last executing test programs:

3m7.748294266s ago: executing program 32 (id=89):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41100, 0x52, '\x00', r1, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r3, &(0x7f00000039c0)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c044) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10)
faccessat(0xffffffffffffffff, 0x0, 0x5) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x367, @void, @value}, 0x94) (async, rerun: 32)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@bloom_filter={0x1e, 0xfffffff8, 0x10001, 0x8, 0x10010, r6, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x800, 0xa, @void, @value, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000980)='ext4_mark_inode_dirty\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) (async)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000005c0000005c0000000a00000009000000f2ffff07030000000000000000000008030000001000000000000001000000006c006103000000000000000300000000010000000400000000040000ff070000000000082500000008000000000000010000000075003f0100612e002e3030615f00"], &(0x7f0000000680)=""/84, 0x7e, 0x54, 0x0, 0x6078, 0x0, @void, @value}, 0x28)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r10}, 0x10)
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f00000007c0)=0x14) (async)
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r11, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x523200, 0x0) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10)

3m4.214799281s ago: executing program 33 (id=128):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, 0x0, 0x26, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000100000000000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0300"/28], 0x50)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES64=r1, @ANYRESOCT=r1, @ANYRESHEX, @ANYBLOB="2bb91fbe372ce8b6f939d4897c8f11e1835eaa382ad4bc4cb6e2e984dc331842f00f79429137962b8446c5d1ace95ccc9ba874e687892a8b0c8680611cd3a84f12996ccbd6480b3366201ad0367b22d487935bbcda730c2ed9efc632ed72728dcae29c2e587cae93eeac1c5d8d18a7798ee4e7f96bb33f84c60f9e5dfbdafc4e2a04a5e11827f529cd7ded753702667f4ed6fed42a9eda643afe38fe56f01c9fabfe8e8573a74e13e789408b2eed", @ANYRES64=r2, @ANYRES16=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r7}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r8}, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000280)={'geneve0\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x1000, 0x0, &(0x7f0000006000/0x1000)=nil)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f00000001c0)='signal_generate\x00', r10}, 0x10)
socket$packet(0x11, 0x3, 0x300)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r11, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x1}}], 0x3, 0x240080e4)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5f, @void, @value}, 0x94)
writev(r12, &(0x7f0000000200)=[{&(0x7f0000000040)="875e842eaa9d818309516e92dea7e8e157e70bf039df2b7cb599d3dca75027dbb79cf73e8828eed669b5a98b5e2fca932b28051870193e2c3f4008f97e26377552db20d5b8f8048aaf8091c70d645dadc049865f22bf0775c0cf4070edf67c75931595c43bbea408e4c524e51141fa051db9ac5cfd135ca677", 0x79}, {&(0x7f00000000c0)="8b9dcf2cbab6f2477ce1cbc4b41cdbdfd6110fedeb4d4f22bffead2ce19102918fa7420f552432aa7ecdcf90b6fdf81dfff9138750000ffd47375809bb", 0x3d}, {&(0x7f0000000140)="d245ad2ac55971edfaac63fc71e6c778d6c6778a6aa97b5de01b5e8a73583f5b76b9cc3e75696b584eb2d003fee8e2", 0x2f}, {&(0x7f0000000180)="32abeef2b609b16c0c69cc73fabffd3ad308df602f77bac2c882729a680c3b18271615c804b3f3a9d19a827b61243519773b155f24396ea4478490fe6818a73f2676971e9adc86d7884aec4ac1a5bfdc4ed2d610b008b1e72b6b78705c02c20d01cb06dd", 0x64}], 0x4)

1m55.823463431s ago: executing program 34 (id=1313):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
r4 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x84, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x55b, 0x2, 0x10000000, 0x7, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x84}}, 0x801)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@const={0xe, 0x0, 0x0, 0xa, 0x4}, @volatile={0xe, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x0, 0x3e]}}, &(0x7f0000000240)=""/218, 0x34, 0xda, 0x1, 0xb, 0x0, @void, @value}, 0x28)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x7fff, '\x00', r5, r6, 0x4, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWRULE={0x268, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x214, 0x3, "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"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x290}}, 0x4048010)

1m36.340287122s ago: executing program 35 (id=1694):
mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, &(0x7f0000000240)=0xffffffffffffffff, 0x85, 0x0) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r3 = dup(r2)
write$P9_RLERRORu(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="5300000007000046009d40edce82cd28e1e1ed"], 0x53) (async)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
syz_clone3(&(0x7f0000000440)={0x800000, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0xffffffffffffffff], 0x1}, 0x58)

1m34.639671289s ago: executing program 5 (id=1719):
r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2010480, &(0x7f0000000080), 0x1, 0x775, &(0x7f0000001cc0)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000007c0)="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")
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000080)={[{@nolazytime}, {}]}, 0x6, 0x4eb, &(0x7f0000000a40)="$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")
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7040000080000008500000095000000950000000000000021000000007c664e721293de0186e0d988491e625795f6ef12db370b7b35be5cd17821701bfad53d40dac48fe348ede6ef56cb22"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0x3, 0x2}, {0x9, 0x57}], 0xee01}, 0x18, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_GET_MR(r3, 0x114, 0x2, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_aout(r4, &(0x7f00000004c0)=ANY=[], 0xc1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r4, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x0, 0x0)
utimensat(r6, 0x0, 0x0, 0x0)
ioctl$TIOCL_SETSEL(r5, 0x5410, &(0x7f0000000400)={0x2, {0x2, 0x4, 0x1e0}})

1m34.496856489s ago: executing program 5 (id=1723):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000300)={0x1d, r1, 0x3, {0x0, 0xf0, 0x3}, 0x1}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r3=>0x0})
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
pipe2$9p(&(0x7f0000000180)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r7 = dup(r6)
write$P9_RLERRORu(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7])
io_uring_setup(0x7e98, &(0x7f0000000100)={0x0, 0xca35, 0x2, 0x3, 0x172, 0x0, r7})
bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x2, {0x0, 0x1, 0x4}}, 0x18)
sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)

1m34.144687719s ago: executing program 5 (id=1726):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000240)='sched_switch\x00', r0}, 0x18)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1)
sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0)

1m34.034882148s ago: executing program 5 (id=1729):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xb, &(0x7f0000000500)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffa}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10)
r1 = getpid()
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
io_destroy(0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000900)='kfree\x00', r3}, 0x18)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000200)=[{0x20, 0x0, 0x0, 0x7}, {0x6}]})
shmget(0x0, 0x1000, 0x2, &(0x7f0000fff000/0x1000)=nil)

1m33.548802787s ago: executing program 5 (id=1739):
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x46, @local, @loopback, 0x10, 0x7fff, 0x2, 0x3}})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
futex(&(0x7f0000000400)=0x2, 0xb, 0x1, 0x0, &(0x7f0000000580)=0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000181100002daba5182f6cbe28855d08af0e6b0e208d582c82011cdfe245a4f78fea2368ed99174ae2644abb5686e6374cd8e44ab5a32fc80d43d647ab576cd367a9ef81619b0b9b67ac3181d9aa74d8f82155416e277bfcd090", @ANYBLOB="1a674ad94239", @ANYRES64=0x0], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x885aeb75b49c137, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0xef29}}, './file0\x00'})
mount(&(0x7f0000000bc0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000400)='minix\x00', 0x40000, &(0x7f0000000c80)='&+*#\xb2(+(%}&9/{:#\x00')
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0x18, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc0e00, 0x3b, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x101}, 0x18)
r7 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0)
write$selinux_access(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000ac0)={0x6, &(0x7f0000000140)=[{0xe, 0x0, 0x9, 0x9}, {0x9624, 0x8e, 0x10, 0x2}, {0x808, 0xbd, 0x7, 0x3}, {0x1ff, 0x0, 0xa, 0x1}, {0x800, 0xcf, 0x8, 0x788c}, {0x6, 0x9, 0x9, 0x5}]}, 0x10)
write$rfkill(r4, &(0x7f0000000080)={0x3, 0x0, 0x3, 0x1, 0x1}, 0x8)
shmget(0x1, 0x3000, 0x8, &(0x7f0000ffb000/0x3000)=nil)
r8 = socket(0x10, 0x3, 0x0)
r9 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000200)={0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x1, 'wlc\x00', 0x8, 0x8001, 0x56}, 0x2c)
sendmsg$nl_route(r8, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000480)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="3400000012000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0015000000000000140035007767300000fd7b82c3b8ea0000000000000000000000dab7db118477bda4567abfe1650813ebf236a22c9ec34dd839e10773081f7e644fd902a7eaf5e62659ff4302b7083ca446ee32df4d07fa2cf90103b022e6d2ee46889e6ef353ea88095f9dc2cc078c20bddc513351b50df6d8b70e56b5c2f871b8c77ac685f8aa0bfc8d47f18a3d37c55b53260c8b25738c9c217558dfe8760b1668c4"], 0x34}}, 0x0)

1m33.177174947s ago: executing program 5 (id=1749):
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff)
r1 = socket$kcm(0x2, 0x2, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000380)=@broute={'broute\x00', 0x20, 0x4, 0x4a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001c00], 0x0, &(0x7f0000000340), &(0x7f0000001c00)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x60, 0xf8, 'ip6gretap0\x00', 'pim6reg\x00', 'lo\x00', 'caif0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, [0x0, 0xff, 0xff, 0xff], @multicast, [0x0, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0xbe, [], [], @common=@log={'log\x00', 0x28, {{0x6, "5f04190f40715475d575cfa1be3f8c065d4c75f3d2c21c326fd57c26ed36", 0x8}}}}, {0x11, 0x40, 0x6f85, 'sit0\x00', 'xfrm0\x00', 'veth1_to_batadv\x00', 'rose0\x00', @remote, [0x0, 0x0, 0xff, 0x0, 0xff], @remote, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], 0x6e, 0x116, 0x18e, [], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x5}}}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x7, 0x3, 0xb7, 0x0, 0x0, "dde26a3ee1dab743d5634f0c8fd2bb236f6eaaaf27307486462cd41e1389a91eaedd1e3d863435550c6b10715b7a367da7a7e28a37ad18644181b0827e8b0e93"}}}], @common=@nflog={'nflog\x00', 0x50, {{0x7, 0x80, 0x2, 0x0, 0x0, "d49a5d8f1cbb8801e0e21b2f52ef27e0a290ac38735f6f734ee8626436c0bf21a47b2e158535aa2d827c69764ada969a994bbae7944902fad4f0603d69ab23d2"}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x10, 0xf5, 'bond_slave_1\x00', 'virt_wifi0\x00', 'pim6reg1\x00', 'ip6tnl0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, [0x0, 0xff, 0x0, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0xae, 0xae, 0xfe, [@quota={{'quota\x00', 0x0, 0x18}, {{0x0, 0x0, 0xfff, {0x8}}}}], [], @common=@log={'log\x00', 0x28, {{0x5, "7ceec78c62b5adee55dae98d2457b0b43598a500ffacd9485c6427c5a08c", 0x3}}}}, {0x3, 0xd, 0x11, 'netpci0\x00', 'dvmrp0\x00', 'wg2\x00', 'dvmrp1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, [0x0, 0x0, 0x99fd27d65fe3cebf], @empty, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], 0x6e, 0x9e, 0xce, [], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}], @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x520)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10)
sendmsg$inet(r1, &(0x7f0000000280)={&(0x7f0000000300)={0x2, 0x4e1f, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x20, 0x5}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}})
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82})

1m33.169198677s ago: executing program 36 (id=1749):
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff)
r1 = socket$kcm(0x2, 0x2, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000380)=@broute={'broute\x00', 0x20, 0x4, 0x4a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001c00], 0x0, &(0x7f0000000340), &(0x7f0000001c00)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x60, 0xf8, 'ip6gretap0\x00', 'pim6reg\x00', 'lo\x00', 'caif0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, [0x0, 0xff, 0xff, 0xff], @multicast, [0x0, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0xbe, [], [], @common=@log={'log\x00', 0x28, {{0x6, "5f04190f40715475d575cfa1be3f8c065d4c75f3d2c21c326fd57c26ed36", 0x8}}}}, {0x11, 0x40, 0x6f85, 'sit0\x00', 'xfrm0\x00', 'veth1_to_batadv\x00', 'rose0\x00', @remote, [0x0, 0x0, 0xff, 0x0, 0xff], @remote, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], 0x6e, 0x116, 0x18e, [], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x5}}}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x7, 0x3, 0xb7, 0x0, 0x0, "dde26a3ee1dab743d5634f0c8fd2bb236f6eaaaf27307486462cd41e1389a91eaedd1e3d863435550c6b10715b7a367da7a7e28a37ad18644181b0827e8b0e93"}}}], @common=@nflog={'nflog\x00', 0x50, {{0x7, 0x80, 0x2, 0x0, 0x0, "d49a5d8f1cbb8801e0e21b2f52ef27e0a290ac38735f6f734ee8626436c0bf21a47b2e158535aa2d827c69764ada969a994bbae7944902fad4f0603d69ab23d2"}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x10, 0xf5, 'bond_slave_1\x00', 'virt_wifi0\x00', 'pim6reg1\x00', 'ip6tnl0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, [0x0, 0xff, 0x0, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0xae, 0xae, 0xfe, [@quota={{'quota\x00', 0x0, 0x18}, {{0x0, 0x0, 0xfff, {0x8}}}}], [], @common=@log={'log\x00', 0x28, {{0x5, "7ceec78c62b5adee55dae98d2457b0b43598a500ffacd9485c6427c5a08c", 0x3}}}}, {0x3, 0xd, 0x11, 'netpci0\x00', 'dvmrp0\x00', 'wg2\x00', 'dvmrp1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, [0x0, 0x0, 0x99fd27d65fe3cebf], @empty, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], 0x6e, 0x9e, 0xce, [], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}], @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x520)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10)
sendmsg$inet(r1, &(0x7f0000000280)={&(0x7f0000000300)={0x2, 0x4e1f, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x20, 0x5}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}})
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82})

1m16.736743623s ago: executing program 7 (id=2048):
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x10000000, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', <r3=>0x0})
syz_mount_image$ext4(&(0x7f0000000580)='ext3\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000700), 0x1, 0x5d8, &(0x7f0000001200)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0x1, 0x0, 0x0, 0x5, 0x62f, 0x5, 0xfffffffffffffff7, 0x25})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x104, 0x4, 0x3c8, 0x0, 0x110, 0x0, 0x2e0, 0x2e0, 0x1f8, 0x4, 0x0, {[{{@arp={@private, @private, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip_vti0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@remote, @multicast2, @loopback}}}, {{@arp={@loopback, @remote, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vlan1\x00', 'xfrm0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)
ioctl$SIOCSIFHWADDR(r4, 0x89f9, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10)
recvfrom(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000180)=0x2, 0x4)

1m16.671097193s ago: executing program 7 (id=2049):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8)
write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5402"], 0x69)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x1f, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000100000085000000b400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
close(r0)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x440, 0x7, &(0x7f00000004c0))
getresuid(&(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0))
io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0xfefffffe, 0xff, 0x3, 0xfffffffd})
io_uring_enter(r0, 0x60f, 0x0, 0x14, &(0x7f0000000000), 0xfffffffffffffed7)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="980000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000700012800b00010062726964676500006000028006002700040000000c002e0001000000010000000c001f00030000000000000008001a0001000000080004"], 0x98}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0, 0xffffff0f, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r6, 0x0, 0x2}, 0x18)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYRES8=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x36, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r7}, 0x10)
request_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f00000002c0)=',\x00', 0xffffffffffffffff)

1m15.708634001s ago: executing program 7 (id=2068):
r0 = syz_open_procfs(0x0, &(0x7f0000000940)='net/psched\x00')
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="c5310acf7b1802000000000000000000950000"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f0000000140)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x80)
r3 = socket$kcm(0x29, 0x2, 0x0)
sendmmsg$inet(r3, &(0x7f0000004e80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e1", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000008c0)="9b", 0x1}], 0x1}}], 0x2, 0x4000005)
close(r3)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001811000009bf7520dd4c782df6fe78294b01cb99b28d32e25908cb0dd4784e08132552793f50039c7e", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10)
r7 = socket$inet6(0xa, 0x40000080806, 0x0)
connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
close(r7)

1m15.654581411s ago: executing program 7 (id=2072):
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1f, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="850000008a000000d40000002000000095000000000000007bac32b25ef8fa1700215c9f0ecae5731ffa5975e80e9efd118a60a86a6afd6e7bb79dc57a0983ca3752"], &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffffd}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
statx(0xffffffffffffffff, &(0x7f0000000480)='./file0/file0\x00', 0x6000, 0x200, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f0000000680)={[{@user_xattr}, {@noload}, {@resuid={'resuid', 0x3d, r0}}, {@stripe={'stripe', 0x3d, 0x8}}, {@discard}, {@nodioread_nolock}, {@noauto_da_alloc}, {@noinit_itable}, {@debug}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@nogrpid}, {@bsdgroups}, {@noinit_itable}]}, 0x1, 0x54f, &(0x7f0000001080)="$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")
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1000410, &(0x7f0000000000)={[{@nouid32}, {@grpquota}, {@abort}]}, 0x4, 0x4fe, &(0x7f0000000a40)="$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")
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x200000000200}, 0x18)
r4 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
socket$key(0xf, 0x3, 0x2)
keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e')
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901)
move_mount(r5, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00')
open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r7, &(0x7f0000000140)='.\x00', r5, &(0x7f0000000180)='./file0\x00', 0x2)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r9)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000780)={'veth1_to_bridge\x00'})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x10, 0x101, @void, @value}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000340)='kfree\x00', r11}, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010026bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814)
sendfile(r6, r1, 0x0, 0x80000001)

1m15.321879051s ago: executing program 7 (id=2073):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@delneigh={0x30, 0x1a, 0x1, 0x200000, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@NDA_DST_IPV6={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0)

1m14.75999223s ago: executing program 7 (id=2079):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001280)={'macvlan0\x00', 0x2000})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
bind$rxrpc(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
r6 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000180)='cpu<-0\t||')
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8800000000010104000000000000000002000000240001801400018008000100ac1e000108000200e00000010c0002800500010000000000240002800c000280050001000000008414000180080001000000000008000200e0000002080007400000000008000840000000001c0018"], 0x88}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
mount$9p_tcp(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x8, 0x0)
r8 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x858a, 0x0, @perf_config_ext={0x18a}, 0x0, 0x800, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000000)='cpu<00||!')
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x240}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd71, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xb7)
io_uring_setup(0x410f, &(0x7f0000000200)={0x0, 0xfffffffc, 0x0, 0xffffffff})

1m14.72827372s ago: executing program 37 (id=2079):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001280)={'macvlan0\x00', 0x2000})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
bind$rxrpc(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
r6 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000180)='cpu<-0\t||')
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8800000000010104000000000000000002000000240001801400018008000100ac1e000108000200e00000010c0002800500010000000000240002800c000280050001000000008414000180080001000000000008000200e0000002080007400000000008000840000000001c0018"], 0x88}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
mount$9p_tcp(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x8, 0x0)
r8 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x858a, 0x0, @perf_config_ext={0x18a}, 0x0, 0x800, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000000)='cpu<00||!')
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x240}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd71, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xb7)
io_uring_setup(0x410f, &(0x7f0000000200)={0x0, 0xfffffffc, 0x0, 0xffffffff})

1m11.117489865s ago: executing program 2 (id=2125):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r0}, 0x18)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$eJzs3c9rXNUeAPDvnfxq0r6XPHjwXl0FBA2UTkyNrYKLigsRLBR0bRsm01AzyZTMpDQh0BYR3AgqLgTddO2PunPrj63+Fy6kpWparLiQkTuZSSbNTJq0mZlgPh+4uefcc2/O+c65P87MvcwEcGCNpn8yEUcj4v0kYri2PImIvmqqN+L02nr3V1dy6ZREpfL6r0l1nXurK7lo2CZ1uJb5f0R8907EsczWektLy7NThUJ+oZYfL89dGi8tLR+/ODc1k5/Jz5+cmJw8ceq5Uyf3Ltbff1w+cvuDV57+8vSfb//v5nvfJ3E6jtTKGuPYK6MxWntN+tKXcJOX97qyLku63QAeSXpo9qwd5XE0hqOnmmphsJMtAwDa5WpEVACAAyZx/QeAA6b+OcC91ZVcferuJxKddeeliDi0Fn/9/uZaSW/tnt2h6n3QoXvJpjsjSUSM7EH9oxHx6ddvfp5O0ab7kADNXLseEedHRree/5Mtzyzs1jPbFVYGqrPRBxY7/0HnfJOOf55vNv7LrI9/osn4Z6DJsfsoHn78Z27tQTUtpeO/FxuebbvfEH/NSE8t96/qmK8vuXCxkE/Pbf+OiLHoG0jzE9VVmz8FNXb3r7ut6m8c//324VufpfWn8401Mrd6BzZvMz1VnnrcuOvuXI94ordZ/Ml6/yctxr9nd1jHqy+8+0mrsjT+NN76tDX+9qrciHiqaf9v9GWy7fOJ49XdYby+UzTx1U8fD7Wqf6P/B6rztP76e4FOSPt/aPv4R5LG5zVLu6/jhxvD37Yqa9z/m8fffP/vT96opvtry65MlcsLExH9yWtbl5/Y2Laer6+fxj/2ZPPjv9X+n6k9G3t+Pbe93tu/fFH7V03jr7rWKv72SuOf3lX/b5Oo1LZ5oOjm/dmeVvXvrP8nq6mx2pKdnP8e0tLH2JsBAAAAAAAAAAAAAAAAAAAAAAAAYPcyEXEkkkx2PZ3JZLNrv+H93xjKFIql8rELxcX56aj+VvZI9GXqX3U53PB9qBO178Ov5088kH82Iv4TER8NDFbz2VyxMN3t4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg5vDm3/+/ms6y2bWynwe63ToAoG0OdbsBAEDHuf4DwMGzu+v/YNvaAQB0zq7f/1eS9jQEAOiYHV//z7e3HQBA57j/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJudPXMmnSp/rK7k0vz05aXF2eLl49P50mx2bjGXzRUXLmVnisWZQj6bK861/EfX1maFYvHSZMwvXhkv50vl8dLS8rm54uJ8+dzFuamZ/Ll8X8ciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdKy0tz04VCvkFiW0Tg/ujGfsm0Rv7ohn/+ER/12pvPEsMdu8EBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDP/R0AAP//aHclQg==")
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000110000002"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000003fffffe218110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, 0x0}, 0x400d4)
write$cgroup_int(r6, &(0x7f0000000000), 0xfffffd26)
ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x401c5820, 0x0)

1m9.498952633s ago: executing program 2 (id=2143):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0], 0x48)
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000340)={0x0, &(0x7f00000000c0)}) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000001e80)={[{@inlinecrypt}]}, 0x1, 0x549, &(0x7f0000001800)="$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") (async)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3a, 0x1, 0x4, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000}, 0x101010, 0x8000, 0x0, 0x6, 0x3, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async)
set_mempolicy(0x3, &(0x7f00000003c0)=0x3, 0x7) (async)
kexec_load(0x0, 0x0, 0x0, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a3cadce320c0a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000001000100000000000000000000000000000000000a"], 0x64}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000150a0102000000000000000000000000d06f2e32c1672420ac8d1ff70e23d47f923172e5a4864ac4c29e010741745fc6cc2bf7c4cdd5799de02daf63f089f348b4d5671edaf9a2808c11b4cf4aba0f8cbc53cd44e8219c9906f9517de50a3fc5f0f901ca9337a841421867e5c1f3f4c9daf2e2870d76ed87169a8b276876ff0216d81250aac8cc388065440b4c67ed32485841d82a8a364be9d2a296ae7e3d8bcd32862e0fe65025a7e1d0d00e9cfd7c7244fba75de3fc2c8bc790f101cb6c05e41c52cae7a8"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
close(0xffffffffffffffff) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e22}, 0x1c) (async)
syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000280000000000069078000000000000000000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\x00\x00'], 0x0) (async)
perf_event_open(&(0x7f0000002180)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
r2 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0)

