116)
[   43.885617][ T3680] ext4: Unknown parameter 'fowner'
[   43.917309][ T3686] netlink: 'syz.2.39': attribute type 1 has an invalid length.
[   43.924956][ T3686] netlink: 224 bytes leftover after parsing attributes in process `syz.2.39'.
[   43.963812][ T3692] netlink: 84 bytes leftover after parsing attributes in process `syz.3.41'.
[   43.966816][ T3672] Zero length message leads to an empty skb
[   44.012615][ T3699] netlink: 24 bytes leftover after parsing attributes in process `syz.3.43'.
[   44.082081][ T3704] loop9: detected capacity change from 0 to 7
[   44.082556][ T3704] Buffer I/O error on dev loop9, logical block 0, async page read
[   44.082612][ T3704] Buffer I/O error on dev loop9, logical block 0, async page read
[   44.082631][ T3704]  loop9: unable to read partition table
[   44.082651][ T3704] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[   44.082651][ T3704] 
) failed (rc=-5)
[   44.236791][ T3720] FAULT_INJECTION: forcing a failure.
[   44.236791][ T3720] name failslab, interval 1, probability 0, space 0, times 0
[   44.249491][ T3720] CPU: 0 UID: 0 PID: 3720 Comm: syz.3.51 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   44.249522][ T3720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   44.249538][ T3720] Call Trace:
[   44.249548][ T3720]  <TASK>
[   44.249557][ T3720]  __dump_stack+0x1d/0x30
[   44.249586][ T3720]  dump_stack_lvl+0xe8/0x140
[   44.249694][ T3720]  dump_stack+0x15/0x1b
[   44.249717][ T3720]  should_fail_ex+0x265/0x280
[   44.249736][ T3720]  should_failslab+0x8c/0xb0
[   44.249781][ T3720]  kmem_cache_alloc_noprof+0x50/0x480
[   44.249829][ T3720]  ? skb_clone+0x151/0x1f0
[   44.249877][ T3720]  skb_clone+0x151/0x1f0
[   44.249896][ T3720]  __netlink_deliver_tap+0x2c9/0x500
[   44.249958][ T3720]  netlink_unicast+0x66b/0x690
[   44.249997][ T3720]  netlink_sendmsg+0x58b/0x6b0
[   44.250019][ T3720]  ? __pfx_netlink_sendmsg+0x10/0x10
[   44.250111][ T3720]  __sock_sendmsg+0x145/0x180
[   44.250141][ T3720]  ____sys_sendmsg+0x31e/0x4e0
[   44.250178][ T3720]  ___sys_sendmsg+0x17b/0x1d0
[   44.250215][ T3720]  __x64_sys_sendmsg+0xd4/0x160
[   44.250290][ T3720]  x64_sys_call+0x191e/0x3000
[   44.250318][ T3720]  do_syscall_64+0xd2/0x200
[   44.250393][ T3720]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   44.250423][ T3720]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   44.250480][ T3720]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   44.250507][ T3720] RIP: 0033:0x7f693fd1f6c9
[   44.250526][ T3720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   44.250548][ T3720] RSP: 002b:00007f693e77f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   44.250599][ T3720] RAX: ffffffffffffffda RBX: 00007f693ff75fa0 RCX: 00007f693fd1f6c9
[   44.250616][ T3720] RDX: 0000000000004000 RSI: 0000200000000040 RDI: 0000000000000003
[   44.250641][ T3720] RBP: 00007f693e77f090 R08: 0000000000000000 R09: 0000000000000000
[   44.250657][ T3720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   44.250672][ T3720] R13: 00007f693ff76038 R14: 00007f693ff75fa0 R15: 00007ffcf4f52d48
[   44.250694][ T3720]  </TASK>
[   44.504812][ T3724] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.732749][ T3752] netlink: 24 bytes leftover after parsing attributes in process `syz.2.55'.
[   44.748062][ T3724] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.793995][ T3724] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.806435][ T3757] loop2: detected capacity change from 0 to 164
[   44.819148][ T3757] rock: corrupted directory entry. extent=32, offset=131072, size=237
[   44.856817][ T3724] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.872146][ T3757] loop2: detected capacity change from 0 to 512
[   44.882629][ T3757] =======================================================
[   44.882629][ T3757] WARNING: The mand mount option has been deprecated and
[   44.882629][ T3757]          and is ignored by this kernel. Remove the mand
[   44.882629][ T3757]          option from the mount to silence this warning.