1m9.322666482s ago: executing program 2 (id=2148):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
mount(0x0, 0x0, 0x0, 0x2014800, 0x0) (async)
r1 = getuid()
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xa04004, &(0x7f00000004c0)={[{@nodioread_nolock}, {@lazytime}, {@nobarrier}, {@jqfmt_vfsv1}], [{@subj_role={'subj_role', 0x3d, 'lazytime'}}, {@dont_hash}, {@fowner_lt={'fowner<', r1}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@appraise}, {@hash}, {@hash}, {@subj_type={'subj_type', 0x3d, 'block_validity'}}, {@fsmagic={'fsmagic', 0x3d, 0xffffffffffffff7f}}]}, 0x0, 0x7b4, &(0x7f0000001800)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JlsoNKWHUmgg0J6bGFkxqWUrWHKIjSEJpdBLDy09FJpLzv2R3nLtj2t76d/QQ0lIWyc0JYfiMtIokW3JcRxbSvHnA2O/NzPSe995M09PeoMUwL41mv7JRRyO6EuTw9n6JLIV0Rtxsr7f/dWVQroksbb22k9JbZ97qyuFaHpM6mCW+XtEfPV2xJHc5nIrS8uzU6VScSHLj1fnLoxXlpaPnp+bminOFOePT0xOHjvxvxPHdy/WX75dPnT7vZf//dnJB2/97ca7XydxMg5l25rj2C2jMZodk770EK7z0m4X1mVJtyvAjqSXZk/9Ko/DMRw9W7TkCx2tGQCwVy5HxBoAsM8kXv8BYJ9pfA5wb3Wl0FiiPp9zpasfTHTInRcjYrAef2N+s76ltz5n991gbR506F5SmyNpSCJiZBfKH42Iazff+CRdYo/mIQFauXI1Is6OjG7s/9MebuM9C0+gf7s7jm7I6/+gc75Ixz//3zz+i8hl1/9g7e/G8c9Ai2t3Jx5//edurcv27UKhTdLx3/NN97bdb4o/M9KT5f5UG/P1JefOl4r/iYg/R8RY9A2k+Yktyhi7+9vddtuax38/v//mx2n56f9He+Ru9Q6sf8z0VHXqaWJududqxD96W8WfPGz/pM349/Q2y3jluXc+arctjT+Nt7Fsjn9vrV2P+FfL9n90H1Sy5f2J47XTYbxxUrTw+fcfDrUrfzTiQaP9r91MS1opNN4LdELa/kNbxz+SNN+vWXnyMr65Pvxlu23N53+6pOWvj7/1+d+fvF5LNwYal6aq1YWJiP7k1c3rjz16bCPf2D+Nf+yfra//rc7/tBs6m6XXHnPzY+/tHz/defx7K41/Om3/JAvise3/5Ikb92d72pW/vfafrKXGsjWb+7/eTc+73Qo+1cEDAAAAAAAAAAAAAAAAAAAAAAAAgG3KRcShSHL5h+lcLp+v/4b3X2MoVypXqkfOlRfnp6P2W9kj0ZdrfNXlcNP3oU5k34ffyB/bkP9vRPwlIj4YOFDL5wvl0nS3gwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAzME2v/+f+mGg27UDAPbMYLcrAAB0nNd/ANh/Bvtbrm69Ng7sbWUAgI6ovf9PertdDQCgg3z+DwD7z85f/9tMEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB6p0+dSpe1X1dXCml++uLS4mz54tHpYmU2P7dYyBfKCxfyM+XyTKmYL5Tn2j7Rlfq/Url8YTLmFy+NV4uV6nhlafnMXHlxvnrm/NzUTPFMsa9jkQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA9lWWlmenSqXigsTWicvPRDWuZs3W7aMh8UwkBiJir4po7iUOdKdzAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgD+D0AAP//ijIgsw==") (async)
syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000380)='./file0\x00', 0x10e, &(0x7f0000000140)={[{@inlinecrypt}, {@nodelalloc}, {@jqfmt_vfsold}, {@bh}, {@block_validity}, {@quota}]}, 0x3, 0x460, &(0x7f0000001380)="$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") (async)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x183081, 0x0) (async)
mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20, &(0x7f0000000140))

1m9.252783772s ago: executing program 2 (id=2150):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x441, &(0x7f0000000d80)="$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")
open(&(0x7f0000000340)='./bus\x00', 0x64842, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x826, 0x0, 0x1, 0x0, 0x12, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0092000010000000aff571ec3199bde400", [0x1]})
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x40, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000080), 0x0, 0x0, 0x3)
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x40, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x10)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r5, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$AUDIT_MAKE_EQUIV(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x3f7, 0x4, 0x70bd29, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x2004811)
socket$rds(0x15, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0x0, 0x52e, &(0x7f0000000f00)="$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")

1m9.173120452s ago: executing program 2 (id=2152):
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x22402, 0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000240), 0x3, 0x42f, &(0x7f0000000940)="$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")
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000005c0), 0x123482, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip_mr_vif\x00')
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r6}, 0x10)
pread64(r4, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x2}, 0x18)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001d40)=@newtaction={0xb38, 0x30, 0x12f, 0x0, 0x0, {}, [{0xb24, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x5, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xe, 0x0, 0x7, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7fff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x40000001, 0x0, 0x8, 0x8, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x9, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa369, 0x0, 0x9, 0x0, 0x84, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd8, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5f5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x9, 0x7e2, 0x0, 0x0, 0xd5, 0x7, 0x96e4, 0x0, 0x0, 0xa, 0x0, 0x3, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd, 0x5, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0xfffffffd, 0x0, 0xf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x19, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xa6, 0x80, 0x0, 0x0, 0x800, 0xfffff0e7, 0xfffffffd, 0xfff, 0x0, 0x0, 0x0, 0x1ff]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7ff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x6, 0x0, 0x1, 0x4, {0x3, 0x0, 0x1, 0x2, 0x4, 0x4}, {0x5, 0x2, 0x80a0, 0x4, 0x6, 0x1}, 0x8, 0xc457, 0x40f4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}, @m_ctinfo={0x124, 0x1b, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7ff}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7f}]}, {0xe6, 0x6, "669c76733b51f898b624daa9dc2bf67561f86488b9d45bb3f0d557dddc07209d914a7b150a38ff40a4d30288eb1a6831cf11bbdcafa901c294292d664bb22c4d55b1ecdf85ca501cd24363a7310a99f72bbf3d88cee766989c43c0aecdb4901fd1e52b47d40fb55b79d71bde70c34ce05bfc0d297e2b4d72fbe466b7f9ead864e65c225ee3166cfa50a976a05fe9950c927843b1008caa458e3e425592e508835bbbac24ce31f09e1c5021dea93dec5cd666c9f364c529f9db25941bbe341095319a988d719a3a3a623a727265776d854459a6d90f63bb62503b1b857fe3f6a60d84"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbedit={0xac, 0x8, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x101, 0x0, 0x2, 0xfffffffb, 0x2713977c}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x8, 0xfff3}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x1, 0xffe0}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x7fffffff, 0x2, 0x80000000, 0x5}}]}, {0x36, 0x6, "e69215cae7e2776267993378b28e711ba7974cd7100eaae61390088b53ec45a808bb513d0a9b8522ee425251e01169cf6705"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_simple={0xd4, 0x19, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x1ff, 0xe88, 0x10000000, 0x3, 0x9}}]}, {0x8e, 0x6, "2b7e776831e2cd3bce60e85ba927bdbb563fa478e64c3bb2a06c766f0c65923cc3813601ef13baefb79c56d1061ef9bfe599b707980180ce969e1811404a600a33f9ec479490d8d313a2ba014d2ccbd159885bd8f04e3f300733fa8415247aac892bee6b5fcc834eaa5061b7da85bbb72d5ae568032747bad01019ef9e5812c0e9293e8192ff23575e96"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xb38}}, 0x400d4)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r8}, 0x18)
r9 = io_uring_setup(0x2981, &(0x7f0000000440)={0x0, 0x0, 0x40, 0xfffffff9, 0xd4})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x1b, 0x20000038, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x8025}, 0x40008850)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000002000000850000000500000071af9500000071912c2a218039a30000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
r11 = geteuid()
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in, @in6}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f00000002c0)=0xe8)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1, {<r12=>0xee01, 0xee00}}, './file1\x00'})
mount$9p_fd(0x0, &(0x7f0000000140)='./file2\x00', &(0x7f0000000180), 0x2040048, &(0x7f0000000ec0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c64666c7439a340333a7ff0d59cf26569643d", @ANYRESHEX=0x0, @ANYBLOB=',ignoreqv,mmap,cache=fscache,cache=readahead,func=BPRM_CHECK,smackfsroot=&!,-%--$}:-,uid<', @ANYRESDEC=0xee00, @ANYBLOB=',fowner>', @ANYRESDEC=r11, @ANYBLOB="2c706f6f74636f6e746500006d99636b66736465663d6e6f6269646974792c65756964425cda594b29592d7b6899b50bea0f00000000000000000000000000000080dcc42f0b7b7a8c1fc5aa66276d6c737837db160e9f70aa0170cd584a6eae0b3ee558528e", @ANYRESDEC=r12, @ANYBLOB=',\x00'])
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000740), 0x0, 0x0, 0x2)

1m8.858076082s ago: executing program 2 (id=2157):
r0 = syz_io_uring_setup(0x41b9, &(0x7f0000000000)={0x0, 0x2d92, 0x1, 0x3, 0x127}, &(0x7f0000000080), &(0x7f00000000c0))
io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000100)="d6e792fd0ecce575cda646bb8ef330fe4e4edeca330e20020de8652ca018e089057200e2f3738cb3913aff7b6eac65bf4b424cbe21ac3e704606f758af96c75cb8dfc3516b2eff47884d07b156e7afa198c95d1e0dd5061d6ba54261f1bdf69b252da6d7cce511d67031c859aeea760124c5e5033aea427b2d5d18e6f0037c88ca062ce2daefd537dea139ca89b383daafeebf55621a4c81d2aeb57ae3904fdee89c36c7121cdc29f4449dce0c771c58a290d7ed380be852ec1404ba7eef593382fed99e141ccdd0f0726279", 0xcc)
futex(&(0x7f0000000200), 0x80, 0x7f, &(0x7f0000000240), &(0x7f0000000280), 0x1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'sit0\x00', <r1=>0x0, 0x40, 0x1f82f, 0xdb0, 0x56, {{0x2d, 0x4, 0x1, 0x6, 0xb4, 0x65, 0x0, 0x67, 0x2f, 0x0, @private=0xa010101, @remote, {[@cipso={0x86, 0x4c, 0x1, [{0x0, 0x10, "f5155d03b7b02376ed5fb02b6fa2"}, {0x5, 0xb, "937bed091b0d188100"}, {0x6, 0xf, "e05b496488cfd8ce533fe31333"}, {0x1, 0xc, "10aad4cd2d14c84abf01"}, {0x2, 0x10, "f0940c9f018ed08bc13423d943ee"}]}, @timestamp_addr={0x44, 0x14, 0x17, 0x1, 0x8, [{@loopback, 0x1}, {@private=0xa010100, 0x8}]}, @ssrr={0x89, 0x17, 0xb2, [@loopback, @remote, @multicast1, @rand_addr=0x64010102, @private=0xa010101]}, @generic={0x7, 0x12, "efc230e492d44f0498275102f369cf22"}, @generic={0x86, 0xf, "ce6ed2cc0d1309b3734d48a82d"}, @timestamp={0x44, 0x8, 0xda, 0x0, 0xc, [0x6]}]}}}}})
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540), 0x4)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580), 0x20000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3ff}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x2, 0x84, &(0x7f0000000340)=""/132, 0x41100, 0x2, '\x00', r1, @fallback=0x2d, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3, 0x3, &(0x7f00000005c0)=[0x1], &(0x7f0000000600)=[{0x4, 0x5, 0xf}, {0x4, 0x2, 0x8, 0x9}, {0x2, 0x5, 0x9, 0xc}], 0x10, 0x6, @void, @value}, 0x94)
fcntl$notify(r3, 0x402, 0x8000003c)
r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_QUOTA_CTL(r4, 0xc0109428, &(0x7f0000000740)={0x1, 0x2})
socket$nl_generic(0x10, 0x3, 0x10)
setns(r3, 0x2000000)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000780)={0x10000, 0x1, {0x3, 0x0, 0xb4d}, 0xa349})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000880)={'ip6_vti0\x00', &(0x7f0000000800)={'syztnl2\x00', <r5=>r1, 0x4, 0x7, 0x1, 0xffffff81, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x8, 0x7, 0x8, 0xa}})
r6 = bpf$ITER_CREATE(0x21, &(0x7f00000008c0)={r3}, 0x8)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r6, 0x4002f516, &(0x7f0000000900)={0x5, 0x5})
r7 = gettid()
r8 = syz_open_procfs(r7, &(0x7f0000000940)='net/sco\x00')
write$UHID_CREATE2(r6, &(0x7f0000000980)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x9b, 0x6, 0x45e, 0x4, 0x10001, 0x10, "ab248c7f3e3e2553cb28688e262cd88ef8ee098b16c54522376e72cfe839141c4e7a44a6076231c79d56931cadeba13e831d8bdeb8fd3bb23502e6318b5d93e362eb342a18848cafaccfe0a1e6204ebd2f71957eded18c55da23fce565dafd9a07059908b63bc62b273811373e7d1772d7469c42aa1ad8020f0963d442b1db4105a23219140cec31c203d079da448e2eb3d90c1aa15fdf0a7457fe"}}, 0x1b3)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r3, <r9=>0xffffffffffffffff}, &(0x7f0000000b40), &(0x7f0000000b80)=r3}, 0x20)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x6, 0x17, &(0x7f0000000c00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6097fd91}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}]}, &(0x7f0000000cc0)='GPL\x00', 0x80000000, 0x13, &(0x7f0000000d00)=""/19, 0x41000, 0x2, '\x00', r5, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000d40)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
r11 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000e40), 0x2, 0x0)
write$selinux_create(r11, &(0x7f0000000e80)=@access={'system_u:object_r:systemd_logind_var_run_t:s0', 0x20, 'unconfined', 0x20, 0xe}, 0x4e)
r12 = add_key$keyring(&(0x7f0000001040), &(0x7f0000001080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$user(&(0x7f0000000f00), &(0x7f0000000f40)={'syz', 0x0}, &(0x7f0000000f80)="54327853904496874bff851192bd8ddfcae26ee1f192fd07551794334e6e6033fbf0305605f83516968bf4eef55991b9ef49a29543513bab13f76e3c3cb2c9d4886f6a112e247dcb910877293ad381d7555413525f965dc50ee78e12b3600a0612a6c0afae66a1bed47ade112fb8321d1abe7db16063a8e1d803f68d5d92bac36d347610", 0x84, r12)
write$selinux_access(r6, &(0x7f00000010c0)={'system_u:object_r:default_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0xffffffff}, 0x43)
bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x12, 0x1c, &(0x7f0000001140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001240)='GPL\x00', 0xa, 0xfe, &(0x7f0000001280)=""/254, 0x41100, 0x0, '\x00', r5, @fallback=0x12, r3, 0x8, &(0x7f0000001380)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000013c0)={0x1, 0x10, 0x9, 0x30f1}, 0x10, 0xffffffffffffffff, r10, 0x3, &(0x7f0000001400)=[r3], &(0x7f0000001440)=[{0x3, 0x4, 0x10, 0xb}, {0x4, 0x5, 0x3, 0x2}, {0x1, 0x4, 0x4, 0x3}], 0x10, 0x10, @void, @value}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$PERF_EVENT_IOC_RESET(r8, 0x2403, 0x3)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000001580)='cgroup.threads\x00', 0x2, 0x0)

1m8.742084202s ago: executing program 38 (id=2157):
r0 = syz_io_uring_setup(0x41b9, &(0x7f0000000000)={0x0, 0x2d92, 0x1, 0x3, 0x127}, &(0x7f0000000080), &(0x7f00000000c0))
io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000100)="d6e792fd0ecce575cda646bb8ef330fe4e4edeca330e20020de8652ca018e089057200e2f3738cb3913aff7b6eac65bf4b424cbe21ac3e704606f758af96c75cb8dfc3516b2eff47884d07b156e7afa198c95d1e0dd5061d6ba54261f1bdf69b252da6d7cce511d67031c859aeea760124c5e5033aea427b2d5d18e6f0037c88ca062ce2daefd537dea139ca89b383daafeebf55621a4c81d2aeb57ae3904fdee89c36c7121cdc29f4449dce0c771c58a290d7ed380be852ec1404ba7eef593382fed99e141ccdd0f0726279", 0xcc)
futex(&(0x7f0000000200), 0x80, 0x7f, &(0x7f0000000240), &(0x7f0000000280), 0x1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'sit0\x00', <r1=>0x0, 0x40, 0x1f82f, 0xdb0, 0x56, {{0x2d, 0x4, 0x1, 0x6, 0xb4, 0x65, 0x0, 0x67, 0x2f, 0x0, @private=0xa010101, @remote, {[@cipso={0x86, 0x4c, 0x1, [{0x0, 0x10, "f5155d03b7b02376ed5fb02b6fa2"}, {0x5, 0xb, "937bed091b0d188100"}, {0x6, 0xf, "e05b496488cfd8ce533fe31333"}, {0x1, 0xc, "10aad4cd2d14c84abf01"}, {0x2, 0x10, "f0940c9f018ed08bc13423d943ee"}]}, @timestamp_addr={0x44, 0x14, 0x17, 0x1, 0x8, [{@loopback, 0x1}, {@private=0xa010100, 0x8}]}, @ssrr={0x89, 0x17, 0xb2, [@loopback, @remote, @multicast1, @rand_addr=0x64010102, @private=0xa010101]}, @generic={0x7, 0x12, "efc230e492d44f0498275102f369cf22"}, @generic={0x86, 0xf, "ce6ed2cc0d1309b3734d48a82d"}, @timestamp={0x44, 0x8, 0xda, 0x0, 0xc, [0x6]}]}}}}})
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540), 0x4)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580), 0x20000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3ff}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x2, 0x84, &(0x7f0000000340)=""/132, 0x41100, 0x2, '\x00', r1, @fallback=0x2d, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3, 0x3, &(0x7f00000005c0)=[0x1], &(0x7f0000000600)=[{0x4, 0x5, 0xf}, {0x4, 0x2, 0x8, 0x9}, {0x2, 0x5, 0x9, 0xc}], 0x10, 0x6, @void, @value}, 0x94)
fcntl$notify(r3, 0x402, 0x8000003c)
r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_QUOTA_CTL(r4, 0xc0109428, &(0x7f0000000740)={0x1, 0x2})
socket$nl_generic(0x10, 0x3, 0x10)
setns(r3, 0x2000000)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000780)={0x10000, 0x1, {0x3, 0x0, 0xb4d}, 0xa349})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000880)={'ip6_vti0\x00', &(0x7f0000000800)={'syztnl2\x00', <r5=>r1, 0x4, 0x7, 0x1, 0xffffff81, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x8, 0x7, 0x8, 0xa}})
r6 = bpf$ITER_CREATE(0x21, &(0x7f00000008c0)={r3}, 0x8)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r6, 0x4002f516, &(0x7f0000000900)={0x5, 0x5})
r7 = gettid()
r8 = syz_open_procfs(r7, &(0x7f0000000940)='net/sco\x00')
write$UHID_CREATE2(r6, &(0x7f0000000980)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x9b, 0x6, 0x45e, 0x4, 0x10001, 0x10, "ab248c7f3e3e2553cb28688e262cd88ef8ee098b16c54522376e72cfe839141c4e7a44a6076231c79d56931cadeba13e831d8bdeb8fd3bb23502e6318b5d93e362eb342a18848cafaccfe0a1e6204ebd2f71957eded18c55da23fce565dafd9a07059908b63bc62b273811373e7d1772d7469c42aa1ad8020f0963d442b1db4105a23219140cec31c203d079da448e2eb3d90c1aa15fdf0a7457fe"}}, 0x1b3)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r3, <r9=>0xffffffffffffffff}, &(0x7f0000000b40), &(0x7f0000000b80)=r3}, 0x20)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x6, 0x17, &(0x7f0000000c00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6097fd91}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}]}, &(0x7f0000000cc0)='GPL\x00', 0x80000000, 0x13, &(0x7f0000000d00)=""/19, 0x41000, 0x2, '\x00', r5, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000d40)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
r11 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000e40), 0x2, 0x0)
write$selinux_create(r11, &(0x7f0000000e80)=@access={'system_u:object_r:systemd_logind_var_run_t:s0', 0x20, 'unconfined', 0x20, 0xe}, 0x4e)
r12 = add_key$keyring(&(0x7f0000001040), &(0x7f0000001080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$user(&(0x7f0000000f00), &(0x7f0000000f40)={'syz', 0x0}, &(0x7f0000000f80)="54327853904496874bff851192bd8ddfcae26ee1f192fd07551794334e6e6033fbf0305605f83516968bf4eef55991b9ef49a29543513bab13f76e3c3cb2c9d4886f6a112e247dcb910877293ad381d7555413525f965dc50ee78e12b3600a0612a6c0afae66a1bed47ade112fb8321d1abe7db16063a8e1d803f68d5d92bac36d347610", 0x84, r12)
write$selinux_access(r6, &(0x7f00000010c0)={'system_u:object_r:default_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0xffffffff}, 0x43)
bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x12, 0x1c, &(0x7f0000001140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001240)='GPL\x00', 0xa, 0xfe, &(0x7f0000001280)=""/254, 0x41100, 0x0, '\x00', r5, @fallback=0x12, r3, 0x8, &(0x7f0000001380)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000013c0)={0x1, 0x10, 0x9, 0x30f1}, 0x10, 0xffffffffffffffff, r10, 0x3, &(0x7f0000001400)=[r3], &(0x7f0000001440)=[{0x3, 0x4, 0x10, 0xb}, {0x4, 0x5, 0x3, 0x2}, {0x1, 0x4, 0x4, 0x3}], 0x10, 0x10, @void, @value}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$PERF_EVENT_IOC_RESET(r8, 0x2403, 0x3)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000001580)='cgroup.threads\x00', 0x2, 0x0)

29.415238685s ago: executing program 8 (id=2682):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001580)={0x0, 0x0, {0x0, @struct, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct}})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001180)={r2, 0x4, 0xe})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', <r5=>0x0})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040))
ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000200)={0x60, 0x0, &(0x7f00000a2000/0x4000)=nil, &(0x7f00004fc000/0x3000)=nil, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x51})
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xb, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000019000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000200)='io_uring_register\x00', r10, 0x0, 0xbffffffffffffffd}, 0x10)
r11 = io_uring_setup(0x1d7f, &(0x7f00000004c0))
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r11, 0xd, 0x0, 0x20)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r12}, 0x10)
sendmsg$inet(r7, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b0014000000000000000000000007"], 0x38}, 0x0)
r13 = socket$netlink(0x10, 0x3, 0x0)
write$qrtrtun(r4, &(0x7f00000002c0)="8b28c7281f86e4df127198cb739e68612672ee35615f34390b19794805fa8f07b56ab46cbb7a99fadb8af004689e7a284d3df297fc28d6efcaf548397e824422c4e310d4b44092927c5ad9895b75f2f17fd783a4d541f0692cb4ef7dc2b5ee9211d18384d8be9d", 0x67)
sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c00000010000305000000000000ffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b0001006d616373656300001c000280050007000000000005000a0000000000050009000000000008000500", @ANYRES32=r5], 0x5c}}, 0x0)

29.338604034s ago: executing program 8 (id=2683):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000080a05000000000000000000020000000900020073797a32000000000900010073797a30000000000c0003"], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
fcntl$setstatus(r1, 0x4, 0x42000)
connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) (async)
socket$inet(0x2, 0x3, 0x0)

28.415365703s ago: executing program 8 (id=2701):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000340), 0x4000, &(0x7f00000000c0)={[], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_type}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]})
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10000, 0x40)

28.350065163s ago: executing program 8 (id=2703):
prlimit64(0x0, 0xe, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5, 0x0, 0x0, @void, @value}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20)
sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10)
r8 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000004c0)={<r9=>0x0, @multicast1, @loopback}, &(0x7f0000000500)=0xc)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000680)={'sit0\x00', &(0x7f0000000540)={'ip_vti0\x00', r9, 0x10, 0x700, 0x3, 0x90, {{0x2e, 0x4, 0x2, 0x3c, 0xb8, 0x68, 0x0, 0x8, 0x4, 0x0, @remote, @broadcast, {[@end, @timestamp_prespec={0x44, 0x44, 0x98, 0x3, 0x2, [{@private=0xa010100, 0xb8c}, {@loopback, 0x8}, {@loopback, 0xfff}, {@empty, 0x9}, {@local, 0x3cea}, {@multicast1, 0x80000001}, {@remote, 0x5}, {@loopback}]}, @end, @generic={0x83, 0x7, "85883b54e1"}, @cipso={0x86, 0x57, 0x2, [{0x2, 0xc, "b83611e24b0c6e5cb25e"}, {0x2, 0xd, "7068f5eaa60730a2285ce7"}, {0x7, 0xd, "7781bd4e2227ef237a7be6"}, {0x6, 0x12, "040d79cacbb9c0984ba635c1b2eb1cc6"}, {0x0, 0x7, "2a9001b3ba"}, {0x6, 0xa, "12f713fc37e62d9e"}, {0x2, 0x8, "bb56ea7050ba"}]}]}}}}})
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
r10 = open(&(0x7f0000000000)='./file1\x00', 0x1c927e, 0xb4)
fallocate(r10, 0x1, 0x0, 0x1001f0)
r11 = syz_mount_image$tmpfs(0x0, &(0x7f00000040c0)='./file0\x00', 0x810000, 0x0, 0x6, 0x0, &(0x7f0000000000))
mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=2'])
chdir(&(0x7f0000001b80)='./file0\x00')
symlinkat(&(0x7f0000000b80)='./file1\x00', r11, &(0x7f0000001cc0)='./file1\x00')

27.268087681s ago: executing program 8 (id=2718):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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")
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}, 0x510d, 0x3, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = syz_io_uring_setup(0x5c23, &(0x7f0000000240)={0x0, 0x17f6, 0x13290}, &(0x7f0000000440)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r1, 0x1, 0x0, 0x1, 0x0, 0x1000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', <r5=>0x0})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000006d000000181100000001000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x4, &(0x7f0000000080)=[{0x8, 0x4, 0x6, 0x9}, {0x7, 0x2, 0xfe, 0x4}, {0x3, 0x8, 0xa, 0x179}, {0xa, 0x9, 0xcf, 0x8}]})
ioctl$SCSI_IOCTL_GET_PCI(r7, 0x5393, &(0x7f0000000000))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0x2}, 0x18)
r8 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
preadv(r8, 0x0, 0x0, 0xdcd, 0xa)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="02"], 0x4, 0x0)
r9 = eventfd(0x2)
ioctl$BTRFS_IOC_BALANCE_CTL(r9, 0x40049421, 0x2)

26.83951342s ago: executing program 8 (id=2726):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/1546], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3000000001010102000000000000000002000000100002800c00028005000100005e00000c0019800800020008000000"], 0x30}}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2405, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0xd)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200"/575], 0x310)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x1d2d, 0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x200, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0)

26.82200712s ago: executing program 39 (id=2726):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="7915a8000000000061138c0000000000bfa000000000000007000000080000002d0301000000000095000000000000006916000000000000bf67000000000000350607000fff07206706000002000000160304000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04a19e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac300"/1546], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3000000001010102000000000000000002000000100002800c00028005000100005e00000c0019800800020008000000"], 0x30}}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2405, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0xd)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200"/575], 0x310)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x1d2d, 0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x200, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0)

21.400488833s ago: executing program 4 (id=2802):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x0, &(0x7f00000000c0)=0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
lsm_get_self_attr(0x68, 0x0, 0x0, 0x1)

20.952769032s ago: executing program 4 (id=2811):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600"/20, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000580)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r1}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800"], 0x48)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000640)={0x9, {{0x2, 0x0, @multicast2}}}, 0x90)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xe68, 0x0, 0x8, 0x0, 0x80000081}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
gettid()
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
statx(0xffffffffffffff9c, 0x0, 0x6000, 0x80, 0x0)
r3 = socket$kcm(0x29, 0x2, 0x0)
sendmmsg$inet(r3, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000340)}}], 0x1, 0x400c005)
close(r3)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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")
quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)

20.762541132s ago: executing program 4 (id=2817):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000001e80)={[{@inlinecrypt}]}, 0x1, 0x549, &(0x7f0000001800)="$eJzs3c9vI1cdAPDvTH65222zCz1ABewChQWt1t5421XVS8sFhKpKiIoD4rANiTcKseMQO6UJkUj/BpBA4gR/AgckDkg9ceDGEYkDQpQDUoEItEHiYDRjJ+smNmtqx+7Gn480O/Pmzcz3PWdn3vNz4hfA1LoeEQcRMR8Rb0TEYmd/0lnilfaSHffgcH/l6HB/JYlW6/W/J3l+ti+6zsk82blmISK+/pWIbydn4zZ29zaWq9XKdiddata2So3dvVvrteW1ylpls1y+u3T39ot3XiiPrK7Xar9478vrr37j17/65Lu/O/ji97NiXe7kdddjlNpVnzuJk5mNiFfPI9gEzHTW8xMuBx9MGhEfiYjP5Pf/Yszk/zsBgIus1VqM1mJ3GgC46NJ8DCxJixGRpp1OQLE9hvdMXEqr9Ubz5v36zuZqe6zsSsyl99erldtXF/7w3fzguSRLL+V5eX6eLp9K34mIqxHxo4Un8nRxpV5dnUyXBwCm3pPd7X9E/GshTYvFgU7t8akeAPDYKEy6AADA2Gn/AWD6aP8BYPoM0P53Puw/OPeyAADj4f0/AEwf7T8ATB/tPwBMla+99lq2tI4633+9+ubuzkb9zVurlcZGsbazUlypb28V1+r1tfw7e2qPul61Xt9aej523io1K41mqbG7d69W39ls3su/1/teZW4stQIA/per1975fRIRBy89kS/RNZeDthoutnSERwGPl5lhTtZBgMea2b5geg3UhOedhN+ee1mAyej5Zd6Fnpvv95P/I4jfM4IPlRsfH3z83xzPcLEY2Yfp9cHG/18eeTmA8TP+D9Or1UpOz/k/f5IFAFxIQ/wKX+sHo+qEABP1qMm8R/L5PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwwlyPiO5GkxXwu8DT7Ny0WI56KiCsxl9xfr1ZuR8TTcS0i5hay9NKkCw0ADCn9a9KZ/+vG4nOXT+fOJ/9eyNcR8b2fvv7jt5abze2lbP8/TvYvHE8fVn543hDzCgIAg/vzIAfl7Xe5s+56I//gcH/leDnHMp7x3pdOJh9dOTrcz5d2zmy0Wq1WRCHvS1z6ZxKznXMKEfFsRMyMIP7B2xHxsV71T/KxkSudmU+740cn9lNjjZ++L36a57XX2cv30RGUBabNO9nz55Ve918a1/N17/u/kD+hhpc//woRx8++o674s51IMz3iZ/f89UFjPP+br57Z2Vps570d8exsr/jJSfykT/znBoz/x0986ocv98lr/SziRvSO3x2r1KxtlRq7e7fWa8trlbXKZrl8d+nu7RfvvFAu5WPUpeOR6rP+9tLNp/uVLav/pT7xCz3rP39y7ucGrP/P//PGtz79MLlwOv4XPtv75/9Mz/htWZv4+QHjL1/6Zd/pu7P4q33q/6if/80B47/7l73VAQ8FAMagsbu3sVytVraH2sjehY7iOmc2siIOdvBxd3G4oH+KfGNEL0ufjawzNsjBc+f1qp77xuxJX3G0V/5mdsUxVycdeS2G2ngwrliTeyYB4/Hwpp90SQAAAAAAAAAAAAAAgH7G8adLk64jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF9d/AwAA//8+JMPM")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000180))
fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000480)={{}, {}, [], {}, [], {0x10, 0x6}}, 0x24, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x40086602, &(0x7f0000000080)={@desc={0x4000, 0x0, @desc1}})

20.529586502s ago: executing program 4 (id=2825):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000002c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@commit={'commit', 0x3d, 0x5}}, {@resgid}, {@debug}, {@usrjquota}]}, 0x23, 0x452, &(0x7f0000000880)="$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")
syz_clone3(0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='tlb_flush\x00'}, 0x10)
syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

20.352569281s ago: executing program 4 (id=2827):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x5, 0x9}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xce05}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (rerun: 32)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async, rerun: 64)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) (rerun: 64)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0a000000010000000886359322fb16829bebc500cc923e32bd0f2e404e965551818cb26612248e17b951a8f3b4cc95e7d3c6c1c07a00000000000000000000005a3bf92456a486f8707a728a3201ecfe1f4a7936c1b9fdcc207243cd75ad74c2c34987c03a069a89e5a28edc4ad0fd44f923f6334530382625a643250fd05004bcaa508fb0d033c1ef891e356d0cfe36d527009632ad636ec72e99b28f5d881fb9be1a00facb660c36994ea13cfbe23281", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000200)='%-010d \x00'}, 0x20)
syz_emit_ethernet(0x2e, &(0x7f0000000580)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty=0x24, @empty}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x2, 0xc, 0x100, @void}}}}}}}, 0x0) (async, rerun: 32)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10)
r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf32(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c460403ad03000000000000000002003e00000000000103000038000000000000000ff30000000020000100040000000000000000000300000008000000f30000000000000004"], 0x58) (async)
close(r3) (async)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) (async, rerun: 64)
socket$kcm(0x28, 0x1, 0x0) (async, rerun: 64)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
unshare(0x68040200)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_int(r4, 0x29, 0xce, &(0x7f0000000540)=0x4, 0x4) (async, rerun: 32)
r5 = socket(0x10, 0x803, 0x0) (rerun: 32)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r5) (async)
getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async)
write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7fffffff})
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x8205, &(0x7f0000000480)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@data_err_abort}, {@minixdf}, {@errors_remount}, {@abort}, {@noblock_validity}, {@barrier}, {@journal_dev={'journal_dev', 0x3d, 0xf35}}]}, 0x1, 0x618, &(0x7f0000000640)="$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")

20.152406871s ago: executing program 4 (id=2831):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000003c0)={r2, 0x0, 0xec, 0x0, &(0x7f0000000200)="923eae0aad7f68ba70ba05c5c5b9fcd633a322015e8be0811d818271e5b77bc4f36d5033e8a7b79a4a87287a29ecf01ab653fb8951690324bd2d6928aad338d33996886a54fc7014f72f4a56fe27efa1295da5a6c1a840b38813a60eacc9046f0dcc2ad5b756e31cc0ec2acc9fef9ea590586e7555ef5b6c9d99eb610e6b3ebfe710cd8d5551432cb48f4507af4d0dee996a183a12952329539ed81f7b6adf98b5d32fda28e11bc56479765039f1d3653a77d8d466fbf5f848b7eb178126e90bb23af4093c8c79c87560146babc14071f26234a64ae8824357dd1ff0d9da0a592b306421e504e21fbad96c79", 0x0, 0x9, 0x0, 0x18, 0x0, &(0x7f0000000180)="d87d341766d7e58c0461dcde0331e17a43e10a5c914043be", 0x0, 0x2, 0x0, 0xe}, 0x50)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001880)={'vxcan1\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0xd}}]}}, @TCA_RATE={0x6}]}, 0x4c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001000010429bd7000000000", @ANYRES32=0x0, @ANYBLOB="00900000a8000600200012800b0001006272696467650000100002800c0023000100000000000000"], 0x40}}, 0x24008050)

20.151863371s ago: executing program 40 (id=2831):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000003c0)={r2, 0x0, 0xec, 0x0, &(0x7f0000000200)="923eae0aad7f68ba70ba05c5c5b9fcd633a322015e8be0811d818271e5b77bc4f36d5033e8a7b79a4a87287a29ecf01ab653fb8951690324bd2d6928aad338d33996886a54fc7014f72f4a56fe27efa1295da5a6c1a840b38813a60eacc9046f0dcc2ad5b756e31cc0ec2acc9fef9ea590586e7555ef5b6c9d99eb610e6b3ebfe710cd8d5551432cb48f4507af4d0dee996a183a12952329539ed81f7b6adf98b5d32fda28e11bc56479765039f1d3653a77d8d466fbf5f848b7eb178126e90bb23af4093c8c79c87560146babc14071f26234a64ae8824357dd1ff0d9da0a592b306421e504e21fbad96c79", 0x0, 0x9, 0x0, 0x18, 0x0, &(0x7f0000000180)="d87d341766d7e58c0461dcde0331e17a43e10a5c914043be", 0x0, 0x2, 0x0, 0xe}, 0x50)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001880)={'vxcan1\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0xd}}]}}, @TCA_RATE={0x6}]}, 0x4c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001000010429bd7000000000", @ANYRES32=0x0, @ANYBLOB="00900000a8000600200012800b0001006272696467650000100002800c0023000100000000000000"], 0x40}}, 0x24008050)

4.093451887s ago: executing program 1 (id=3156):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1)
sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="59bb22bd7000000020001100000008002b01"], 0x28}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298)
ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000002540)=0x1)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000180)={'wpan1\x00', <r7=>0x0})
r8 = getpid()
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xf1, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
close(r9)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)={@fallback=r11, r11, 0x2f, 0x0, 0x0, @void, @value}, 0x20)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_PID={0x8, 0x1c, r8}]}, 0x24}}, 0x0)
r12 = perf_event_open(&(0x7f0000001040)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x40082406, &(0x7f00000001c0)='cpu<00\t&&')
perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x81, 0x9, 0xd, 0x7, 0x0, 0x80, 0x20400, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_bp={&(0x7f0000000240), 0x6}, 0x60, 0x3ff, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x0, 0xf, 0x0, 0x9}, r8, 0x3, r12, 0xb)

3.319424306s ago: executing program 1 (id=3176):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = epoll_create(0x800)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x10000010})
r2 = socket$inet(0x2, 0x3, 0x2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0x15, &(0x7f0000001480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc)
setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x80000000, 0x9}}}}}, 0x0)

3.204928656s ago: executing program 1 (id=3180):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = socket(0x10, 0x803, 0xfffffffe)
sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newlink={0x3c, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, 0x5120b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}]}, 0x3c}}, 0x0)
sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async)
socket$inet6(0xa, 0x2, 0x0) (async)
socket(0x10, 0x803, 0xfffffffe) (async)
sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newlink={0x3c, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, 0x5120b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}]}, 0x3c}}, 0x0) (async)
sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) (async)

3.193144125s ago: executing program 1 (id=3181):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000001e80)={[{@inlinecrypt}]}, 0x1, 0x549, &(0x7f0000001800)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000180))
fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000480)={{}, {}, [], {}, [], {0x10, 0x6}}, 0x24, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000c00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x40086602, &(0x7f0000000080)={@desc={0x4000, 0x0, @desc1}})

3.063665285s ago: executing program 1 (id=3184):
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000004000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x2) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xb4}}, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
symlinkat(0x0, 0xffffffffffffff9c, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32], 0x50)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x25, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000110001010000502638598db7da070008", @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
r7 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r7, 0x29, 0xc8, 0x0, 0x0) (async)
setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, 0x0, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r8 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0)
write$cgroup_freezer_state(r8, &(0x7f0000000400)='FROZEN\x00', 0x7) (async)
write$cgroup_freezer_state(r8, &(0x7f0000000080)='THAWED\x00', 0x7) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

1.619244423s ago: executing program 3 (id=3217):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00')
fchdir(r0)
mkdirat(r0, &(0x7f0000000080)='./bus\x00', 0x8) (async)
mkdirat(r0, &(0x7f0000000080)='./bus\x00', 0x8)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYRESOCT=r1, @ANYBLOB="65f8eb9883d4cc3a9079110b1423f09ffe03004eceeda2167ac4a67572e97440067e403b887aca663376240e80a05fa52b3d6737ebac1ebaa978d91c12a7201fe7d0adb631d4d3fa51696c0b7e4016bbcd26161c"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x37, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x1}, 0x18)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000400)=0xe8)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x40, &(0x7f0000000a40)={[{@norecovery}, {@grpquota}, {@quota}, {@dax_always}, {@barrier}, {@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x4d}}], [{@euid_eq={'euid', 0x3d, r3}}, {@smackfsroot={'smackfsroot', 0x3d, 'fd\x00'}}, {@smackfshat={'smackfshat', 0x3d, 'fd\x00'}}]}, 0x1, 0x4f6, &(0x7f0000000540)="$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") (async)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x40, &(0x7f0000000a40)={[{@norecovery}, {@grpquota}, {@quota}, {@dax_always}, {@barrier}, {@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x4d}}], [{@euid_eq={'euid', 0x3d, r3}}, {@smackfsroot={'smackfsroot', 0x3d, 'fd\x00'}}, {@smackfshat={'smackfshat', 0x3d, 'fd\x00'}}]}, 0x1, 0x4f6, &(0x7f0000000540)="$eJzs3c9vI1cdAPDvTOImTdMmhUoFBHQphQWt1k68bVT1VC4ghCohKk4c0pB4oyh2HMVOacJKTf4HJCpxQHDijBASh0o9cURwg9telgPSAivQBomD0fhHNruxk7Dr2Fr785FGM2/eeL7vrXfe83438QtgbF2JiIOIeCYi3ouIufb5pL3F260tu+7+vVurR/durSbRaLz7j6RZn52LE6/JPNe+53REfO9bET9MTset7e1vrpTLpZ12uVCvbBdqe/vXNyor66X10laxuLS4tPDmjTeKfevrK5Vf3/3mxne+//HvvnDnTwdf/3HWrNl23cl+9FOr67njOJnfXEagIZmIiMn23x+ePmlEfCoiXm0+/3Mx0Xw3L6bLYw0APAUajblozJ0sAwCjLm3mwJI0384FzEaa5vOtHN5LMZOWq7X6tZvV3a21Vq5sPnLpzY1yaaGdK5yPXJKVFz/Mjh+Ui/Fw+UZEvBgRP5l6tlnOr148zwAA9Ndzj8z//55qzf8AwIibPu+C5cG0AwAYnHPnfwBg5Jj/AWD8mP8BYPyY/wFg/Jj/AWDc3O7M/xPDbgkAMBDffeedbGsctb//eu39vd3N6vvX10q1zXxldzW/Wt3Zzq9Xq+vlUn61WjnvfuVqdXvx9dj9oFAv1eqF2t7+cqW6u1Vfbn6v93IpN5BeAQBnefGVT/6SRMTBW882tzixloO5GkZbOuwGAEMj5w/jy7dww/jyb3zgvLU8e/6I8EePEazx4WO8COi3q5+V/4dxJf8P40v+H8aX/D+Mr0Yj6bXmf3p8CQAwUuT4gYH+/z8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACMiNnmNn+inKb5fMTzETEfueTmRrm0EBEvRMSfp3JTWXlxqC0GAJ5c+rekvf7X1bnXZh+tfSb5z1RzHxE/+tm7P/1gpV7fWczO//P4fP2j9vniMNoPAJynM0935vGO+/durXa2Qbbn7jdai4tmcY/aW6tmMiaz3R+nIxcRM/9KWuW27PPKRB/iHxxGxGe69T9p5kbm2yufPho/i/38QOOnD8VPm3WtffZn8elTd57qGfO8tV5hXHySjT9vd3v+0rjS3E93Xfx4ujlCPbnO+Hd0avzrPO/TMZEF6zL+XblojNd//+2edYcRn5vsFj85jp/0GH9fu2D825//4qu96hq/iLga3eOfjFWoV7YLtb396xuVlfXSemmrWFxaXFp488YbxUIzR13oZKpP+/tb117o2f9fRcz0iD99Tv+/cmavG8cD8C//+94PvtQr/mHE177c/f1/6Yz42Zz41TPjP7Ay89uey3dn8dda/T/8f9//axeMf+ev+2sXvBQAGIDa3v7mSrlc2unrQS76fMMTB8kltdnBiB9kn8ef9D4vt1NmXa/5w88/fjmrHHpP+3Iw5IEJuHQPHvphtwQAAAAAAAAAAAAAAOjl0n+dKB12DwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABhl/wsAAP//WRTLkg==")

1.540500463s ago: executing program 3 (id=3221):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") (async)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff01000000"], 0x5b0) (async)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) (async)
close(r0)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)

1.540198023s ago: executing program 3 (id=3223):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), 0xffffffffffffffff)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xff36}]}}]}]}]}}]}, 0x6c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001"], 0x24}}, 0x0)
fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff)