[   44.882629][ T3757] =======================================================
[   44.918084][ T3757] EXT4-fs: Ignoring removed oldalloc option
[   44.927181][ T3757] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.56: Parent and EA inode have the same ino 15
[   44.939750][ T3757] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   44.953023][ T3757] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.56: Parent and EA inode have the same ino 15
[   44.973864][ T3757] EXT4-fs (loop2): 1 orphan inode deleted
[   44.982384][ T3638] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.001060][ T3757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.007653][ T3638] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.021788][ T3638] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.030312][ T3638] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   45.039468][ T3757] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.166150][ T3787] syz.2.61 uses obsolete (PF_INET,SOCK_PACKET)
[   45.272956][ T3799] netlink: 152 bytes leftover after parsing attributes in process `syz.4.63'.
[   45.297842][ T3802] xt_CT: You must specify a L4 protocol and not use inversions on it
[   45.343828][ T3807] loop9: detected capacity change from 0 to 7
[   45.362096][ T3807] Buffer I/O error on dev loop9, logical block 0, async page read
[   45.383476][ T3807]  loop9: unable to read partition table
[   45.537952][ T3807] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[   45.537952][ T3807] 
) failed (rc=-5)
[   45.610513][ T3853] loop3: detected capacity change from 0 to 128
[   45.636705][ T3853] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[   45.833858][ T3638] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[   45.847892][ T3871] loop4: detected capacity change from 0 to 512
[   45.869738][   T29] kauditd_printk_skb: 284 callbacks suppressed
[   45.869757][   T29] audit: type=1326 audit(1763039784.907:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693fd1f6c9 code=0x7ffc0000
[   45.899669][   T29] audit: type=1326 audit(1763039784.907:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693fd1f6c9 code=0x7ffc0000
[   45.947140][ T3870] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   45.955157][ T3870] FAT-fs (loop3): Filesystem has been set read-only
[   45.963940][ T3871] ext4: Unknown parameter 'noblock_validi'
[   46.002423][ T3870] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   46.010500][ T3870] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   46.039162][   T29] audit: type=1326 audit(1763039784.927:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f693fd1f6c9 code=0x7ffc0000
[   46.062670][   T29] audit: type=1326 audit(1763039784.927:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693fd1f6c9 code=0x7ffc0000
[   46.086241][   T29] audit: type=1326 audit(1763039784.927:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693fd1f6c9 code=0x7ffc0000
[   46.109534][   T29] audit: type=1326 audit(1763039784.927:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f693fd1f6c9 code=0x7ffc0000
[   46.133023][   T29] audit: type=1326 audit(1763039784.937:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693fd1f6c9 code=0x7ffc0000
[   46.156298][   T29] audit: type=1326 audit(1763039784.937:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693fd1f6c9 code=0x7ffc0000
[   46.171530][ T3638] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[   46.179454][   T29] audit: type=1326 audit(1763039784.987:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f693fd1f6c9 code=0x7ffc0000
[   46.211799][   T29] audit: type=1326 audit(1763039784.987:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693fd1f6c9 code=0x7ffc0000
[   46.492255][ T3886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.79'.
[   46.496621][ T3888] loop9: detected capacity change from 0 to 7
[   46.508638][ T3886] xt_CT: You must specify a L4 protocol and not use inversions on it
[   46.517173][ T3888]  loop9: unable to read partition table
[   46.535729][ T3888] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[   46.535729][ T3888] 
) failed (rc=-5)
[   46.585633][ T3849] syz.3.70 (3849) used greatest stack depth: 7304 bytes left
[   46.599050][ T3892] loop0: detected capacity change from 0 to 128
[   46.664375][ T3897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.81'.