1.428034533s ago: executing program 3 (id=3224):
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0xe}, 0x18)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8)
write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="5402"], 0x69)
close(r3) (async)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000000), &(0x7f00000005c0)=r5}, 0x20) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) (async)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='binfmt_misc\x00', 0x1000800, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
r7 = socket(0x10, 0x3, 0x0)
connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) (async)
sendmsg$nl_route_sched(r7, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000680)=@newtaction={0x150, 0x30, 0x829, 0x0, 0x0, {}, [{0x13c, 0x1, [@m_ife={0x138, 0xc, 0x0, 0x0, {{0x8}, {0xa8, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x50b}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x3, 0x10000000, 0x5, 0x1}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x1}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_IFE_TYPE={0x6, 0x5, 0x4}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8b2f, 0x0, 0x30000000, 0x3, 0x4}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x6a, 0x6, "2aaf0e10aff6f78fb6835200b2d9543cf6da35248cfbcafa509e97180c685f7872e3e96244398018bc6ba1cfe0b73228bb22d98c5998631c78cfc915fd4efa8724d4f347af8c48cda62976e43e894749885aa53966237fe3beb4b457b4f141526f3177d881ec"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x150}}, 0x0) (async, rerun: 64)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x2) (rerun: 64)
writev(r8, &(0x7f000000b8c0)=[{&(0x7f0000001080)="a6297941536c3850c1c50362a6c41f5c37bef0ada69664552f478721b7926cda72a6641eed1bb99f678732ab542251056b6799baff73a42b07b371a68063c1de55c3b4d75b8ca3ad376888e1fef02984f1d59f8a4db397fb683f3d4ff9db67892a6f8ba4227deb82e65c188d4f2dececb2e7a3df030265271e910a6c149b8595b929606f534f9e32969880cf1b60cff697b5018b08d4d4d93fa5ac1f7dd5ff146701e1b56aa6a1452f2d54aafbba3aa3c48591094aadffefba8e15f6e5868794ef0ae9e6bfd1d06ed8f2439863426f9a14ed77a0186388c484a8c5e6d714e78c31bd4e04526277de5a0426c109f5e7dec9b0c021dd0cbc66bbe184584ca5d8095b171012ac51e0069dcb45721877f5692019e99c3d70ef173e39942a521af3fea03572ce5d9360fd0a015a6c8240b1ece43cc37b69c8732b1b7bf149e1668311d2d65c4a9394539e28296c6abfce79031a684dc5e60d12fa1a5f9afdf25bee6813f45194ea38a36c8581ce5e3fe8deacb61d0e530056c12d8630b9a5716a21cf9bd9d84e311278f00425c087ef46871567651ba70668263ccfa08c144b70b43953283d8fc333fcc10418e329d6ce228d3b21dfa8a062834c23ba7584c9a3878a811db68e1d9338a1cbb8ce96730890fb70052aa35bf461b214c3cd7af5560f1fbd957b43cb1c74cc02baf4130c46444a37105523f79e8f4e63afd32785ca11290a28d18ee64f8c5968a463d9cba814ba9b0ed1ad6780e466b63090559add6c2286ab77761bf2fbf58384077e1b46afda98cfc315e17be3679e385335e76af54221bb82250274d555abeda2fb39b228bf82f7c753087ce783a5c3a4037b1250202c94aaa1311f5dd3c01dc240c112b8262604a2f72a4e8dd2b40ca385f0abc350531a3cfc6fb9f629b5b9dc0ec7c3708d363594d8c2d63e80a376cb40eab025dcd91c3c7634a9155ea458818a0574f5a60ef3b28a425b2f64004167dd043d584dfdc7c602258be469a93b47c4b2b6903a7124fdb99182bb5733d524e331f99e4a24d0747ef2fa26f84b9592adb6cf5ca7d4be21837d9ff6b372aed972e90c5aac4c18c6bfca99e4be7cb85acee1c06ed6ae9c311c3ce53f46e87d9a485f523d03c585f5907f37efbd59f9c9f3980978810ffd4c8fd9a4b67f9e486bde9202d2e197e7d41578585a3d6cc5f95d2acf48bff2e2dc5f31bfda90363046eea112bb84d6920973a5e982854eeb35bc7b707b70391530e71221369c0c5448155bb510585b98d2ff8b8b4b97d40f7926c5a198a78c1696a6c4e2e512a4a602be754ad54263927f276d157566a90fe08a0f63b4404527e1238446a42fbd3e5573e6f4dd099a60879cc2e6c7b4e6ce9fa7c5e2ea0e6b0b1bc658e6b96a9a62e0b92fd4852c144a722fcb0973bf7cf35c132ab90f06b03f777be61936f598d7aade598ffea0cf114ee5b67a05000000d8b0400c9996cd2bc066214de50779f23c2472694beff3642a4faf74860afeb7130e51f04dad08ef285184e0ea03812774be4aa72835168b4018ac4d71b83a935c7724d74d0af1ed0bcbb307a7beed3fec7f283bf853e7c470c2aebe1943349a0a1197b5cd5793a73f70f48a4f39b5df40cf9ae792011cb08c4cd90e16ba2014d3645b0a8fa9281eaeb37b6ff3e9d028446090bbe4b9620e3c991a993791ff47a23c709d0a57392be687a454981a2a4d135b9c5f84e0d4efc91342e119644d807f17869f1a030d3d57b2eb4fb97cc08a54905388333d29a7088a804e0f6f237771a77c9f61bb61a823340509891635473347c44f96e822edb6ab24fb77db4d1962af534e350d93829c9040e6df613b3333dcee9959975d932ee6f206b78e43c1b6eeda03a3bc13f11dbbd16accb9df239a4508f03b717d7d6e1b4babd9359813104e83974efdf4380fbeb8a201e366140545847f839923b8acd56498c52476470ece3f9611a7ef19e0aca8ed0402c0cfe36a64d4b992dd8938bfa7e347a9337ed2d8d91268a2ff694065f08f8eb5028bf265662eeb2791fc33260cd5ac5fafca866e2fd87ad79b3f6d", 0x5b3}], 0x1) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async)
syz_io_uring_setup(0x237, &(0x7f0000000540)={0x0, 0xffffffff, 0x80, 0x3, 0x1d7}, &(0x7f00000002c0)=<r9=>0x0, &(0x7f0000000300)=<r10=>0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async)
perf_event_open(&(0x7f00000008c0)={0x8, 0x80, 0x5, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x8001}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa10000e3d4d795bc401a1afec66fcd82450000000007010000f8ffffffb702000005000000b7030000000000008500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
mlock(&(0x7f0000d9a000/0x10000)=nil, 0x10000)

1.427575843s ago: executing program 3 (id=3225):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38)
r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)={0x8000, 0x81, 0x58}, 0x18)
r4 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000400))
mount_setattr(r3, &(0x7f00000003c0)='./file0\x00', 0x8800, &(0x7f0000000440)={0x0, 0x100000, 0x40000, {r4}}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r7, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x84, &(0x7f0000000040)={0x0, @in={{0xa, 0x0, @local}}, 0xffff}, 0x90)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e21, @local}], 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r9=>0x0})
r10 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r10, &(0x7f0000000080)={0x1d, r9, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18)
r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x114, 0x114, 0x3, [@union={0x4, 0x4, 0x0, 0x5, 0x0, 0x7, [{0x9, 0x2, 0x9}, {0x8, 0x5, 0x7}, {0x0, 0x1, 0x1}, {0x2, 0x4, 0x2ee}]}, @volatile={0xa, 0x0, 0x0, 0x9, 0x2}, @enum64={0xb, 0x5, 0x0, 0x13, 0x0, 0x4, [{0x7, 0x84, 0x6}, {0x3, 0x2, 0xfffffff2}, {0x4, 0x8, 0x401}, {0x6, 0x0, 0x9}, {0x1, 0x3, 0xe}]}, @enum={0x8, 0x7, 0x0, 0x6, 0x4, [{0x1, 0xfffffffd}, {0xf, 0xffffffff}, {0x3, 0x5}, {0x5, 0x5}, {0x0, 0x8}, {0xc, 0x7}, {0xb, 0x7}]}, @var={0x5, 0x0, 0x0, 0xe, 0x5}, @typedef={0xb, 0x0, 0x0, 0x8, 0x4}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x8d2e, [{0x5, 0x1, 0x8}, {0xe, 0x2, 0x3}]}]}, {0x0, [0x0]}}, &(0x7f00000008c0)=""/200, 0x12f, 0xc8, 0x0, 0x9, 0x10000, @value=r5}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x5, 0x20, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_fd={0x18, 0x7, 0x1, 0x0, r2}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7b02b523}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000001}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='GPL\x00', 0x5, 0xc5, &(0x7f0000000680)=""/197, 0x40f00, 0x1d, '\x00', r9, 0x0, r11, 0x8, &(0x7f0000000a00)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000a40)=[{0x0, 0x4, 0x7, 0x4}], 0x10, 0x0, @void, @value}, 0x94)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r12, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r12, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100000, 0xa4, 0x0, 0x6, 0x40, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x1400, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="65830000001a040000000120"], 0x1c}}, 0x0)

1.375255793s ago: executing program 9 (id=3231):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r3, 0x0, 0x8}, 0x18)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x800100, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x40000000, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="f57517e5530ae89dffa506d28f3b", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf32(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604030003000000000000010000003e00000000000103000038000000000000010f000000000020000100040000000000000000000300000008000000f30000008100000004000000040000000c000000fc030000"], 0x58)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)

1.012904652s ago: executing program 3 (id=3234):
r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c80)=@o_path={&(0x7f0000000c40)='./file0\x00', 0x0, 0x4008}, 0x18)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00')
preadv(r1, &(0x7f0000000480)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1, 0x8, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d40)={{0xffffffffffffffff, <r2=>0xffffffffffffffff}, &(0x7f0000000cc0), &(0x7f0000000d00)}, 0x20)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x6e5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000e80)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x1a, 0x15, &(0x7f0000000800)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000950000000000000018620000010000000000000007000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000e8b4b4300008000000"], &(0x7f00000008c0)='GPL\x00', 0xbc7, 0x12, &(0x7f0000000900)=""/18, 0x41100, 0x4c, '\x00', 0x0, @tracing=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000b00)={0x0, 0x6, 0x6, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000ec0)=[r0, r1, r2, r3, 0x1, r4, r5], &(0x7f0000000f00)=[{0x1, 0x2, 0x8, 0x6}, {0x5, 0x4, 0xb, 0x3}, {0x4, 0x4, 0x8, 0x6}, {0x2, 0x4, 0x9}, {0x1, 0x1, 0x5, 0x3}, {0x0, 0x3, 0x7, 0x9}], 0x10, 0x3, @void, @value}, 0x94)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=<r7=>0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r9, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r11}, 0x10)
close(0xffffffffffffffff)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r12}, 0x10)
syz_emit_ethernet(0x3a, &(0x7f0000000680)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r13=>r10, {0x2}}, './file0\x00'})
sendmsg$NFQNL_MSG_CONFIG(r13, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x48, 0x2, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xcf}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x4, 0x2}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x11}}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0xb}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0xd}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x4004010)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r14=>0xffffffffffffffff})
r15 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0f00000004ec00000000000000000000000000000008f9deb33974e6e21e7600d76c51422aa40cee5cfbd18ba38bb7b77ba222b696f0f921e27235d99ef44fbe147ff9cfefe0a8d75e298c13dd8e4fb387e6f75d4850c86a81a8b3258eb728e9258a39db45082c0bf43dc1a1", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r15}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20)
recvmsg$unix(r14, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001780)=""/4071, 0xfe7}], 0x1}, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r16=>0xffffffffffffffff})
splice(r8, 0x0, r16, 0x0, 0xf3a, 0x0)
timer_settime(r7, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

969.421193ms ago: executing program 0 (id=3235):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
close(r0)
socket$netlink(0x10, 0x3, 0x0)
preadv(r1, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x4}], 0x3e8, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})

969.010062ms ago: executing program 9 (id=3236):
link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./file0\x00', 0x46940, 0x40)
write$binfmt_misc(r0, &(0x7f00000000c0)="086956dbc74abc88c2d7e15f57db337844401b438c180174d7d87d0a5ba4572382489589c9235310536b568cd66b75e6861aaa83c3bd3cb02b232a3c45fa9ee7493336b496b37545e75b872b7c8cfe4f17aff55065faa38b87c2cc3afda7fa9f07a21101cdf61a87b215b1c9ab46201ea3f01593f197cf0ae5bf3a38bd967c76d44bc84ef9798649c80bf7d4a17cebb99e1faf30e3e652d2f0f5f05c66daf89844005fe189f2b4c87f53045479322d6f61db1aef85e118e21eae499540bec5a63b1873af8f21a726b1ec1d7e85c2ce65a864cd8805f617ba85e8d3fe1e546d074a5af64467de96cbcecb6a94f4cd26007f", 0xf1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff})
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0)
r2 = openat(r0, &(0x7f0000000200)='./file0\x00', 0x410cc2, 0x80)
setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000240)=0x74, 0x4)
r3 = accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14, 0x80000)
recvfrom$packet(r3, &(0x7f0000000300)=""/10, 0xa, 0x21, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000340)={<r4=>0x0, @in={{0x2, 0x4e23, @empty}}, 0x10001, 0x21, 0x1, 0xff, 0x8, 0x7, 0x3}, &(0x7f0000000400)=0x9c)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000440)={r4, 0xfff7, 0x4, [0x6, 0x9a7b, 0x7, 0x7]}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000004c0)={{{@in6=@private1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@loopback}, 0x0, @in6}}, &(0x7f00000005c0)=0xe8)
newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x800)
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000006c0)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f00000007c0)=0xe8)
statx(r2, &(0x7f0000000800)='./file0\x00', 0x75d710fc7de57a0d, 0x400, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000940)={0x0, 0x0, <r9=>0x0}, &(0x7f0000000980)=0xc)
getresgid(&(0x7f00000009c0), &(0x7f0000000a00), &(0x7f0000000a40)=<r10=>0x0)
stat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0})
lstat(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000c40)=0xc)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000c80)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000cc0)=0xc)
getgroups(0x1, &(0x7f0000000d00)=[<r15=>0xee01])
lstat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0})
fsetxattr$system_posix_acl(r3, &(0x7f0000000480)='system.posix_acl_default\x00', &(0x7f0000000e00)={{}, {}, [{0x2, 0x3, r5}, {0x2, 0x4}, {0x2, 0x4, r6}, {}, {0x2, 0x91aa335c399346a9, r7}], {0x4, 0x2}, [{0x8, 0x2}, {0x8, 0xddb86b8559ade21b, r8}, {0x8, 0x5, r9}, {0x8, 0x1, r10}, {0x8, 0x7, r11}, {0x8, 0xa, r12}, {0x8, 0x0, r13}, {0x8, 0x4, r14}, {0x8, 0x6, r15}, {0x8, 0x2, r16}], {0x10, 0x2}, {0x20, 0x3}}, 0x9c, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000ec0)={0x3})
r17 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r17, 0x84, 0x14, &(0x7f0000000f00)=@assoc_value, &(0x7f0000000f40)=0x8)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000f80)=0x1)
setsockopt$MRT6_TABLE(r0, 0x29, 0xcf, &(0x7f0000000fc0)=0xfd, 0x4)
setxattr$security_capability(&(0x7f0000001000)='./file0\x00', &(0x7f0000001040), &(0x7f0000001080)=@v1={0x1000000, [{0x5, 0x7}]}, 0xc, 0x2)

967.661832ms ago: executing program 9 (id=3238):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='thermal_power_allocator_pid\x00', r1}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r2)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x7ffffc, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}}, 0x0)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000180)={'fscrypt:', @desc1}, &(0x7f0000000200)={0x0, "e1648f5e97daa777fed70f86c8e5c8477e5d6e1b449fdccd28a0538cfe29d1e3e21a63e6127748e2c0d3487385521b464db45744704087b7898cb7d938fd63dd", 0x1d}, 0x48, 0xfffffffffffffffa)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x335}, &(0x7f0000000080)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x12, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x400000, 0x40, 0x29}, &(0x7f0000000100)='./file0\x00', 0x30, 0x0, 0x12345})
prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='4\xb9\xdfs\x7f')
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAPCLR(r6, 0x4b68, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
syz_io_uring_complete(0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x7, 0x10001, 0x80000000, 0x1, 0xffffffffffffffff, 0x5798, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x804, &(0x7f0000000380), 0x1, 0x4ef, &(0x7f0000000b00)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)={0x44, r10, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xb2, @name2}]}, 0x44}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})

666.745972ms ago: executing program 6 (id=3240):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000050000000404"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%-010d \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x15, &(0x7f0000000180)={{r2}, 0x0, 0x0}, 0x20)

655.790261ms ago: executing program 9 (id=3241):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000000080102000000000000000000000000090001007379863000000000040004800600024000000000050003"], 0x34}}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r1 = semget$private(0x0, 0x6, 0x1)
semtimedop(r1, &(0x7f0000000000)=[{0x2, 0xfffa, 0x1800}], 0x1, 0x0)
semctl$SETVAL(r1, 0x4, 0x10, &(0x7f0000000040)=0x1)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRESHEX=0x0, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0)
r2 = socket$igmp6(0xa, 0x3, 0x2)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'batadv0\x00'})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000800000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYBLOB], 0x48)
r4 = socket(0x15, 0x5, 0x0)
getsockopt(r4, 0x200000000114, 0x2716, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9)
connect$netlink(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x5, 0xfffffffe, 0x10, @mcast1, @private0, 0x7800, 0x8000, 0xfffffff9, 0xfffffff1}})
socket$igmp(0x2, 0x3, 0x2)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000002c0)=0xe)
openat$random(0xffffffffffffff9c, &(0x7f0000000480), 0x680, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc2a02, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000400)=0x2)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0)
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)

608.750061ms ago: executing program 6 (id=3242):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3})
r0 = socket$tipc(0x1e, 0x5, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000002540), 0x242001, 0x0)
inotify_rm_watch(r3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)
renameat(0xffffffffffffffff, &(0x7f0000000500)='./file0/../file0\x00', 0xffffffffffffffff, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
r6 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20004080)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r8 = socket$qrtr(0x2a, 0x2, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)
pipe2(&(0x7f0000001cc0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x800)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYBLOB="2c756e616d653dd0"])
connect$bt_sco(r10, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
connect$qrtr(r8, 0x0, 0x0)
write(r8, 0x0, 0x0)
sendmsg$qrtr(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="783214ad88b75cb0cf01b08f9e73", 0xe}, {&(0x7f00000001c0)}], 0x2, &(0x7f0000000540)=[{0xb0, 0x118, 0x90fa, "faf041e8e93f1578b29ec2cf61ed14c3d922aa7132fd380c2530dbedcfc5371368cfc08a8dcd04ae8b18a330de0f2711ddd27763deae48a1f5ed3dc9191588996f2f8293b5ca31a4f244f40eb1686026b258b266088e84ab1cae9ccff2904f137f36c893b42f829a99d7fa15f87f3418e2253a9808684cd011aa4c85abf7eafa3a09542d1614148bdb7889368c16551bd1908c41e0cf54667d836590a0"}, {0xb8, 0x107, 0x2, "17b88e6f01869d23dcbf4ad2ec87200e607f31a1268e14f74e217a45738c3c49a8b59641da4ca0cacec38d2b7ff01077c99777888b883cce118ad1bb5aa02c9e0d07390020a001ca4171965a2490ec818b7640f42b0b0978f7f84fedcc83406f14ed2637be8635008ae929fd7240ee3a2b90abcf335ea9a22f1eafd38571c5992bc9be376cdc9454ba92b0c92e400a6eeeec0c764d9bd225e5634fa3e131f7cec16d5f575e"}, {0xc8, 0x105, 0x8, "7315a6022923ddacfc81a7b0978448f140620c7781c2b7ea58ff0ec58a92c631e66e02b962788b5c1115c1ca50eb392b06e853be7e214975fbdf5a19c46f1af61de7fce6422d5f2274f82482334719368a29b995124fa8126bbb40195d37ed7f640594a9bbe4efe2870ab21918ae26db244d4269c61ce667eac3aaccd6466336428cffc371861e0ab4cfd6efa1c0939e28d9f50e9b89d99ba8cb17c6020c4b0b7c20adda1db8e57aca0c1a47710c675f3ffa38"}, {0x30, 0x1, 0x6, "eeda47e5289fe10b93efa7fe12b225d5f39eff73ee97a698b4737a54c76968"}, {0x90, 0x1, 0x5, "ba8da3ea9e26fe3c559209843b96e0dc33cf1051ba96791b8f989d9fa5d26e03ef49b3a685401d766c7eeb7f3bd6de16f2a3e40fea7770211116f5efed251ab2a1c71269dce03dee7075798863f0f72c91a1e5aa85f14ce4a0045cabda98b38cd3b2d52292b2cc2b78a97ac803ab83121fef7287775a4bc6fc49b825c3909028"}], 0x2f0, 0x801}, 0x38)
r11 = dup2(r1, r2)
io_uring_register$IORING_REGISTER_EVENTFD(r11, 0x4, &(0x7f00000000c0)=r5, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10)
sendmsg$tipc(r6, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0)
r12 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r12, 0x4b40, 0x0)

551.186861ms ago: executing program 0 (id=3243):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xcf, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20001573"], 0xc4}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc020000210a"], 0x2cc}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_open_dev$usbfs(0x0, 0x76, 0x101301)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000791040000000000040000000000000009500000000000000fd7d5facf4d09c3d6fd1904adcf9c30fa7fe93d3cb1d168d671f"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x268, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0xffffffffffffffee, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x20040)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r4}, 0x18)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x11, @empty, 0x0, 0x0, 'lblcr\x00'}, 0x2c)

548.628231ms ago: executing program 6 (id=3244):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800080000000000700000007000000004000000050000000000000e0300000002000000000000000900000d000000000b000000050000000f000000010000000b0000000400000002000000040000000a000000030000000d000000020000000b0000000500000003000000020000000a000000030000000a0000000000000a00000000005f3000"], &(0x7f0000000340)=""/231, 0x8c, 0xe7, 0x1, 0x4, 0x0, @void, @value}, 0x28) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000640)={0x0, r1}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000, 0x21024, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={0xffffffffffffffff, r0}, 0xc)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0)
readv(r2, &(0x7f0000000300)=[{&(0x7f0000000440)=""/172, 0xac}, {0x0}], 0x2) (async)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) (async)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) (async)
bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={0xffffffffffffffff, r0}, 0xc) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="09000000030000000400010005", @ANYRES16], 0x48)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f0000000040)=""/146, 0x92, <r6=>0x0, &(0x7f0000000140)=""/49, 0x31}}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000000018010000786c6c2500000900000000000000f8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x19, 0x0, 0x7ffc0001}]})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000800)={'ip6gre0\x00', &(0x7f00000006c0)={'syztnl1\x00', <r8=>0x0, 0x29, 0x7, 0xb8, 0x3, 0x8, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x20, 0x6, 0x7f}})
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x60000000, 0xef5, 0x9, 0x20000, 0x1, 0x81, '\x00', r8, r2, 0x1, 0x1, 0x3, 0xc, @void, @value, @void, @value}, 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fcae68da850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) (async)
time(0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r7}, 0x10)

528.072282ms ago: executing program 0 (id=3245):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2}, 0x10)
syz_emit_ethernet(0x8a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaac4bc9cac968686dd600000000054060000000000000000000000ffff07000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50e2000090780000080a0000000000000000030a0000000000000000fe08f989e8e82b840502000b317275"], 0x0)
r3 = openat$incfs(r0, &(0x7f0000000080)='.pending_reads\x00', 0x246a41, 0x19)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r4, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @mcast1}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x2050}, 0x40004) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) (async)
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00<r\xe9\x9cD\x90\xce\xe1\xc5\x85=\\!\xbbQ\xde\xc3\xe3\x7f\xcf\x1f\x17G\xa6\x13\xae\x92 \x1c\xbf\xfa\xe8e\x8cD\"\xa3w')

452.537241ms ago: executing program 0 (id=3246):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x4, 0x8}, 0x11c0, 0x1, 0x7, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x4, 0x8}, 0x11c0, 0x1, 0x7, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) (async)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c08a, &(0x7f0000000380)={[{@shortname_mixed}, {@utf8}, {@fat=@dos1xfloppy}, {@uni_xlate}, {@uni_xlateno}, {@fat=@umask={'umask', 0x3d, 0xc}}, {@uni_xlateno}, {@fat=@flush}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@rodir}, {@fat=@discard}, {@rodir}, {@rodir}, {@fat=@usefree}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'default'}}]}, 0x6, 0x2c2, &(0x7f0000001640)="$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")
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000004c0)="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") (async)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000004c0)="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")
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001940)={0x1}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2, @void, @value}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001000000", @ANYRES32, @ANYBLOB="000000e43319000000000000100000010000000075a16a5d26074f8c6ce03fecaa20bf4fe8e122e7d4d7a878ecefa13b5882a7491b45ed2b7aec708882c155ce45912dc4904ef9f6d9eab770f3cec76b5e8dfe766e3e331499b5c63151a12156561adaa55855e1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x40000000000001}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000003000000050010000b00000001000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r2}, 0x38)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8) (async)
r3 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8)
name_to_handle_at(r3, &(0x7f0000000380)='\x00', 0x0, &(0x7f00000047c0), 0x1200)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
set_mempolicy(0x3, &(0x7f0000000000)=0x1, 0x4)
syz_open_procfs(0x0, &(0x7f0000000940)='net/psched\x00') (async)
syz_open_procfs(0x0, &(0x7f0000000940)='net/psched\x00')
mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x2, &(0x7f0000000580)={[{@usrquota_inode_hardlimit}, {@huge_within_size}, {@inode64}, {@noswap}], [{@dont_appraise}]})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000040)}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r5}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))

451.834461ms ago: executing program 9 (id=3247):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8b5, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000200)='mm_page_free\x00', r2, 0x0, 0x2}, 0x18)
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @random="0005d70000fe", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @remote, @dev, @remote}}}}, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r5, 0x1d, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r6=>0x0})
sendto$packet(r3, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, 0x0, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r10}, 0x10)
r11 = memfd_create(&(0x7f00000001c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb8<X\xfa\xdd\x8a6\xa1\x82\xf7r\xd8z\x85\x8do\xa5\xed\xd4\xbc8\xfb\x16\x8e\x8b-W\xd4\xc9\xbc\x94CR[Du8U^\xf2tl8\xfe\xd0\x94\xfe\xf5\x1c+\x00U\te\xfa6\xca\xb9\xb4Q\xd9\xee\r6\x861h{\xc7z\'F\xc7\x91\x06x\xe1`\xf1:\xbd+\xd5\f\xb2\xce\xa4\x06\x90\x90\x9b\x1d\xcaa\xf7\x8f\x9e\x80\x93\xafT\xdfl\xec\xc6\x8e\x96', 0x5)
fsetxattr$security_selinux(r11, 0x0, &(0x7f00000004c0)='system_u:object_r:hwdata_t:s0\x00', 0x1e, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r12}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRESOCT=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r13}, 0x10)
r14 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf32(r14, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x3, 0x0, 0x3, 0x0, 0x2, 0x3e, 0x0, 0x301, 0x38, 0x0, 0xf, 0x0, 0x20, 0x1, 0x4}, [{0x3, 0x8, 0xf3, 0x81, 0x4, 0x4, 0xc, 0x400}]}, 0x58)
close(r14)

450.540451ms ago: executing program 6 (id=3248):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000e80)='mmap_lock_acquire_returned\x00', r1}, 0x18)
io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x16, 0x20000002, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_pid(r3, &(0x7f0000000280), 0x12)
r4 = openat$cgroup_procs(r2, &(0x7f0000000bc0)='cgroup.procs\x00', 0x2, 0x0)
sendfile(r4, r4, 0x0, 0x8002)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
getpid() (async)
r5 = getpid()
process_vm_readv(r5, &(0x7f0000000880)=[{&(0x7f0000000580)=""/52, 0x34}, {&(0x7f00000005c0)=""/100, 0x64}, {&(0x7f00000006c0)=""/120, 0x78}, {&(0x7f0000000780)=""/1, 0x1}, {&(0x7f00000007c0)=""/133, 0x85}], 0x5, &(0x7f0000000b00)=[{&(0x7f0000000900)=""/101, 0x65}, {&(0x7f0000000980)=""/46, 0x2e}, {&(0x7f00000009c0)=""/28, 0x1c}, {&(0x7f0000000a00)=""/44, 0x2c}, {&(0x7f0000000a40)=""/136, 0x88}], 0x5, 0x0) (async)
process_vm_readv(r5, &(0x7f0000000880)=[{&(0x7f0000000580)=""/52, 0x34}, {&(0x7f00000005c0)=""/100, 0x64}, {&(0x7f00000006c0)=""/120, 0x78}, {&(0x7f0000000780)=""/1, 0x1}, {&(0x7f00000007c0)=""/133, 0x85}], 0x5, &(0x7f0000000b00)=[{&(0x7f0000000900)=""/101, 0x65}, {&(0x7f0000000980)=""/46, 0x2e}, {&(0x7f00000009c0)=""/28, 0x1c}, {&(0x7f0000000a00)=""/44, 0x2c}, {&(0x7f0000000a40)=""/136, 0x88}], 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='host1x_cdma_push_gather\x00', r7}, 0x18)
socket$key(0xf, 0x3, 0x2) (async)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x2, 0x9, 0xf8, 0x3, 0x2, 0x0, 0x70bd2c, 0x25dfdbfd}, 0x10}}, 0x2000) (async)
sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x2, 0x9, 0xf8, 0x3, 0x2, 0x0, 0x70bd2c, 0x25dfdbfd}, 0x10}}, 0x2000)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20010004, 0x0, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61b67ddb2fb68fcf19f7807076430a00010071756f7461"], 0xc8}}, 0x4040)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x700, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x700, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r10=>r2, {0x2}}, './file0\x00'})
getsockopt$TIPC_SRC_DROPPABLE(r10, 0x10f, 0x80, &(0x7f0000000380), &(0x7f0000000500)=0x4)
sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100000000000000000004"], 0x14}, 0x1, 0xfcffffff00000000}, 0x0) (async)
sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100000000000000000004"], 0x14}, 0x1, 0xfcffffff00000000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10)

371.059701ms ago: executing program 6 (id=3249):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf32(r3, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x3, 0x0, 0x3, 0x0, 0x2, 0x3e, 0x0, 0x301, 0x38, 0x0, 0xf, 0x0, 0x20, 0x1, 0x4}, [{0x3, 0x8, 0xf3, 0x81, 0x4, 0x4, 0xc, 0x400}]}, 0x58)
close(r3)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) (fail_nth: 3)

350.225301ms ago: executing program 0 (id=3250):
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000340)}, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1100, 0x1, 0x3, 0x5, 0x2, 0x8, 0x5d, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x30)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10)
timer_create(0x2, 0x0, &(0x7f0000000100))
timer_settime(0x0, 0x1, &(0x7f00000006c0)={{}, {0x0, 0x9}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xb, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r4, &(0x7f0000000240), 0x20000000}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r4, &(0x7f0000000100)}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="540200001700010000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x254}}, 0x0)

56.873491ms ago: executing program 9 (id=3251):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70], 0x1, 0x1e9, &(0x7f00000002c0)="$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")
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xd6}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b40)=@newtaction={0x488, 0x30, 0xffff, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x20000, 0x733f, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x10]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xe, 0xffffffffffffffff, 0x6, 0x80000004, 0x4, {0x5, 0x0, 0x8, 0x1, 0x7, 0x1f7}, {0x5, 0x0, 0x6, 0x800, 0xf0, 0x4}, 0x6, 0x82e, 0x9}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x201000, 0x0)
r4 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0)
fadvise64(r4, 0x7, 0x7ff, 0x5)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r5}, 0x10)
r6 = socket$igmp(0x2, 0x3, 0x2)
sendmmsg$inet(r6, &(0x7f0000004840)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0x9, 0x1, 0x0, [{@broadcast}]}]}}}], 0x20}}], 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)

56.409911ms ago: executing program 6 (id=3252):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@noinit_itable}, {@nobh}, {@acl}]}, 0x1, 0xb96, &(0x7f00000014c0)="$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")
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=<r0=>0x0)
ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x2, 0x5003) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x404080, 0x0)
setresuid(0x0, 0xee01, 0x0) (async)
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40086604, 0x0)

56.116191ms ago: executing program 1 (id=3253):
migrate_pages(0xffffffffffffffff, 0x8, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8000000, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="11e2000000000000000000000000000000000000e195f1d828761814493ec328052b2dcd731f5d53720631d5293ed5121fd637564f5b724f8b9df4f26eb518fd74cc6dbff6462727a04e1a13e522fd836834279e543f208cd2c53c0dc7d836a0e85757d45ced73cd0984bd88a61e2ac6443cb4708d0ac183320600000000000000e39ad49b795d000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) (async)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000200000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) (async)
rmdir(0x0) (async, rerun: 64)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async, rerun: 64)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
mknodat$null(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1000, 0x103)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64)
r7 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x1) (rerun: 64)
write$binfmt_elf32(r7, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03"], 0xd8) (async)
execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r9}, 0x10) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)

0s ago: executing program 0 (id=3254):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00')
pread64(r1, &(0x7f0000001600)=""/4103, 0x1007, 0x4b) (async)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)}], 0x1) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000cc0)=ANY=[@ANYRESOCT=r2], &(0x7f0000000d80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) (async)
times(0x0) (async, rerun: 32)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (async, rerun: 32)
socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) (async)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 64)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 32)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, @void, @value}, 0x94) (rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10)
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dc4a) (async)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) (async)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0x3, 0x2}, {0x9, 0x57}], 0xee01}, 0x18, 0x0) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000300)='GPL\x00', 0xc, 0xff8, &(0x7f0000001e00)=""/4088, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) (async, rerun: 64)
bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 64)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10)

kernel console output (not intermixed with test programs):