[   46.680961][ T3897] loop2: detected capacity change from 0 to 128
[   46.807321][ T3904] bio_check_eod: 321 callbacks suppressed
[   46.807337][ T3904] syz.0.82: attempt to access beyond end of device
[   46.807337][ T3904] loop0: rw=1, sector=145, nr_sectors = 16 limit=128
[   47.085241][ T3904] syz.0.82: attempt to access beyond end of device
[   47.085241][ T3904] loop0: rw=1, sector=169, nr_sectors = 8 limit=128
[   47.098788][ T3904] syz.0.82: attempt to access beyond end of device
[   47.098788][ T3904] loop0: rw=1, sector=185, nr_sectors = 8 limit=128
[   47.112126][ T3904] syz.0.82: attempt to access beyond end of device
[   47.112126][ T3904] loop0: rw=1, sector=201, nr_sectors = 8 limit=128
[   47.135532][ T3910] loop1: detected capacity change from 0 to 512
[   47.150451][ T3904] syz.0.82: attempt to access beyond end of device
[   47.150451][ T3904] loop0: rw=1, sector=217, nr_sectors = 8 limit=128
[   47.178072][ T3904] syz.0.82: attempt to access beyond end of device
[   47.178072][ T3904] loop0: rw=1, sector=233, nr_sectors = 8 limit=128
[   47.195883][ T3910] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   47.204261][ T3904] syz.0.82: attempt to access beyond end of device
[   47.204261][ T3904] loop0: rw=1, sector=249, nr_sectors = 8 limit=128
[   47.207558][ T3910] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[   47.220566][ T3904] syz.0.82: attempt to access beyond end of device
[   47.220566][ T3904] loop0: rw=1, sector=265, nr_sectors = 8 limit=128
[   47.230727][ T3910] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.89: Corrupt directory, running e2fsck is recommended
[   47.263560][ T3904] syz.0.82: attempt to access beyond end of device
[   47.263560][ T3904] loop0: rw=1, sector=281, nr_sectors = 8 limit=128
[   47.315699][ T3904] syz.0.82: attempt to access beyond end of device
[   47.315699][ T3904] loop0: rw=1, sector=297, nr_sectors = 8 limit=128
[   47.329327][ T3910] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[   47.337710][ T3910] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.89: corrupted in-inode xattr: invalid ea_ino
[   47.351182][ T3910] EXT4-fs (loop1): Remounting filesystem read-only
[   47.359319][ T3910] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.379508][ T3916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.91'.
[   47.447754][ T3916] xt_CT: You must specify a L4 protocol and not use inversions on it
[   47.463169][ T3004] ==================================================================
[   47.471317][ T3004] BUG: KCSAN: data-race in dentry_unlink_inode / step_into
[   47.478563][ T3004] 
[   47.478571][ T3004] write to 0xffff88810c5e86f0 of 8 bytes by task 3305 on cpu 1:
[   47.478588][ T3004]  dentry_unlink_inode+0x65/0x260
[   47.478609][ T3004]  d_delete+0x164/0x180
[   47.478626][ T3004]  d_delete_notify+0x32/0x100
[   47.478649][ T3004]  vfs_unlink+0x30b/0x420
[   47.478672][ T3004]  do_unlinkat+0x24e/0x480
[   47.478695][ T3004]  __x64_sys_unlink+0x2e/0x40
[   47.478721][ T3004]  x64_sys_call+0x2dcf/0x3000
[   47.478744][ T3004]  do_syscall_64+0xd2/0x200
[   47.478765][ T3004]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   47.478786][ T3004] 
[   47.478791][ T3004] read to 0xffff88810c5e86f0 of 8 bytes by task 3004 on cpu 0:
[   47.478807][ T3004]  step_into+0x122/0x7f0
[   47.478836][ T3004]  walk_component+0x162/0x220
[   47.478866][ T3004]  path_lookupat+0xfe/0x2a0
[   47.478899][ T3004]  filename_lookup+0x147/0x340
[   47.478932][ T3004]  do_readlinkat+0x7d/0x320
[   47.478951][ T3004]  __x64_sys_readlink+0x47/0x60
[   47.478975][ T3004]  x64_sys_call+0x28de/0x3000
[   47.478999][ T3004]  do_syscall_64+0xd2/0x200
[   47.479018][ T3004]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   47.479039][ T3004] 
[   47.479043][ T3004] value changed: 0xffff88811b4bfd88 -> 0x0000000000000000
[   47.479054][ T3004] 
[   47.479058][ T3004] Reported by Kernel Concurrency Sanitizer on:
[   47.479069][ T3004] CPU: 0 UID: 0 PID: 3004 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) 
[   47.479093][ T3004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   47.479106][ T3004] ==================================================================
[   47.490929][ T3910] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   47.491031][ T3910] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[   47.491047][ T3910] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.89: Corrupt directory, running e2fsck is recommended
[   47.536162][ T3923] loop2: detected capacity change from 0 to 512
[   47.548627][ T3924] 9pnet: Could not find request transport: 0
[   47.578769][ T3923] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.93: corrupted in-inode xattr: invalid ea_ino
[   47.586783][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.590696][ T3923] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.93: couldn't read orphan inode 15 (err -117)
[   47.756586][ T3923] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.792505][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.