or (device loop9): ext4_do_update_inode:5153: inode #2: comm syz.9.2640: corrupted inode contents
[  193.567842][T15202] EXT4-fs error (device loop8): ext4_do_update_inode:5153: inode #2: comm syz.8.2639: corrupted inode contents
[  193.577015][T15199] EXT4-fs error (device loop9): ext4_do_update_inode:5153: inode #2: comm syz.9.2640: corrupted inode contents
[  193.595965][T15204] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2641'.
[  193.601928][T15199] EXT4-fs error (device loop9): ext4_dirty_inode:6041: inode #2: comm syz.9.2640: mark_inode_dirty error
[  193.616484][T15199] EXT4-fs error (device loop9): ext4_do_update_inode:5153: inode #2: comm syz.9.2640: corrupted inode contents
[  193.634508][T15199] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #2: comm syz.9.2640: mark_inode_dirty error
[  193.655015][T15199] EXT4-fs error (device loop9): ext4_do_update_inode:5153: inode #2: comm syz.9.2640: corrupted inode contents
[  193.670284][T15212] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2644'.
[  193.683897][T15199] EXT4-fs error (device loop9): ext4_dirty_inode:6041: inode #2: comm syz.9.2640: mark_inode_dirty error
[  193.709527][T15205] EXT4-fs error (device loop9): ext4_do_update_inode:5153: inode #2: comm syz.9.2640: corrupted inode contents
[  193.722713][T15216] pim6reg1: entered promiscuous mode
[  193.728053][T15216] pim6reg1: entered allmulticast mode
[  193.935937][T15253] block device autoloading is deprecated and will be removed.
[  193.943789][T15253] syz.3.2649: attempt to access beyond end of device
[  193.943789][T15253] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  194.087352][T15287] $H�: (slave bond_slave_0): Releasing backup interface
[  194.120934][T15292] loop3: detected capacity change from 0 to 512
[  194.127422][T15292] EXT4-fs: inline encryption not supported
[  194.134823][T15287] $H�: (slave bond_slave_1): Releasing backup interface
[  194.160365][T15292] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.2654: corrupted inode contents
[  194.173055][T15292] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #2: comm syz.3.2654: mark_inode_dirty error
[  194.188891][T15300] netlink: 'syz.4.2655': attribute type 3 has an invalid length.
[  194.196830][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  194.203758][T15300] IPv6: NLM_F_CREATE should be specified when creating new route
[  194.232260][T15292] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.2654: corrupted inode contents
[  194.252641][T15303] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.2654: corrupted inode contents
[  194.266295][T15303] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #2: comm syz.3.2654: mark_inode_dirty error
[  194.279589][T15306] tmpfs: Bad value for 'mpol'
[  194.289531][T15303] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.2654: corrupted inode contents
[  194.303508][T15303] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.2654: mark_inode_dirty error
[  194.315204][T15303] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.2654: corrupted inode contents
[  194.328023][T15303] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #2: comm syz.3.2654: mark_inode_dirty error
[  194.339921][T15292] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.2654: corrupted inode contents
[  194.355528][T15307] loop4: detected capacity change from 0 to 512
[  194.362020][T15307] journal_path: Non-blockdev passed as './file0'
[  194.368416][T15307] EXT4-fs: error: could not find journal device path
[  194.380193][T15309] loop4: detected capacity change from 0 to 512
[  194.387058][T15309] journal_path: Non-blockdev passed as './file0'
[  194.393510][T15309] EXT4-fs: error: could not find journal device path
[  194.418676][T15311] loop3: detected capacity change from 0 to 128
[  194.473338][T15314] loop8: detected capacity change from 0 to 128
[  194.481614][T15314] 9pnet_fd: Insufficient options for proto=fd
[  194.535512][T15317] loop3: detected capacity change from 0 to 8192
[  194.547703][T15319] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2660'.
[  194.575828][T15323] loop0: detected capacity change from 0 to 512
[  194.582622][T15323] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  194.684130][T15333] loop9: detected capacity change from 0 to 512
[  194.706334][T15333] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002]
[  194.714793][T15333] EXT4-fs (loop9): orphan cleanup on readonly fs
[  194.735601][T15333] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2664: bg 0: block 328: padding at end of block bitmap is not set
[  194.763027][T15333] EXT4-fs (loop9): Remounting filesystem read-only
[  194.772123][T15347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2583 sclass=netlink_route_socket pid=15347 comm=syz.3.2665
[  194.786773][T15333] EXT4-fs (loop9): 1 orphan inode deleted
[  194.795213][T15333] SELinux: (dev loop9, type ext4) getxattr errno 5
[  194.861582][T15355] loop9: detected capacity change from 0 to 512
[  194.871000][T15355] EXT4-fs: inline encryption not supported
[  194.897861][T15355] EXT4-fs error (device loop9): ext4_do_update_inode:5153: inode #2: comm syz.9.2666: corrupted inode contents
[  194.936330][T15355] EXT4-fs error (device loop9): ext4_dirty_inode:6041: inode #2: comm syz.9.2666: mark_inode_dirty error
[  194.973737][T15355] EXT4-fs error (device loop9): ext4_do_update_inode:5153: inode #2: comm syz.9.2666: corrupted inode contents
[  195.020349][T15372] EXT4-fs error (device loop9): ext4_do_update_inode:5153: inode #2: comm syz.9.2666: corrupted inode contents
[  195.119429][T15383] geneve0: entered allmulticast mode
[  195.136986][T15383] netlink: 3 bytes leftover after parsing attributes in process `syz.9.2669'.
[  195.146506][T15383] 1�X���: renamed from 60�X���
[  195.154523][T15383] A link change request failed with some changes committed already. Interface 61�X��� may have been left with an inconsistent configuration, please check.
[  195.209432][T15394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  195.227365][T15395] netlink: 'syz.3.2670': attribute type 1 has an invalid length.
[  195.229580][T15394] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  195.248443][T15395] smc: net device bond0 applied user defined pnetid SYZ0
[  195.262618][T15395] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2670'.
[  195.274795][T15395] smc: net device bond0 erased user defined pnetid SYZ0
[  195.296191][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  195.519195][T15419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  195.527732][T15419] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  195.922043][T15429] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2682'.
[  196.072595][T15441] tmpfs: Unknown parameter 'mpo�'
[  196.295619][T15460] netlink: 'syz.3.2692': attribute type 4 has an invalid length.
[  196.319214][T15460] netlink: 'syz.3.2692': attribute type 4 has an invalid length.
[  196.336847][T15458] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  196.338926][T15460] loop3: detected capacity change from 0 to 512
[  196.360300][T15462] pim6reg1: entered promiscuous mode
[  196.365667][T15462] pim6reg1: entered allmulticast mode
[  196.368883][T15458] loop0: detected capacity change from 0 to 512
[  196.383116][T15458] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  196.399733][T15458] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal
[  196.418681][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  196.526919][T15470] loop0: detected capacity change from 0 to 512
[  196.642756][T15479] loop9: detected capacity change from 0 to 2048
[  196.668821][T15479] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  196.792492][T15491] loop3: detected capacity change from 0 to 512
[  196.799194][T15491] EXT4-fs: inline encryption not supported
[  196.830015][T15491] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.2700: corrupted inode contents
[  196.842008][T15491] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #2: comm syz.3.2700: mark_inode_dirty error
[  196.853751][T15491] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.2700: corrupted inode contents
[  196.868884][T15491] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.2700: corrupted inode contents
[  196.881738][T15491] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #2: comm syz.3.2700: mark_inode_dirty error
[  196.893995][T15491] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.2700: corrupted inode contents
[  196.906869][T15491] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.2700: mark_inode_dirty error
[  196.920233][T15491] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.2700: corrupted inode contents
[  196.935213][T15491] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #2: comm syz.3.2700: mark_inode_dirty error
[  196.937561][T15495] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  196.950221][T15491] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.2700: corrupted inode contents
[  197.033194][T15500] batman_adv: batadv0: Adding interface: dummy0
[  197.039681][T15500] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.064960][T15500] batman_adv: batadv0: Interface activated: dummy0
[  197.135415][T15503] loop3: detected capacity change from 0 to 128
[  197.215356][T15504] loop8: detected capacity change from 0 to 2048
[  197.247540][T15511] loop3: detected capacity change from 0 to 2048
[  197.272645][T15511] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28
[  197.285073][T15511] EXT4-fs (loop3): This should not happen!! Data will be lost
[  197.285073][T15511] 
[  197.294726][T15511] EXT4-fs (loop3): Total free blocks count 0
[  197.300741][T15511] EXT4-fs (loop3): Free/Dirty block details
[  197.306682][T15511] EXT4-fs (loop3): free_blocks=0
[  197.311616][T15511] EXT4-fs (loop3): dirty_blocks=0
[  197.316661][T15511] EXT4-fs (loop3): Block reservation details
[  197.322756][T15511] EXT4-fs (loop3): i_reserved_data_blocks=0
[  197.405660][T12862] EXT4-fs unmount: 40 callbacks suppressed
[  197.405712][T12862] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.488816][T15516] xt_hashlimit: overflow, try lower: 18446744073709551615/7
[  197.519851][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  197.550590][T12330] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.612443][T15528] loop0: detected capacity change from 0 to 512
[  197.630088][T15528] EXT4-fs: inline encryption not supported
[  197.653679][T15528] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.687698][T15532] lo speed is unknown, defaulting to 1000
[  197.711154][T15528] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #2: comm syz.0.2712: corrupted inode contents
[  197.742535][T15528] EXT4-fs error (device loop0): ext4_dirty_inode:6041: inode #2: comm syz.0.2712: mark_inode_dirty error
[  197.783359][T15528] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #2: comm syz.0.2712: corrupted inode contents
[  197.784617][T15532] erspan0 speed is unknown, defaulting to 1000
[  197.807290][T15546] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #2: comm syz.0.2712: corrupted inode contents
[  197.853758][T12862] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.968886][   T29] kauditd_printk_skb: 671 callbacks suppressed
[  197.968929][   T29] audit: type=1400 audit(187.886:21224): avc:  denied  { create } for  pid=15568 comm="syz.3.2717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  198.023424][   T29] audit: type=1400 audit(187.895:21225): avc:  denied  { bind } for  pid=15568 comm="syz.3.2717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  198.042818][   T29] audit: type=1400 audit(187.895:21226): avc:  denied  { listen } for  pid=15568 comm="syz.3.2717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  198.062521][   T29] audit: type=1400 audit(187.895:21227): avc:  denied  { accept } for  pid=15568 comm="syz.3.2717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  198.069328][T15569] loop3: detected capacity change from 0 to 2048
[  198.082434][   T29] audit: type=1400 audit(187.895:21228): avc:  denied  { remove_name } for  pid=10579 comm="syz-executor" name="lost+found" dev="loop8" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  198.111300][   T29] audit: type=1400 audit(187.895:21229): avc:  denied  { rmdir } for  pid=10579 comm="syz-executor" name="lost+found" dev="loop8" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  198.133705][   T29] audit: type=1400 audit(187.895:21230): avc:  denied  { unmount } for  pid=10579 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  198.143646][T15585] loop0: detected capacity change from 0 to 128
[  198.153339][   T29] audit: type=1400 audit(187.923:21231): avc:  denied  { unlink } for  pid=10579 comm="syz-executor" name="file0" dev="loop8" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  198.164209][T15585] syz.0.2721[15585] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  198.181591][   T29] audit: type=1400 audit(187.923:21232): avc:  denied  { unlink } for  pid=10579 comm="syz-executor" name="file1" dev="loop8" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[  198.181620][   T29] audit: type=1400 audit(187.932:21233): avc:  denied  { append } for  pid=15573 comm="syz.0.2719" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  198.193517][T14373] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.215488][T15585] syz.0.2721[15585] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  198.249349][T15585] syz.0.2721[15585] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  198.249639][T15589] tipc: Started in network mode
[  198.270442][T15569] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.272225][T15589] tipc: Node identity ac14140f, cluster identity 4711
[  198.296794][T15589] tipc: New replicast peer: 10.1.1.2
[  198.302125][T15589] tipc: Enabled bearer <udp:syz0>, priority 10
[  198.339842][T15595] smc: net device bond0 applied user defined pnetid SYZ0
[  198.347152][T15595] __nla_validate_parse: 7 callbacks suppressed
[  198.347192][T15595] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2722'.
[  198.363817][T15595] smc: net device bond0 erased user defined pnetid SYZ0
[  198.372579][T15597] pim6reg1: entered promiscuous mode
[  198.377947][T15597] pim6reg1: entered allmulticast mode
[  198.394856][T15599] loop0: detected capacity change from 0 to 512
[  198.401419][T15599] EXT4-fs: Ignoring removed orlov option
[  198.407443][T15599] EXT4-fs: Mount option(s) incompatible with ext2
[  198.465256][T15601] netlink: zone id is out of range
[  198.470382][T15601] netlink: zone id is out of range
[  198.475594][T15601] netlink: zone id is out of range
[  198.480720][T15601] netlink: zone id is out of range
[  198.485851][T15601] netlink: zone id is out of range
[  198.491065][T15601] netlink: zone id is out of range
[  198.496199][T15601] netlink: zone id is out of range
[  198.501309][T15601] netlink: zone id is out of range
[  198.510865][ T3924] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.540549][T15599] Process accounting resumed
[  198.545191][T15599] kernel write not supported for file /asound/timers (pid: 15599 comm: syz.0.2724)
[  198.579180][T15609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2729'.
[  198.600971][ T3924] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.626594][T15609] kernel write not supported for file /asound/timers (pid: 15609 comm: syz.0.2729)
[  198.645354][ T3924] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.672434][T15605] lo speed is unknown, defaulting to 1000
[  198.679630][T15623] kernel write not supported for file /asound/timers (pid: 15623 comm: syz.0.2731)
[  198.697402][T15627] syz.0.2732[15627] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  198.697505][T15627] syz.0.2732[15627] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  198.709269][T15627] syz.0.2732[15627] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  198.710035][ T3924] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.739432][T15626] kernel write not supported for file /asound/timers (pid: 15626 comm: syz.0.2732)
[  198.760961][T15605] erspan0 speed is unknown, defaulting to 1000
[  198.793109][T15635] pim6reg1: entered promiscuous mode
[  198.794936][T15637] kernel write not supported for file /asound/timers (pid: 15637 comm: syz.0.2733)
[  198.798583][T15635] pim6reg1: entered allmulticast mode
[  198.837261][T15639] smc: net device bond0 applied user defined pnetid SYZ0
[  198.844631][T15639] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2735'.
[  198.853872][T15639] smc: net device bond0 erased user defined pnetid SYZ0
[  198.863063][T15605] chnl_net:caif_netlink_parms(): no params data found
[  198.878951][T12330] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.896356][T15639] kernel write not supported for file /asound/timers (pid: 15639 comm: syz.0.2735)
[  198.914282][T15645] loop4: detected capacity change from 0 to 512
[  198.920857][T15645] EXT4-fs: Ignoring removed bh option
[  198.926663][T15645] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  198.928037][T15649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  198.938206][ T3924] bridge_slave_1: left allmulticast mode
[  198.949841][ T3924] bridge_slave_1: left promiscuous mode
[  198.955693][ T3924] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.963148][T15649] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  198.971485][ T3924] bridge_slave_0: left allmulticast mode
[  198.977265][ T3924] bridge_slave_0: left promiscuous mode
[  198.978820][T15645] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.983022][ T3924] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.010991][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.035689][T15653] loop3: detected capacity change from 0 to 1024
[  199.058994][T15653] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.075338][T15653] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.125526][ T3924] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  199.135347][ T3924] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  199.144939][ T3924] bond0 (unregistering): Released all slaves
[  199.153433][ T3924] bond1 (unregistering): Released all slaves
[  199.197096][T15605] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.204381][T15605] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.211764][T15605] bridge_slave_0: entered allmulticast mode
[  199.218701][T15605] bridge_slave_0: entered promiscuous mode
[  199.225362][T15605] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.232518][T15605] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.241103][T15605] bridge_slave_1: entered allmulticast mode
[  199.247950][T15605] bridge_slave_1: entered promiscuous mode
[  199.254298][T15662] lo speed is unknown, defaulting to 1000
[  199.261048][T15663] lo speed is unknown, defaulting to 1000
[  199.269911][T15605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  199.285687][T15605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  199.313281][T15605] team0: Port device team_slave_0 added
[  199.320784][T15605] team0: Port device team_slave_1 added
[  199.326576][T15662] erspan0 speed is unknown, defaulting to 1000
[  199.348882][T15605] batman_adv: batadv0: Adding interface: batadv_slave_0
[  199.355918][T15605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.381871][T15605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  199.400662][T15663] erspan0 speed is unknown, defaulting to 1000
[  199.402474][T15605] batman_adv: batadv0: Adding interface: batadv_slave_1
[  199.413782][T15605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.439670][T15605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  199.458852][ T3924] hsr_slave_0: left promiscuous mode
[  199.464536][ T3924] hsr_slave_1: left promiscuous mode
[  199.470300][ T3924] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  199.477779][ T3924] batman_adv: batadv0: Removing interface: batadv_slave_0
[  199.485356][ T3924] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  199.492812][ T3924] batman_adv: batadv0: Removing interface: batadv_slave_1
[  199.497608][ T3361] tipc: Node number set to 2886997007
[  199.504656][ T3924] veth0_macvtap: left promiscuous mode
[  199.513741][ T3924] veth1_vlan: left promiscuous mode
[  199.513763][ T3924] veth0_vlan: left promiscuous mode
[  199.546331][T15677] loop3: detected capacity change from 0 to 512
[  199.555805][T15677] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2746: bg 0: block 288: padding at end of block bitmap is not set
[  199.570383][T15677] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  199.579847][T15648] kernel write not supported for file /asound/timers (pid: 15648 comm: syz.0.2739)
[  199.580798][T15677] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.2746: attempt to clear invalid blocks 1024 len 1
[  199.608654][T15677] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2746: invalid indirect mapped block 1819239214 (level 0)
[  199.638548][T15679] kernel write not supported for file /asound/timers (pid: 15679 comm: syz.0.2747)
[  199.640755][T15677] EXT4-fs (loop3): 1 truncate cleaned up
[  199.655473][T15677] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  199.677065][T15682] kernel write not supported for file /asound/timers (pid: 15682 comm: syz.0.2748)
[  199.694764][T15685] loop0: detected capacity change from 0 to 128
[  199.720059][T15605] hsr_slave_0: entered promiscuous mode
[  199.726491][T15605] hsr_slave_1: entered promiscuous mode
[  199.734574][T15605] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  199.742250][T15605] Cannot create hsr debugfs directory
[  199.801816][T15684] kernel write not supported for file /asound/timers (pid: 15684 comm: syz.0.2749)
[  199.867727][T12330] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.888526][T15694] loop3: detected capacity change from 0 to 512
[  199.895135][T15694] EXT4-fs: inline encryption not supported
[  199.905845][T15694] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.920231][T15694] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.2751: corrupted inode contents
[  199.932173][T15694] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #2: comm syz.3.2751: mark_inode_dirty error
[  199.943787][T15694] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.2751: corrupted inode contents
[  199.957124][T15694] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.2751: corrupted inode contents
[  199.986932][T12330] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.036360][T15708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  200.044955][T15708] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  200.163574][T15605] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  200.172101][T15605] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  200.180746][T15605] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  200.189453][T15605] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  200.226801][T15605] 8021q: adding VLAN 0 to HW filter on device bond0
[  200.239274][T15605] 8021q: adding VLAN 0 to HW filter on device team0
[  200.250106][   T47] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.257353][   T47] bridge0: port 1(bridge_slave_0) entered forwarding state
[  200.268203][ T3925] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.275333][ T3925] bridge0: port 2(bridge_slave_1) entered forwarding state
[  200.336701][T15605] 8021q: adding VLAN 0 to HW filter on device batadv0
[  200.442160][T15605] veth0_vlan: entered promiscuous mode
[  200.452290][T10861] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.453681][T15605] veth1_vlan: entered promiscuous mode
[  200.475032][T15605] veth0_macvtap: entered promiscuous mode
[  200.482309][T15605] veth1_macvtap: entered promiscuous mode
[  200.494768][T15605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  200.505318][T15605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  200.515185][T15605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  200.525624][T15605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  200.535461][T15605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  200.545894][T15605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  200.556831][T15605] batman_adv: batadv0: Interface activated: batadv_slave_0
[  200.566757][T15605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  200.577199][T15605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  200.587021][T15605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  200.597499][T15605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  200.607341][T15605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  200.617772][T15605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  200.628493][T15605] batman_adv: batadv0: Interface activated: batadv_slave_1
[  200.639463][T15734] lo speed is unknown, defaulting to 1000
[  200.639990][T15605] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  200.654243][T15605] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  200.663088][T15605] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  200.671785][T15605] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  200.724810][T15734] erspan0 speed is unknown, defaulting to 1000
[  200.801536][T15752] loop9: detected capacity change from 0 to 512
[  200.809129][T15752] EXT4-fs: inline encryption not supported
[  200.825982][T15752] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.840492][T15752] EXT4-fs error (device loop9): ext4_do_update_inode:5153: inode #2: comm syz.9.2763: corrupted inode contents
[  200.857250][T15752] EXT4-fs error (device loop9): ext4_dirty_inode:6041: inode #2: comm syz.9.2763: mark_inode_dirty error
[  200.873224][T15752] EXT4-fs error (device loop9): ext4_do_update_inode:5153: inode #2: comm syz.9.2763: corrupted inode contents
[  200.887066][T15752] EXT4-fs error (device loop9): ext4_do_update_inode:5153: inode #2: comm syz.9.2763: corrupted inode contents
[  200.896500][T15758] IPv6: NLM_F_CREATE should be specified when creating new route
[  200.908415][T15758] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2764'.
[  200.917377][T15758] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2764'.
[  200.930046][T15758] vti0: entered allmulticast mode
[  200.993362][T10861] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.096702][T15766] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.104096][T15766] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.161896][T15766] batman_adv: batadv0: Interface deactivated: dummy0
[  201.171852][T15776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  201.196574][T15776] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  201.319561][T15766] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  201.362746][T15766] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  201.466202][T15766] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.475179][T15766] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.484186][T15766] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.493117][T15766] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.665405][T15792] netlink: 664 bytes leftover after parsing attributes in process `syz.3.2770'.
[  201.718166][T15770] IPVS: starting estimator thread 0...
[  201.756860][T15796] bridge2: entered allmulticast mode
[  201.818585][T15794] IPVS: using max 2640 ests per chain, 132000 per kthread
[  201.865956][T15798] loop6: detected capacity change from 0 to 8192
[  201.955206][T15798] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.967139][    C1] net_ratelimit: 95 callbacks suppressed
[  201.967156][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  202.037774][T15798] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.730659][T15807] netlink: 'syz.3.2775': attribute type 4 has an invalid length.
[  202.778318][T15809] FAULT_INJECTION: forcing a failure.
[  202.778318][T15809] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  202.791561][T15809] CPU: 0 UID: 0 PID: 15809 Comm: syz.3.2776 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0
[  202.802369][T15809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  202.812430][T15809] Call Trace:
[  202.815723][T15809]  <TASK>
[  202.818717][T15809]  dump_stack_lvl+0xf2/0x150
[  202.823449][T15809]  dump_stack+0x15/0x1a
[  202.827683][T15809]  should_fail_ex+0x223/0x230
[  202.832370][T15809]  should_fail+0xb/0x10
[  202.836574][T15809]  should_fail_usercopy+0x1a/0x20
[  202.841610][T15809]  _copy_from_user+0x1e/0xb0
[  202.846206][T15809]  copy_msghdr_from_user+0x54/0x2a0
[  202.851420][T15809]  ? __fget_files+0x17c/0x1c0
[  202.856195][T15809]  __sys_sendmsg+0x13e/0x230
[  202.860802][T15809]  __x64_sys_sendmsg+0x46/0x50
[  202.865648][T15809]  x64_sys_call+0x2734/0x2dc0
[  202.870387][T15809]  do_syscall_64+0xc9/0x1c0
[  202.874908][T15809]  ? clear_bhb_loop+0x55/0xb0
[  202.879626][T15809]  ? clear_bhb_loop+0x55/0xb0
[  202.884355][T15809]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.890258][T15809] RIP: 0033:0x7fa531d55d29
[  202.894724][T15809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  202.914343][T15809] RSP: 002b:00007fa5303c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  202.922790][T15809] RAX: ffffffffffffffda RBX: 00007fa531f45fa0 RCX: 00007fa531d55d29
[  202.930843][T15809] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000006
[  202.938822][T15809] RBP: 00007fa5303c1090 R08: 0000000000000000 R09: 0000000000000000
[  202.946872][T15809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  202.954855][T15809] R13: 0000000000000000 R14: 00007fa531f45fa0 R15: 00007ffdbf848278
[  202.962610][T15815] netlink: 'syz.4.2779': attribute type 4 has an invalid length.
[  202.962826][T15809]  </TASK>
[  202.985396][T15817] program syz.9.2780 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  203.001669][T15817] loop9: detected capacity change from 0 to 1024
[  203.008267][T15817] EXT4-fs: Ignoring removed nomblk_io_submit option
[  203.016042][T15817] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  203.026821][T15817] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854e01c, mo2=0003]
[  203.037530][T15817] System zones: 0-1, 3-36
[  203.039302][T15828] loop3: detected capacity change from 0 to 512
[  203.049081][T15817] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.052487][T15828] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[  203.062939][T15828] EXT4-fs: failed to create workqueue
[  203.077776][T15828] EXT4-fs (loop3): mount failed
[  203.082706][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  203.168127][T15846] Cannot find del_set index 1 as target
[  203.175571][T10861] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.203631][T15851] loop4: detected capacity change from 0 to 512
[  203.240183][T15855] netlink: zone id is out of range
[  203.245351][T15855] netlink: zone id is out of range
[  203.250569][T15855] netlink: zone id is out of range
[  203.255711][T15855] netlink: zone id is out of range
[  203.260844][T15855] netlink: zone id is out of range
[  203.265981][T15855] netlink: zone id is out of range
[  203.271160][T15855] netlink: zone id is out of range
[  203.276286][T15855] netlink: zone id is out of range
[  203.330181][T15863] FAULT_INJECTION: forcing a failure.
[  203.330181][T15863] name failslab, interval 1, probability 0, space 0, times 0
[  203.342966][T15863] CPU: 0 UID: 0 PID: 15863 Comm: syz.9.2795 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0
[  203.353746][T15863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  203.363825][T15863] Call Trace:
[  203.367169][T15863]  <TASK>
[  203.370169][T15863]  dump_stack_lvl+0xf2/0x150
[  203.374864][T15863]  dump_stack+0x15/0x1a
[  203.379035][T15863]  should_fail_ex+0x223/0x230
[  203.383759][T15863]  should_failslab+0x8f/0xb0
[  203.388421][T15863]  kmem_cache_alloc_node_noprof+0x59/0x320
[  203.394365][T15863]  ? __alloc_skb+0x10b/0x310
[  203.398960][T15863]  __alloc_skb+0x10b/0x310
[  203.403426][T15863]  netlink_alloc_large_skb+0xad/0xe0
[  203.408726][T15863]  netlink_sendmsg+0x3b4/0x6e0
[  203.413508][T15863]  ? __pfx_netlink_sendmsg+0x10/0x10
[  203.418798][T15863]  __sock_sendmsg+0x140/0x180
[  203.423483][T15863]  ____sys_sendmsg+0x312/0x410
[  203.428300][T15863]  __sys_sendmsg+0x19d/0x230
[  203.432949][T15863]  __x64_sys_sendmsg+0x46/0x50
[  203.437710][T15863]  x64_sys_call+0x2734/0x2dc0
[  203.442475][T15863]  do_syscall_64+0xc9/0x1c0
[  203.446987][T15863]  ? clear_bhb_loop+0x55/0xb0
[  203.451689][T15863]  ? clear_bhb_loop+0x55/0xb0
[  203.456361][T15863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.462267][T15863] RIP: 0033:0x7faa21965d29
[  203.466675][T15863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  203.486322][T15863] RSP: 002b:00007faa1ffd1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  203.494760][T15863] RAX: ffffffffffffffda RBX: 00007faa21b55fa0 RCX: 00007faa21965d29
[  203.502726][T15863] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000006
[  203.510759][T15863] RBP: 00007faa1ffd1090 R08: 0000000000000000 R09: 0000000000000000
[  203.518735][T15863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  203.526702][T15863] R13: 0000000000000000 R14: 00007faa21b55fa0 R15: 00007ffee3c59758
[  203.534756][T15863]  </TASK>
[  203.604400][T15865] netlink: 'syz.4.2796': attribute type 4 has an invalid length.
[  203.633439][   T29] kauditd_printk_skb: 100 callbacks suppressed
[  203.633453][   T29] audit: type=1400 audit(193.189:21334): avc:  denied  { read } for  pid=15867 comm="syz.9.2797" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  203.662691][   T29] audit: type=1400 audit(193.189:21335): avc:  denied  { open } for  pid=15867 comm="syz.9.2797" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  203.716831][T15873] loop4: detected capacity change from 0 to 512
[  203.726383][T15873] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  203.736588][   T29] audit: type=1326 audit(193.245:21336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15867 comm="syz.9.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa21965d29 code=0x7ffc0000
[  203.759662][   T29] audit: type=1326 audit(193.245:21337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15867 comm="syz.9.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7faa21965d29 code=0x7ffc0000
[  203.782788][   T29] audit: type=1326 audit(193.245:21338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15867 comm="syz.9.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa21965d29 code=0x7ffc0000
[  203.805806][   T29] audit: type=1326 audit(193.245:21339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15867 comm="syz.9.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa21965d29 code=0x7ffc0000
[  203.820422][T15873] EXT4-fs (loop4): 1 truncate cleaned up
[  203.846563][T15873] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.867371][T15883] netlink: 'syz.9.2800': attribute type 1 has an invalid length.
[  203.886490][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.939115][T15889] netlink: 'syz.9.2804': attribute type 3 has an invalid length.
[  203.949804][T15889] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2804'.
[  203.958857][T15889] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2804'.
[  203.967848][T15889] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2804'.
[  203.986867][T15834] warn_unsupported: 1 callbacks suppressed
[  203.986881][T15834] kernel write not supported for file /asound/timers (pid: 15834 comm: syz.0.2785)
[  204.029127][T15894] kernel write not supported for file /asound/timers (pid: 15894 comm: syz.0.2805)
[  204.039511][T15889] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2804'.
[  204.048680][T15889] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2804'.
[  204.057762][T15889] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2804'.
[  204.115076][   T29] audit: type=1400 audit(193.638:21340): avc:  denied  { create } for  pid=15896 comm="syz.0.2806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  204.121570][T15898] kernel write not supported for file /asound/timers (pid: 15898 comm: syz.0.2806)
[  204.134317][   T29] audit: type=1400 audit(193.638:21341): avc:  denied  { bind } for  pid=15896 comm="syz.0.2806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  204.156186][T15905] loop0: detected capacity change from 0 to 512
[  204.169562][T15905] EXT4-fs: inline encryption not supported
[  204.173525][T15902] loop3: detected capacity change from 0 to 512
[  204.181776][T15889] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2804'.
[  204.190801][T15889] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2804'.
[  204.199741][T15889] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2804'.
[  204.209772][T15902] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  204.220901][T15905] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  204.240185][T15905] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #2: comm syz.0.2808: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  204.255334][T15902] EXT4-fs (loop3): 1 truncate cleaned up
[  204.263945][T15902] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  204.278345][T15905] kernel write not supported for file /asound/timers (pid: 15905 comm: syz.0.2808)
[  204.289362][   T29] audit: type=1400 audit(193.797:21342): avc:  denied  { mount } for  pid=15901 comm="syz.3.2807" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  204.318201][T12862] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.319065][   T29] audit: type=1400 audit(193.825:21343): avc:  denied  { setattr } for  pid=15901 comm="syz.3.2807" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  204.369032][T15916] loop4: detected capacity change from 0 to 4096
[  204.377954][T15919] loop9: detected capacity change from 0 to 512
[  204.384477][T15919] EXT4-fs: Ignoring removed orlov option
[  204.385372][T15921] loop0: detected capacity change from 0 to 128
[  204.390355][T15919] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  204.410913][T15916] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  204.411038][T15921] kernel write not supported for file /asound/timers (pid: 15921 comm: syz.0.2810)
[  204.428008][T12330] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.440052][T15919] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  204.456976][T15926] pimreg: entered allmulticast mode
[  204.462942][T15926] pimreg: left allmulticast mode
[  204.486603][T10861] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.509945][T15934] pim6reg1: entered promiscuous mode
[  204.515426][T15934] pim6reg1: entered allmulticast mode
[  204.534964][T15936] netlink: 664 bytes leftover after parsing attributes in process `syz.9.2815'.
[  204.535602][T15798] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.556412][T15926] kernel write not supported for file /asound/timers (pid: 15926 comm: syz.0.2814)
[  204.574460][T15939] loop0: detected capacity change from 0 to 128
[  204.583594][T15939] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  204.596816][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.637233][T15946] loop4: detected capacity change from 0 to 512
[  204.640384][T15944] lo speed is unknown, defaulting to 1000
[  204.644609][T15946] EXT4-fs: inline encryption not supported
[  204.658419][T15947] loop3: detected capacity change from 0 to 256
[  204.665681][T15947] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  204.677716][T15944] erspan0 speed is unknown, defaulting to 1000
[  204.679839][T15947] smc: net device bond0 applied user defined pnetid SYZ0
[  204.689393][T15946] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  204.692324][T15947] smc: net device bond0 erased user defined pnetid SYZ0
[  204.726664][T15946] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #2: comm syz.4.2817: corrupted inode contents
[  204.745673][T15946] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #2: comm syz.4.2817: mark_inode_dirty error
[  204.764949][T15946] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #2: comm syz.4.2817: corrupted inode contents
[  204.777764][T15946] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #2: comm syz.4.2817: corrupted inode contents
[  204.800798][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.830506][T15969] loop4: detected capacity change from 0 to 512
[  204.839966][T15969] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002]
[  204.849339][T15969] System zones: 1-12
[  204.849775][T15971] loop9: detected capacity change from 0 to 512
[  204.853610][T15969] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.2825: corrupted in-inode xattr: invalid ea_ino
[  204.874102][T15969] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.2825: couldn't read orphan inode 15 (err -117)
[  204.887932][T15969] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  204.910518][T15971] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  204.934413][ T3308] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[  204.991570][ T3308] EXT4-fs error (device loop4): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 15
[  205.005126][ T3308] EXT4-fs error (device loop4): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 15
[  205.054140][ T3997] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.095307][T10861] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.114959][T15985] program syz.9.2828 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  205.262110][T15798] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.311063][T15994] lo speed is unknown, defaulting to 1000
[  205.325633][T15798] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  205.340643][T15798] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  205.351822][T15994] erspan0 speed is unknown, defaulting to 1000
[  205.361123][T15798] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  205.368439][T16016] loop9: detected capacity change from 0 to 512
[  205.375757][T16016] EXT4-fs: inline encryption not supported
[  205.386791][T15798] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  205.401788][T16016] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  205.420311][T16016] EXT4-fs error (device loop9): ext4_ext_check_inode:524: inode #2: comm syz.9.2838: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  205.459830][T16021] netlink: 'syz.6.2839': attribute type 9 has an invalid length.
[  205.470360][T10861] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.486143][T15994] chnl_net:caif_netlink_parms(): no params data found
[  205.508994][T15939] kernel write not supported for file /asound/timers (pid: 15939 comm: kfree)
[  205.551201][ T3923] dvmrp0 (unregistering): left allmulticast mode
[  205.624641][ T3923] $H� (unregistering): Released all slaves
[  205.632413][ T3923] bond0 (unregistering): Released all slaves
[  205.640330][ T3923] bond1 (unregistering): Released all slaves
[  205.676641][T15994] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.683946][T15994] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.694189][T15994] bridge_slave_0: entered allmulticast mode
[  205.700968][T15994] bridge_slave_0: entered promiscuous mode
[  205.707488][ T3923] tipc: Disabling bearer <udp:s>
[  205.712548][ T3923] tipc: Left network mode
[  205.717141][T15994] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.724410][T15994] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.740905][T15994] bridge_slave_1: entered allmulticast mode
[  205.752198][T15994] bridge_slave_1: entered promiscuous mode
[  205.818139][T15994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  205.836426][T15994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  205.856819][T16057] loop9: detected capacity change from 0 to 512
[  205.863231][ T3923] hsr_slave_0: left promiscuous mode
[  205.868709][T16057] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  205.877540][ T3923] hsr_slave_1: left promiscuous mode
[  205.895282][T16057] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  205.949882][T15994] team0: Port device team_slave_0 added
[  205.958307][T15994] team0: Port device team_slave_1 added
[  205.977680][T15994] batman_adv: batadv0: Adding interface: batadv_slave_0
[  205.984644][T15994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  206.010762][T15994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  206.021975][T15994] batman_adv: batadv0: Adding interface: batadv_slave_1
[  206.028946][T15994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  206.055030][T15994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  206.082607][T15994] hsr_slave_0: entered promiscuous mode
[  206.089145][T15994] hsr_slave_1: entered promiscuous mode
[  206.095031][T15994] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  206.102574][T15994] Cannot create hsr debugfs directory
[  206.115118][T15997] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  206.153555][T16064] can0: slcan on ttyS3.
[  206.207046][ T3923] IPVS: stop unused estimator thread 0...
[  206.232738][T16064] can0 (unregistered): slcan off ttyS3.
[  206.268188][T16067] loop3: detected capacity change from 0 to 2048
[  206.297602][T16067]  loop3: p1 < > p4
[  206.302869][T16067] loop3: p4 size 8388608 extends beyond EOD, truncated
[  206.456777][T16041] kernel write not supported for file /asound/timers (pid: 16041 comm: syz.0.2842)
[  206.471148][T15994] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  206.486058][T15994] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  206.497015][T15994] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  206.514251][T15994] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  206.540306][T16073] kernel write not supported for file /asound/timers (pid: 16073 comm: syz.0.2852)
[  206.576456][T15994] 8021q: adding VLAN 0 to HW filter on device bond0
[  206.587666][T16078] loop3: detected capacity change from 0 to 512
[  206.597383][T15994] 8021q: adding VLAN 0 to HW filter on device team0
[  206.604158][T16078] EXT4-fs: inline encryption not supported
[  206.620915][T16078] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  206.636829][   T47] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.643947][   T47] bridge0: port 1(bridge_slave_0) entered forwarding state
[  206.652910][   T47] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.659560][T16086] loop6: detected capacity change from 0 to 512
[  206.659968][   T47] bridge0: port 2(bridge_slave_1) entered forwarding state
[  206.674346][T16082] pim6reg1: entered promiscuous mode
[  206.676288][T12330] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.679624][T16082] pim6reg1: entered allmulticast mode
[  206.695871][T16086] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  206.730136][T16090] loop3: detected capacity change from 0 to 512
[  206.772388][T16090] EXT4-fs: Mount option(s) incompatible with ext3
[  206.776277][T16081] kernel write not supported for file /asound/timers (pid: 16081 comm: syz.0.2856)
[  206.797193][T15994] 8021q: adding VLAN 0 to HW filter on device batadv0
[  206.829524][T16086] EXT4-fs error (device loop6): ext4_empty_dir:3094: inode #12: comm syz.6.2858: invalid size
[  206.862147][T10861] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.906655][T15605] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.922630][T15994] veth0_vlan: entered promiscuous mode
[  206.929925][T15994] veth1_vlan: entered promiscuous mode
[  206.942937][T15994] veth0_macvtap: entered promiscuous mode
[  206.950130][T15994] veth1_macvtap: entered promiscuous mode
[  206.959411][T15994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  206.969858][T15994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.979702][T15994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  206.990261][T15994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.000125][T15994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  207.010601][T15994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.021132][T15994] batman_adv: batadv0: Interface activated: batadv_slave_0
[  207.029234][T15994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  207.039810][T15994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.049636][T15994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  207.060240][T15994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.070066][T15994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  207.080572][T15994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.091207][T15994] batman_adv: batadv0: Interface activated: batadv_slave_1
[  207.118572][T15994] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  207.127390][T15994] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  207.134013][T16111] loop0: detected capacity change from 0 to 512
[  207.136099][T15994] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  207.145248][T16111] EXT4-fs: inline encryption not supported
[  207.150970][T15994] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  207.195929][T16111] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.231290][T16111] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #2: comm syz.0.2865: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  207.312164][T12862] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.352602][T16126] pim6reg1: entered promiscuous mode
[  207.357998][T16126] pim6reg1: entered allmulticast mode
[  207.577874][T16141] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[  207.584554][T16141] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  207.592182][T16141] vhci_hcd vhci_hcd.0: Device attached
[  207.612551][T16145] loop6: detected capacity change from 0 to 1024
[  207.635887][T16141] loop3: detected capacity change from 0 to 1024
[  207.656508][T16145] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  207.673196][T16141] EXT4-fs: Ignoring removed nobh option
[  207.678809][T16141] EXT4-fs: Ignoring removed nomblk_io_submit option
[  207.694419][T16148] loop1: detected capacity change from 0 to 2048
[  207.718046][T16141] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  207.739151][T16141] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.775267][T16148] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  207.824880][T16153] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback.
[  207.836367][T16142] vhci_hcd: connection closed
[  207.836840][ T3923] vhci_hcd: stop threads
[  207.845850][ T3923] vhci_hcd: release socket
[  207.850320][ T3923] vhci_hcd: disconnect device
[  207.855039][T15770] usb 7-1: new high-speed USB device number 2 using vhci_hcd
[  207.872125][T15770] usb 7-1: enqueue for inactive port 0
[  207.880810][T15770] usb 7-1: enqueue for inactive port 0
[  207.886499][T15770] usb 7-1: enqueue for inactive port 0
[  207.903164][T15605] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.943171][T16161] loop9: detected capacity change from 0 to 512
[  207.963507][T16161] EXT4-fs: inline encryption not supported
[  207.975350][T15770] vhci_hcd: vhci_device speed not set
[  207.990411][T16161] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.024445][T10861] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.045193][T16169] loop6: detected capacity change from 0 to 512
[  208.070112][T16171] loop9: detected capacity change from 0 to 512
[  208.083163][T16171] EXT4-fs: inline encryption not supported
[  208.095117][T16169] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.124498][T16171] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.185505][T16171] EXT4-fs error (device loop9): ext4_do_update_inode:5153: inode #2: comm syz.9.2880: corrupted inode contents
[  208.210438][T16148] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  208.232332][T16148] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  208.244799][T16148] EXT4-fs (loop1): This should not happen!! Data will be lost
[  208.244799][T16148] 
[  208.249676][T16171] EXT4-fs error (device loop9): ext4_dirty_inode:6041: inode #2: comm syz.9.2880: mark_inode_dirty error
[  208.254427][T16148] EXT4-fs (loop1): Total free blocks count 0
[  208.254442][T16148] EXT4-fs (loop1): Free/Dirty block details
[  208.254453][T16148] EXT4-fs (loop1): free_blocks=2415919104
[  208.254468][T16148] EXT4-fs (loop1): dirty_blocks=7072
[  208.288740][T16148] EXT4-fs (loop1): Block reservation details
[  208.294713][T16148] EXT4-fs (loop1): i_reserved_data_blocks=442
[  208.328381][T15605] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.341980][T16171] EXT4-fs error (device loop9): ext4_do_update_inode:5153: inode #2: comm syz.9.2880: corrupted inode contents
[  208.354332][T16176] EXT4-fs error (device loop9): ext4_do_update_inode:5153: inode #2: comm syz.9.2880: corrupted inode contents
[  208.422720][T10861] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.442599][  T308] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  208.510025][T12330] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.529912][T16182] loop6: detected capacity change from 0 to 8192
[  208.544274][T16182] msdos: Unknown parameter '18446744073709551615��������01777777777777777777777�0xffffffffffffffff18446744073709551615�������������������3���Pq{�P
[  208.544274][T16182] n'�|$@OO����-��+�el'
[  208.560425][T16189] loop9: detected capacity change from 0 to 512
[  208.570077][T16189] EXT4-fs: inline encryption not supported
[  208.575896][T16190] loop3: detected capacity change from 0 to 512
[  208.586919][T16182] netlink: 'syz.6.2884': attribute type 4 has an invalid length.
[  208.606687][T16189] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.620494][T16190] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.638436][T16189] EXT4-fs error (device loop9): ext4_ext_check_inode:524: inode #2: comm syz.9.2887: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  208.663476][T16203] loop6: detected capacity change from 0 to 512
[  208.671868][T16203] EXT4-fs: inline encryption not supported
[  208.679060][T10861] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.698850][T16201] netlink: 'syz.0.2891': attribute type 4 has an invalid length.
[  208.715049][T16203] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.732471][T16210] loop9: detected capacity change from 0 to 512
[  208.735572][T16190] EXT4-fs error (device loop3): ext4_empty_dir:3094: inode #12: comm syz.3.2886: invalid size
[  208.741826][T16210] EXT4-fs: inline encryption not supported
[  208.755098][T16203] EXT4-fs error (device loop6): ext4_ext_check_inode:524: inode #2: comm syz.6.2890: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  208.789782][T15605] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.810864][T16217] loop1: detected capacity change from 0 to 1024
[  208.817425][T16217] EXT4-fs: Ignoring removed nobh option
[  208.817993][T16210] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.839281][T16210] EXT4-fs error (device loop9): ext4_ext_check_inode:524: inode #2: comm syz.9.2893: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  208.880699][T16222] bond1: entered promiscuous mode
[  208.885965][T16222] bond1: entered allmulticast mode
[  208.891626][T16222] 8021q: adding VLAN 0 to HW filter on device bond1
[  208.915583][T16222] bond1 (unregistering): Released all slaves
[  208.943486][T16234] loop1: detected capacity change from 0 to 512
[  208.951489][T16229] lo speed is unknown, defaulting to 1000
[  208.962375][T16239] loop9: detected capacity change from 0 to 732
[  208.990137][   T29] kauditd_printk_skb: 384 callbacks suppressed
[  208.990148][   T29] audit: type=1326 audit(198.194:21728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16233 comm="syz.1.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc66bb24690 code=0x7ffc0000
[  209.006915][T16229] erspan0 speed is unknown, defaulting to 1000
[  209.020279][   T29] audit: type=1326 audit(198.194:21729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16233 comm="syz.1.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fc66bb24a77 code=0x7ffc0000
[  209.048450][   T29] audit: type=1326 audit(198.194:21730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16233 comm="syz.1.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc66bb24690 code=0x7ffc0000
[  209.071499][   T29] audit: type=1326 audit(198.194:21731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16233 comm="syz.1.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66bb25d29 code=0x7ffc0000
[  209.094507][   T29] audit: type=1326 audit(198.194:21732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16233 comm="syz.1.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66bb25d29 code=0x7ffc0000
[  209.111254][T16238] loop6: detected capacity change from 0 to 1024
[  209.117474][   T29] audit: type=1326 audit(198.203:21733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16233 comm="syz.1.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc66bb25d29 code=0x7ffc0000
[  209.146775][   T29] audit: type=1326 audit(198.203:21734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16233 comm="syz.1.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66bb25d29 code=0x7ffc0000
[  209.169818][   T29] audit: type=1326 audit(198.203:21735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16233 comm="syz.1.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66bb25d29 code=0x7ffc0000
[  209.192818][   T29] audit: type=1326 audit(198.203:21736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16233 comm="syz.1.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc66bb25d29 code=0x7ffc0000
[  209.204546][T16238] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  209.215798][   T29] audit: type=1326 audit(198.203:21737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16233 comm="syz.1.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66bb25d29 code=0x7ffc0000
[  209.249284][T16247] geneve2: entered promiscuous mode
[  209.254495][T16247] geneve2: entered allmulticast mode
[  209.265135][T16253] loop9: detected capacity change from 0 to 128
[  209.281793][T16238] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.2900: Invalid block bitmap block 0 in block_group 0
[  209.301767][T16238] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.2900: Failed to acquire dquot type 0
[  209.323479][T16238] EXT4-fs error (device loop6): ext4_free_blocks:6589: comm syz.6.2900: Freeing blocks not in datazone - block = 0, count = 4096
[  209.341044][T16247] warn_unsupported: 11 callbacks suppressed
[  209.341067][T16247] kernel write not supported for file /asound/timers (pid: 16247 comm: syz.0.2905)
[  209.357300][T16238] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.2900: Invalid inode bitmap blk 0 in block_group 0
[  209.376721][T16238] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem
[  209.378030][ T3923] EXT4-fs error (device loop6): ext4_release_dquot:6961: comm kworker/u8:36: Failed to release dquot type 0
[  209.386895][T16255] block device autoloading is deprecated and will be removed.
[  209.398897][T16238] EXT4-fs (loop6): 1 orphan inode deleted
[  209.404985][T16255] syz.3.2906: attempt to access beyond end of device
[  209.404985][T16255] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  209.429443][T16259] __nla_validate_parse: 13 callbacks suppressed
[  209.429457][T16259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2907'.
[  209.466657][T16259] kernel write not supported for file /asound/timers (pid: 16259 comm: syz.0.2907)
[  209.511225][T16229] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2900'.
[  209.517045][T16264] loop0: detected capacity change from 0 to 512
[  209.526816][T16229] EXT4-fs error (device loop6): ext4_lookup:1813: inode #15: comm syz.6.2900: iget: bad extra_isize 65535 (inode size 256)
[  209.555242][T16269] loop1: detected capacity change from 0 to 512
[  209.563145][T16269] EXT4-fs: inline encryption not supported
[  209.564976][T16264] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  209.580196][T16264] EXT4-fs (loop0): orphan cleanup on readonly fs
[  209.590248][T16264] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  209.606812][T16264] EXT4-fs (loop0): Cannot turn on quotas: error -117
[  209.615770][T16269] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #2: comm syz.1.2911: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  209.616566][T16264] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2909: bg 0: block 40: padding at end of block bitmap is not set
[  209.655217][T16264] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  209.665860][T16264] EXT4-fs (loop0): 1 truncate cleaned up
[  209.722049][T16277] loop3: detected capacity change from 0 to 8192
[  209.722179][T16263] kernel write not supported for file /asound/timers (pid: 16263 comm: syz.0.2909)
[  209.758731][T16279] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  209.786864][T16281] loop1: detected capacity change from 0 to 512
[  209.794010][T16281] EXT4-fs: inline encryption not supported
[  209.821532][T16284] TCP: TCP_TX_DELAY enabled
[  209.833984][T16285] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2917'.
[  209.844557][T16285] bridge_slave_1: left allmulticast mode
[  209.850275][T16285] bridge_slave_1: left promiscuous mode
[  209.856206][T16285] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.865529][T16285] bridge_slave_0: left allmulticast mode
[  209.865816][T16281] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #2: comm syz.1.2913: corrupted inode contents
[  209.871255][T16285] bridge_slave_0: left promiscuous mode
[  209.888684][T16285] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.893430][T16281] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #2: comm syz.1.2913: mark_inode_dirty error
[  209.907205][T16281] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #2: comm syz.1.2913: corrupted inode contents
[  209.907338][T16281] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.2913: mark_inode_dirty error
[  210.008191][T16314] loop1: detected capacity change from 0 to 512
[  210.207715][T16320] loop9: detected capacity change from 0 to 8192
[  210.651521][T16293] kernel write not supported for file /asound/timers (pid: 16293 comm: syz.0.2915)
[  210.673566][T16334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2928'.
[  210.686354][T16334] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2928'.
[  210.697585][T16334] kernel write not supported for file /asound/timers (pid: 16334 comm: syz.0.2928)
[  210.742437][T16336] loop0: detected capacity change from 0 to 512
[  210.764754][T16335] kernel write not supported for file /asound/timers (pid: 16335 comm: syz.0.2929)
[  210.796350][T16338] loop0: detected capacity change from 0 to 512
[  210.811206][T16338] EXT4-fs: inline encryption not supported
[  210.832474][T16341] loop6: detected capacity change from 0 to 512
[  210.845183][T16341] EXT4-fs: Ignoring removed nomblk_io_submit option
[  210.851872][T16341] ext4: Unknown parameter 'nouser_xattr'
[  210.889715][T16338] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #2: comm syz.0.2930: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  210.922373][T16337] kernel write not supported for file /asound/timers (pid: 16337 comm: syz.0.2930)
[  210.942237][T16346] loop1: detected capacity change from 0 to 2048
[  210.943265][T16354] loop3: detected capacity change from 0 to 256
[  210.965501][T16357] loop6: detected capacity change from 0 to 512
[  210.974373][T16346] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  210.989165][T16346] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28
[  211.001540][T16346] EXT4-fs (loop1): This should not happen!! Data will be lost
[  211.001540][T16346] 
[  211.011180][T16346] EXT4-fs (loop1): Total free blocks count 0
[  211.017206][T16346] EXT4-fs (loop1): Free/Dirty block details
[  211.023136][T16346] EXT4-fs (loop1): free_blocks=2415919504
[  211.028964][T16346] EXT4-fs (loop1): dirty_blocks=48
[  211.034107][T16346] EXT4-fs (loop1): Block reservation details
[  211.039099][T16365] loop6: detected capacity change from 0 to 512
[  211.040080][T16346] EXT4-fs (loop1): i_reserved_data_blocks=3
[  211.056468][T16363] loop3: detected capacity change from 0 to 8192
[  211.064518][T16365] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.2938: corrupted in-inode xattr: invalid ea_ino
[  211.079649][T16368] pim6reg1: entered promiscuous mode
[  211.084996][T16368] pim6reg1: entered allmulticast mode
[  211.092369][T16365] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.2938: couldn't read orphan inode 15 (err -117)
[  211.108589][T16363]  loop3: p2 p3 < > p4 < p5 >
[  211.113325][T16363] loop3: partition table partially beyond EOD, truncated
[  211.120551][T16363] loop3: p2 start 16777216 is beyond EOD, truncated
[  211.127209][T16363] loop3: p3 start 100859904 is beyond EOD, truncated
[  211.134897][T16363] loop3: p5 start 16777216 is beyond EOD, truncated
[  211.175431][T16378] loop9: detected capacity change from 0 to 164
[  211.183705][T16378] Unable to read rock-ridge attributes
[  211.196302][T16368] kernel write not supported for file /asound/timers (pid: 16368 comm: syz.0.2936)
[  211.221903][T16380] net_ratelimit: 608 callbacks suppressed
[  211.221920][T16380] netlink: zone id is out of range
[  211.232822][T16380] netlink: zone id is out of range
[  211.237982][T16380] netlink: zone id is out of range
[  211.243085][T16380] netlink: zone id is out of range
[  211.248225][T16380] netlink: zone id is out of range
[  211.253390][T16380] netlink: zone id is out of range
[  211.258522][T16380] netlink: zone id is out of range
[  211.263631][T16380] netlink: zone id is out of range
[  211.268829][T16380] netlink: zone id is out of range
[  211.273946][T16380] netlink: zone id is out of range
[  211.296540][T16363] loop3: detected capacity change from 0 to 8192
[  211.297229][T16380] kernel write not supported for file /asound/timers (pid: 16380 comm: syz.0.2942)
[  211.354057][T16363]  loop3: p2 p3 < > p4 < p5 >
[  211.358795][T16363] loop3: partition table partially beyond EOD, truncated
[  211.367079][T16363] loop3: p2 start 16777216 is beyond EOD, truncated
[  211.373765][T16363] loop3: p3 start 100859904 is beyond EOD, truncated
[  211.386767][T16391] loop6: detected capacity change from 0 to 2048
[  211.394592][T16363] loop3: p5 start 16777216 is beyond EOD, truncated
[  211.409124][T16391] EXT4-fs: Ignoring removed bh option
[  211.415881][T16391] EXT4-fs (loop6): can't disable delalloc during remount
[  211.451547][T15605] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  211.612239][T16404] loop6: detected capacity change from 0 to 512
[  211.612336][T16363] loop3: detected capacity change from 0 to 8192
[  211.618785][T16404] EXT4-fs: inline encryption not supported
[  211.642390][T16363]  loop3: p2 p3 < > p4 < p5 >
[  211.647177][T16363] loop3: partition table partially beyond EOD, truncated
[  211.654327][T16363] loop3: p2 start 16777216 is beyond EOD, truncated
[  211.661054][T16363] loop3: p3 start 100859904 is beyond EOD, truncated
[  211.677848][T16363] loop3: p5 start 16777216 is beyond EOD, truncated
[  211.684560][T16404] EXT4-fs error (device loop6): ext4_ext_check_inode:524: inode #2: comm syz.6.2947: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  211.774898][T16392] kernel write not supported for file /asound/timers (pid: 16392 comm: syz.0.2944)
[  211.808085][T16363] loop3: detected capacity change from 0 to 8192
[  211.826834][T16415] loop0: detected capacity change from 0 to 512
[  211.831535][T16417] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2952'.
[  211.845682][T16363]  loop3: p2 p3 < > p4 < p5 >
[  211.846474][T16417] loop6: detected capacity change from 0 to 512
[  211.850365][T16363] loop3: partition table partially beyond EOD, truncated
[  211.865078][T16363] loop3: p2 start 16777216 is beyond EOD, truncated
[  211.871731][T16363] loop3: p3 start 100859904 is beyond EOD, truncated
[  211.881129][T16363] loop3: p5 start 16777216 is beyond EOD, truncated
[  211.881551][T16420] pim6reg1: entered promiscuous mode
[  211.893152][T16420] pim6reg1: entered allmulticast mode
[  211.951581][T16424] xt_TPROXY: Can be used only with -p tcp or -p udp
[  211.974254][T16426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2956'.
[  211.985150][T16426] netlink: 'syz.3.2956': attribute type 1 has an invalid length.
[  211.992912][T16426] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2956'.
[  212.043564][T16434] loop6: detected capacity change from 0 to 1024
[  212.050484][T16434] EXT4-fs: Ignoring removed nobh option
[  212.056119][T16434] EXT4-fs: Ignoring removed orlov option
[  212.356485][T16446] netlink: 'syz.3.2961': attribute type 4 has an invalid length.
[  212.425834][T16457] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2964'.
[  212.437486][T16457] loop3: detected capacity change from 0 to 512
[  212.457520][T16457] .: renamed from bond0
[  212.463684][T16457] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2964'.
[  212.672737][T16468] loop1: detected capacity change from 0 to 512
[  212.679864][T16468] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  212.690813][T16468] EXT4-fs (loop1): 1 truncate cleaned up
[  212.736299][T16471] pim6reg1: entered promiscuous mode
[  212.741605][T16471] pim6reg1: entered allmulticast mode
[  212.844215][T16481] loop0: detected capacity change from 0 to 512
[  212.894048][T16481] blktrace: Concurrent blktraces are not allowed on sg0
[  212.984129][T16492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  212.992793][T16492] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  213.162746][T16499] loop1: detected capacity change from 0 to 256
[  213.169302][T16499] vfat: Unknown parameter 'uni_xla~e'
[  213.175459][T16499] netlink: 'syz.1.2978': attribute type 8 has an invalid length.
[  213.209042][T16499] infiniband syz!: set active
[  213.213951][T16499] infiniband syz!: added team_slave_0
[  213.224544][T16499] RDS/IB: syz!: added
[  213.228545][T16499] smc: adding ib device syz! with port count 1
[  213.234755][T16499] smc:    ib device syz! port 1 has pnetid 
[  213.452361][T16505] loop1: detected capacity change from 0 to 512
[  213.460070][T16505] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  213.471624][T16505] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it
[  213.481870][T16505] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.2980: Corrupt directory, running e2fsck is recommended
[  213.495642][T16505] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  213.504090][T16505] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.2980: corrupted in-inode xattr: invalid ea_ino
[  213.519141][T16505] EXT4-fs (loop1): Remounting filesystem read-only
[  213.526146][T16505] SELinux: (dev loop1, type ext4) getxattr errno 5
[  213.704570][T16515] loop1: detected capacity change from 0 to 512
[  213.712716][T16515] EXT4-fs: inline encryption not supported
[  213.760077][T16515] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #2: comm syz.1.2983: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  213.868426][T16535] geneve0: entered allmulticast mode
[  213.953723][T16549] loop0: detected capacity change from 0 to 128
[  213.961519][T16549] FAT-fs (loop0): Directory bread(block 162) failed
[  213.969493][T16549] FAT-fs (loop0): Directory bread(block 163) failed
[  213.976345][T16549] FAT-fs (loop0): Directory bread(block 164) failed
[  213.983041][T16549] FAT-fs (loop0): Directory bread(block 165) failed
[  213.992008][T16549] FAT-fs (loop0): Directory bread(block 166) failed
[  213.998740][T16549] FAT-fs (loop0): Directory bread(block 167) failed
[  214.005414][T16549] FAT-fs (loop0): Directory bread(block 168) failed
[  214.012059][T16549] FAT-fs (loop0): Directory bread(block 169) failed
[  214.021800][T16549] FAT-fs (loop0): Directory bread(block 162) failed
[  214.028548][T16549] FAT-fs (loop0): Directory bread(block 163) failed
[  214.051848][T16549] syz.0.2992: attempt to access beyond end of device
[  214.051848][T16549] loop0: rw=3, sector=226, nr_sectors = 6 limit=128
[  214.066045][T16549] syz.0.2992: attempt to access beyond end of device
[  214.066045][T16549] loop0: rw=2051, sector=232, nr_sectors = 2 limit=128
[  214.083199][T16549] syz.0.2992: attempt to access beyond end of device
[  214.083199][T16549] loop0: rw=3, sector=234, nr_sectors = 6 limit=128
[  214.097621][T16549] syz.0.2992: attempt to access beyond end of device
[  214.097621][T16549] loop0: rw=2051, sector=240, nr_sectors = 2 limit=128
[  214.147128][T16567] loop0: detected capacity change from 0 to 164
[  214.156131][T16567] Unable to read rock-ridge attributes
[  214.163907][T16567] Unable to read rock-ridge attributes
[  214.208998][T16574] loop1: detected capacity change from 0 to 128
[  214.220493][T16574] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  214.234191][T16574] FAT-fs (loop1): bogus number of FAT sectors
[  214.240384][T16574] FAT-fs (loop1): Can't find a valid FAT filesystem
[  214.249496][T16574] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  214.299569][T16590] loop0: detected capacity change from 0 to 512
[  214.306980][T16590] EXT4-fs: inline encryption not supported
[  214.314706][T16591] xt_connbytes: Forcing CT accounting to be enabled
[  214.321462][T16590] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #2: comm syz.0.2996: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  214.321566][T16591] x_tables: ip_tables: icmp match: only valid for protocol 1
[  214.351551][   T29] kauditd_printk_skb: 423 callbacks suppressed
[  214.351564][   T29] audit: type=1400 audit(203.217:22157): avc:  denied  { unmount } for  pid=12862 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  214.380956][   T29] audit: type=1400 audit(203.217:22158): avc:  denied  { read write } for  pid=12330 comm="syz-executor" name="loop3" dev="devtmpfs" ino=569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  214.404820][   T29] audit: type=1400 audit(203.217:22159): avc:  denied  { open } for  pid=12330 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  214.428653][   T29] audit: type=1400 audit(203.217:22160): avc:  denied  { ioctl } for  pid=12330 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=569 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  214.453907][   T29] audit: type=1326 audit(203.226:22161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16589 comm="syz.1.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66bb25d29 code=0x7ffc0000
[  214.477264][   T29] audit: type=1326 audit(203.226:22162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16589 comm="syz.1.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66bb25d29 code=0x7ffc0000
[  214.500367][   T29] audit: type=1326 audit(203.226:22163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16589 comm="syz.1.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc66bb24690 code=0x7ffc0000
[  214.523300][   T29] audit: type=1326 audit(203.226:22164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16589 comm="syz.1.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fc66bb27557 code=0x7ffc0000
[  214.546262][   T29] audit: type=1326 audit(203.226:22165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16589 comm="syz.1.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc66bb25d29 code=0x7ffc0000
[  214.569360][   T29] audit: type=1400 audit(203.235:22166): avc:  denied  { create } for  pid=16589 comm="syz.1.2997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  214.624510][T16620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  214.633732][T16620] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  214.643899][T16619] tipc: Started in network mode
[  214.648870][T16619] tipc: Node identity f0, cluster identity 4711
[  214.655175][T16619] tipc: Node number set to 240
[  214.946058][T16622] warn_unsupported: 19 callbacks suppressed
[  214.946074][T16622] kernel write not supported for file /asound/timers (pid: 16622 comm: syz.0.3006)
[  215.312777][ T3361] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0
[  215.320259][ T3361] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0
[  215.327634][ T3361] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0
[  215.335065][ T3361] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0
[  215.342500][ T3361] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0
[  215.349916][ T3361] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0
[  215.357368][ T3361] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0
[  215.364762][ T3361] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0
[  215.372180][ T3361] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0
[  215.379592][ T3361] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0
[  215.387055][ T3361] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0
[  215.394448][ T3361] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0
[  215.401911][ T3361] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0
[  215.409370][ T3361] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0
[  215.416807][ T3361] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0
[  215.424187][ T3361] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0
[  215.431722][ T3361] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0
[  215.439130][ T3361] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0
[  215.446513][ T3361] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0
[  215.454058][ T3361] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0
[  215.461501][ T3361] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0
[  215.468892][ T3361] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0
[  215.473106][T16656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  215.476379][ T3361] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0
[  215.491256][T16656] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  215.491998][ T3361] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0
[  215.507098][ T3361] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0
[  215.509759][T16656] netlink: 'syz.6.3012': attribute type 4 has an invalid length.
[  215.514532][ T3361] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0
[  215.529653][ T3361] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0
[  215.537053][ T3361] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0
[  215.544491][ T3361] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0
[  215.551865][ T3361] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0
[  215.559309][ T3361] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0
[  215.566764][ T3361] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0
[  215.574199][ T3361] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0
[  215.581660][ T3361] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0
[  215.589048][ T3361] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0
[  215.596432][ T3361] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0
[  215.599266][T16629] rtc_cmos 00:00: Alarms can be up to one day in the future
[  215.603819][ T3361] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0
[  215.618518][ T3361] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0
[  215.625933][ T3361] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0
[  215.633351][ T3361] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0
[  215.640756][ T3361] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0
[  215.648138][ T3361] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0
[  215.655659][ T3361] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0
[  215.707719][ T3361] hid-generic 0000:0003:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  215.724118][T16686] netlink: 'syz.9.3014': attribute type 25 has an invalid length.
[  215.731997][T16686] netlink: 'syz.9.3014': attribute type 7 has an invalid length.
[  215.746588][T16689] loop3: detected capacity change from 0 to 128
[  215.772298][T16690] lo speed is unknown, defaulting to 1000
[  215.806401][T16690] erspan0 speed is unknown, defaulting to 1000
[  215.874635][T16702] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.887057][T16689] EXT4-fs (loop3): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w. Quota mode: none.
[  215.931539][T16702] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.975290][T16702] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.004919][T16712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  216.010535][ T3361] rtc_cmos 00:00: Alarms can be up to one day in the future
[  216.013384][T16712] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  216.020825][ T3361] rtc_cmos 00:00: Alarms can be up to one day in the future
[  216.036041][ T3361] rtc_cmos 00:00: Alarms can be up to one day in the future
[  216.043843][ T3361] rtc_cmos 00:00: Alarms can be up to one day in the future
[  216.051152][ T3361] rtc rtc0: __rtc_set_alarm: err=-22
[  216.069332][T16702] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.076220][T16714] loop3: detected capacity change from 0 to 2048
[  216.202001][T16702] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  216.239698][T16702] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  216.249120][T16638] kernel write not supported for file /asound/timers (pid: 16638 comm: syz.0.3009)
[  216.260201][T16702] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  216.286369][T16702] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  216.311873][T16724] kernel write not supported for file /asound/timers (pid: 16724 comm: syz.0.3026)
[  216.340967][T16722] lo speed is unknown, defaulting to 1000
[  216.350624][T16728] kernel write not supported for file /asound/timers (pid: 16728 comm: syz.0.3028)
[  216.392857][T16722] erspan0 speed is unknown, defaulting to 1000
[  216.474210][T16744] kernel write not supported for file /asound/timers (pid: 16744 comm: syz.0.3032)
[  216.531549][T16747] loop3: detected capacity change from 0 to 512
[  216.538300][T16747] EXT4-fs: inline encryption not supported
[  216.564420][T16747] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.3034: corrupted inode contents
[  216.597613][T16749] loop0: detected capacity change from 0 to 1764
[  216.605119][T16747] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #2: comm syz.3.3034: mark_inode_dirty error
[  216.605919][T16749] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  216.624206][T16754] net_ratelimit: 519 callbacks suppressed
[  216.624222][T16754] netlink: zone id is out of range
[  216.635433][T16754] netlink: zone id is out of range
[  216.636023][T16747] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.3034: corrupted inode contents
[  216.640528][T16754] netlink: zone id is out of range
[  216.640536][T16754] netlink: zone id is out of range
[  216.662597][T16754] netlink: zone id is out of range
[  216.667804][T16754] netlink: zone id is out of range
[  216.671413][T16747] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.3034: corrupted inode contents
[  216.672905][T16754] netlink: zone id is out of range
[  216.672912][T16754] netlink: zone id is out of range
[  216.686664][T16747] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #2: comm syz.3.3034: mark_inode_dirty error
[  216.689905][T16754] netlink: zone id is out of range
[  216.689913][T16754] netlink: zone id is out of range
[  216.727788][T16747] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.3034: corrupted inode contents
[  216.748347][T16760] ALSA: seq fatal error: cannot create timer (-19)
[  216.756796][T16756] __nla_validate_parse: 5 callbacks suppressed
[  216.756866][T16756] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3036'.
[  216.772815][T16747] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.3034: mark_inode_dirty error
[  216.793787][T16767] kernel write not supported for file /asound/timers (pid: 16767 comm: syz.0.3033)
[  216.803434][T16747] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.3034: corrupted inode contents
[  216.817343][T16747] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #2: comm syz.3.3034: mark_inode_dirty error
[  216.825095][T16773] loop9: detected capacity change from 0 to 2048
[  216.838065][T16758] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.3034: corrupted inode contents
[  216.839096][T16771] dvmrp0: entered allmulticast mode
[  216.867960][T16771] dvmrp0: left allmulticast mode
[  216.906496][T16781] kernel write not supported for file /asound/timers (pid: 16781 comm: syz.0.3042)
[  216.939196][T16792] netlink: 'syz.9.3055': attribute type 10 has an invalid length.
[  216.949918][T16792] bridge0: port 3(bond0) entered disabled state
[  216.950397][T16787] loop0: detected capacity change from 0 to 2048
[  216.956297][T16792] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.969846][T16792] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.988302][T16792] bridge0: port 3(bond0) entered blocking state
[  216.994651][T16792] bridge0: port 3(bond0) entered forwarding state
[  217.001280][T16792] bridge0: port 2(bridge_slave_1) entered blocking state
[  217.008371][T16792] bridge0: port 2(bridge_slave_1) entered forwarding state
[  217.015769][T16792] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.017596][T16799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  217.022829][T16792] bridge0: port 1(bridge_slave_0) entered forwarding state
[  217.042558][T16799] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  217.047883][T16788] kernel write not supported for file /asound/timers (pid: 16788 comm: syz.0.3045)
[  217.059779][T16792] bridge0: port 3(bond0) entered disabled state
[  217.066077][T16792] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.073274][T16792] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.097491][T16792] bond0: left allmulticast mode
[  217.102394][T16792] bond_slave_0: left allmulticast mode
[  217.107911][T16792] bond_slave_1: left allmulticast mode
[  217.113448][T16792] bond0: left promiscuous mode
[  217.118253][T16792] bond_slave_0: left promiscuous mode
[  217.123715][T16792] bond_slave_1: left promiscuous mode
[  217.129486][T16792] bridge0: port 3(bond0) entered disabled state
[  217.148506][T16800] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3055'.
[  217.162248][T16792] bridge_slave_0: left allmulticast mode
[  217.167938][T16792] bridge_slave_0: left promiscuous mode
[  217.173780][T16792] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.204571][T16792] bridge_slave_1: left allmulticast mode
[  217.209609][T16811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3051'.
[  217.210335][T16792] bridge_slave_1: left promiscuous mode
[  217.210407][T16792] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.232996][T16811] sd 0:0:1:0: device reset
[  217.239579][T16792] bond0: (slave bond_slave_0): Releasing backup interface
[  217.250313][T16792] bond0: (slave bond_slave_1): Releasing backup interface
[  217.265919][T16792] team0: Port device team_slave_0 removed
[  217.276007][T16792] team0: Port device team_slave_1 removed
[  217.283659][T16792] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  217.286522][T16811] loop3: detected capacity change from 0 to 512
[  217.291132][T16792] batman_adv: batadv0: Removing interface: batadv_slave_0
[  217.298247][T16811] /dev/loop3: Can't open blockdev
[  217.322505][T16792] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  217.330191][T16792] batman_adv: batadv0: Removing interface: batadv_slave_1
[  217.464519][T16813] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  217.478801][T16813] vhci_hcd: default hub control req: d300 v0000 i0000 l0
[  217.517822][T16807] kernel write not supported for file /asound/timers (pid: 16807 comm: syz.0.3049)
[  217.602068][T16849] loop9: detected capacity change from 0 to 2048
[  217.767497][T16849] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3062'.
[  217.784571][T16853] loop0: detected capacity change from 0 to 2048
[  217.836126][T16863] random: crng reseeded on system resumption
[  217.854113][T16853]  loop0: p2 < > p4
[  217.864512][T16853] loop0: p4 size 8192 extends beyond EOD, truncated
[  218.026444][T16872] netlink: 'syz.9.3066': attribute type 10 has an invalid length.
[  218.054117][T16872] team0: Device hsr_slave_0 failed to register rx_handler
[  218.198144][T16884] loop9: detected capacity change from 0 to 512
[  218.228896][T16887] loop3: detected capacity change from 0 to 512
[  218.239810][T16884] EXT4-fs warning (device loop9): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  218.258096][T16887] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  218.281386][T16887] EXT4-fs (loop3): 1 truncate cleaned up
[  218.347739][T16896] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  218.390164][T16903] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.445419][T16903] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.482716][T16843] kernel write not supported for file /asound/timers (pid: 16843 comm: syz.0.3060)
[  218.526958][T16916] loop0: detected capacity change from 0 to 1024
[  218.533721][T16916] EXT4-fs: Ignoring removed nomblk_io_submit option
[  218.540719][T16916] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  218.559725][T16903] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.592028][T16921] loop3: detected capacity change from 0 to 512
[  218.602941][T16903] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.626330][T16921] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  218.636598][T16921] System zones: 0-2, 18-18, 34-34
[  218.642370][T16921] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3080: bg 0: block 248: padding at end of block bitmap is not set
[  218.657059][T16921] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.3080: Failed to acquire dquot type 1
[  218.668894][T16921] EXT4-fs (loop3): 1 truncate cleaned up
[  218.671503][T16925] loop0: detected capacity change from 0 to 512
[  218.681140][T16925] EXT4-fs: Ignoring removed nobh option
[  218.688961][T16925] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  218.697145][T16925] EXT4-fs (loop0): orphan cleanup on readonly fs
[  218.705901][T16925] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.3081: Failed to acquire dquot type 1
[  218.718544][T16925] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3081: bg 0: block 40: padding at end of block bitmap is not set
[  218.730311][T16933] loop9: detected capacity change from 0 to 128
[  218.741010][T16925] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  218.750004][T16925] EXT4-fs (loop0): 1 truncate cleaned up
[  218.762565][T16936] lo speed is unknown, defaulting to 1000
[  218.793942][T16936] erspan0 speed is unknown, defaulting to 1000
[  218.855652][T16940] netlink: 664 bytes leftover after parsing attributes in process `syz.9.3085'.
[  218.915160][T16925] cgroup: fork rejected by pids controller in /syz0
[  218.978410][T16984] pimreg: entered allmulticast mode
[  219.012346][T16984] pimreg: left allmulticast mode
[  219.028361][T16989] syz.3.3089[16989] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  219.028418][T16989] syz.3.3089[16989] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  219.040051][T16989] syz.3.3089[16989] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  219.047620][T16991] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  219.071395][T16991] vhci_hcd: invalid port number 23
[  219.190967][T17001] loop9: detected capacity change from 0 to 1024
[  219.197860][T17001] EXT4-fs: inline encryption not supported
[  219.204039][T17001] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  219.509839][T17041] loop0: detected capacity change from 0 to 512
[  219.511017][T17040] loop3: detected capacity change from 0 to 128
[  219.517689][T17041] EXT4-fs: inline encryption not supported
[  219.540930][T17041] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #2: comm syz.0.3103: corrupted inode contents
[  219.553079][T17041] EXT4-fs error (device loop0): ext4_dirty_inode:6041: inode #2: comm syz.0.3103: mark_inode_dirty error
[  219.564805][T17041] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #2: comm syz.0.3103: corrupted inode contents
[  219.578874][T17041] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #2: comm syz.0.3103: corrupted inode contents
[  219.590838][T17041] EXT4-fs error (device loop0): ext4_dirty_inode:6041: inode #2: comm syz.0.3103: mark_inode_dirty error
[  219.602373][T17041] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #2: comm syz.0.3103: corrupted inode contents
[  219.614345][T17041] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.3103: mark_inode_dirty error
[  219.627304][T17041] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #2: comm syz.0.3103: corrupted inode contents
[  219.640380][T17041] EXT4-fs error (device loop0): ext4_dirty_inode:6041: inode #2: comm syz.0.3103: mark_inode_dirty error
[  219.652006][T17046] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #2: comm syz.0.3103: corrupted inode contents
[  219.700110][T17052] loop0: detected capacity change from 0 to 512
[  219.718728][   T29] kauditd_printk_skb: 784 callbacks suppressed
[  219.718740][   T29] audit: type=1400 audit(208.231:22946): avc:  denied  { read write } for  pid=17051 comm="syz.0.3106" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  219.747152][   T29] audit: type=1400 audit(208.231:22947): avc:  denied  { open } for  pid=17051 comm="syz.0.3106" path="/181/bus/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  219.769649][   T29] audit: type=1400 audit(208.231:22948): avc:  denied  { ioctl } for  pid=17051 comm="syz.0.3106" path="/181/bus/file2" dev="loop0" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  219.794046][T17061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3106'.
[  219.794054][T17058] loop3: detected capacity change from 0 to 512
[  219.794295][T17058] ext4: Unknown parameter 'nouser_xattr'
[  219.834801][   T29] audit: type=1400 audit(208.343:22949): avc:  denied  { write } for  pid=17064 comm="syz.3.3109" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  219.854963][   T29] audit: type=1326 audit(208.343:22950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17064 comm="syz.3.3109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa531d55d29 code=0x7ffc0000
[  219.877952][   T29] audit: type=1326 audit(208.343:22951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17064 comm="syz.3.3109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa531d55d29 code=0x7ffc0000
[  219.901304][   T29] audit: type=1326 audit(208.343:22952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17064 comm="syz.3.3109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa531d55d29 code=0x7ffc0000
[  219.924391][   T29] audit: type=1326 audit(208.343:22953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17064 comm="syz.3.3109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa531d55d29 code=0x7ffc0000
[  219.947829][   T29] audit: type=1326 audit(208.343:22954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17064 comm="syz.3.3109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa531d55d29 code=0x7ffc0000
[  219.970845][   T29] audit: type=1326 audit(208.343:22955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17064 comm="syz.3.3109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa531d55d29 code=0x7ffc0000
[  220.012228][T17081] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3113'.
[  220.051208][T17086] sch_tbf: peakrate 5120 is lower than or equals to rate 2147483647 !
[  220.100994][T17086] rdma_rxe: rxe_newlink: failed to add lo
[  220.223555][T17096] serio: Serial port pts0
[  220.286037][T17101] loop0: detected capacity change from 0 to 1024
[  220.295999][T17101] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  220.330348][T17100] warn_unsupported: 15 callbacks suppressed
[  220.330363][T17100] kernel write not supported for file /asound/timers (pid: 17100 comm: syz.0.3120)
[  220.337951][T17108] loop6: detected capacity change from 0 to 128
[  220.389776][T17111] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3122'.
[  220.432148][T17111] kernel write not supported for file /asound/timers (pid: 17111 comm: syz.0.3122)
[  220.443610][T17120] loop6: detected capacity change from 0 to 2048
[  220.452443][T17120] EXT4-fs: test_dummy_encryption option not supported
[  220.461301][T17121] kernel write not supported for file /asound/timers (pid: 17121 comm: syz.0.3126)
[  220.469143][T17120] netlink: 20 bytes leftover after parsing attributes in process `+}[@'.
[  220.491955][T17125] kernel write not supported for file /asound/timers (pid: 17125 comm: syz.0.3127)
[  220.508831][T16903] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  220.519918][T17128] kernel write not supported for file /asound/timers (pid: 17128 comm: syz.0.3129)
[  220.520126][T16903] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  220.540825][T16903] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  220.541053][T17131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  220.552002][T16903] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  220.576306][T17131] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  220.677954][T17139] loop1: detected capacity change from 0 to 1764
[  220.707537][T17139] 9pnet_fd: Insufficient options for proto=fd
[  220.742179][T17158] raw_sendmsg: syz.3.3136 forgot to set AF_INET. Fix it!
[  220.773281][T17158] netlink: 'syz.3.3136': attribute type 10 has an invalid length.
[  220.781277][T17158] batman_adv: batadv0: Removing interface: dummy0
[  220.791713][T17158] .: (slave dummy0): Enslaving as an active interface with an up link
[  220.829721][T17164] loop3: detected capacity change from 0 to 512
[  220.887636][T17172] loop1: detected capacity change from 0 to 1764
[  220.954926][T17178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3143'.
[  221.020712][T15783] IPVS: starting estimator thread 0...
[  221.051761][T17196] netlink: 'syz.6.3148': attribute type 4 has an invalid length.
[  221.115544][T17193] IPVS: using max 2880 ests per chain, 144000 per kthread
[  221.133143][T17211] loop9: detected capacity change from 0 to 164
[  221.214077][T17130] kernel write not supported for file /asound/timers (pid: 17130 comm: syz.0.3130)
[  221.282005][T17216] kernel write not supported for file /asound/timers (pid: 17216 comm: syz.0.3157)
[  221.353381][T17222] kernel write not supported for file /asound/timers (pid: 17222 comm: syz.0.3159)
[  221.396662][T17233] loop0: detected capacity change from 0 to 512
[  221.409748][T17233] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.3161: corrupted in-inode xattr: invalid ea_ino
[  221.428856][T17233] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.3161: couldn't read orphan inode 15 (err -117)
[  221.465549][T17233] kernel write not supported for file /asound/timers (pid: 17233 comm: syz.0.3161)
[  221.496693][T17235] veth1_macvtap: left promiscuous mode
[  221.586767][T17237] kernel write not supported for file /asound/timers (pid: 17237 comm: syz.0.3163)
[  221.677172][T17245] loop6: detected capacity change from 0 to 512
[  221.688051][T17245] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  221.699436][T17245] EXT4-fs (loop6): orphan cleanup on readonly fs
[  221.708224][T17245] EXT4-fs warning (device loop6): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  221.721199][T17241] loop0: detected capacity change from 0 to 8192
[  221.771756][T17245] EXT4-fs (loop6): Cannot turn on quotas: error -117
[  221.790243][T17245] EXT4-fs error (device loop6): ext4_orphan_get:1389: inode #16: comm syz.6.3166: casefold flag without casefold feature
[  221.833539][T17245] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.3166: couldn't read orphan inode 16 (err -117)
[  221.955266][T17265] loop6: detected capacity change from 0 to 512
[  221.962423][T17265] EXT4-fs: Ignoring removed orlov option
[  221.971259][T17265] EXT4-fs: Mount option(s) incompatible with ext2
[  222.031765][T17263] Process accounting resumed
[  222.059964][T17282] loop9: detected capacity change from 0 to 512
[  222.077238][T17282] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  222.090534][T17282] EXT4-fs (loop9): 1 truncate cleaned up
[  222.141567][T17292] loop1: detected capacity change from 0 to 512
[  222.154670][T17292] EXT4-fs: inline encryption not supported
[  222.189194][T17292] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #2: comm syz.1.3181: corrupted inode contents
[  222.202205][T17292] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #2: comm syz.1.3181: mark_inode_dirty error
[  222.213859][T17292] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #2: comm syz.1.3181: corrupted inode contents
[  222.231831][T17292] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #2: comm syz.1.3181: corrupted inode contents
[  222.391947][T17314] loop3: detected capacity change from 0 to 164
[  222.434479][T17307] infiniband syz!: set down
[  222.455492][T17307] team0 (unregistering): Port device team_slave_0 removed
[  222.526703][T17307] team0 (unregistering): Port device team_slave_1 removed
[  222.568522][T17319] loop3: detected capacity change from 0 to 8192
[  222.584264][T17322] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=22433 sclass=netlink_xfrm_socket pid=17322 comm=syz.0.3190
[  222.715232][T17338] __nla_validate_parse: 11 callbacks suppressed
[  222.715244][T17338] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3194'.
[  222.749463][T17340] netlink: 368 bytes leftover after parsing attributes in process `syz.0.3195'.
[  222.758656][T17340] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  222.767378][T17340] netlink: 'syz.0.3195': attribute type 4 has an invalid length.
[  222.788327][T17342] net_ratelimit: 1156 callbacks suppressed
[  222.788337][T17342] netlink: zone id is out of range
[  222.799372][T17342] netlink: zone id is out of range
[  222.804540][T17342] netlink: zone id is out of range
[  222.809682][T17342] netlink: zone id is out of range
[  222.814786][T17342] netlink: zone id is out of range
[  222.819912][T17342] netlink: zone id is out of range
[  222.825010][T17342] netlink: zone id is out of range
[  222.830115][T17342] netlink: zone id is out of range
[  222.835253][T17342] netlink: zone id is out of range
[  222.840355][T17342] netlink: zone id is out of range
[  222.864722][T17344] loop0: detected capacity change from 0 to 736
[  222.881586][T17344] syz.0.3197[17344] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  222.881980][T17344] syz.0.3197[17344] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  222.896207][T17348] loop9: detected capacity change from 0 to 512
[  222.914590][T17348] EXT4-fs: Ignoring removed orlov option
[  222.921895][T17348] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  222.933365][T17348] EXT4-fs (loop9): orphan cleanup on readonly fs
[  222.940310][T17350] netlink: 'syz.0.3201': attribute type 7 has an invalid length.
[  222.948109][T17350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3201'.
[  222.951563][T17348] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3199: bg 0: block 248: padding at end of block bitmap is not set
[  222.960122][T17355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  222.981881][T17348] EXT4-fs error (device loop9): ext4_acquire_dquot:6938: comm syz.9.3199: Failed to acquire dquot type 1
[  222.982327][T17355] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  222.998109][T17348] EXT4-fs (loop9): 1 truncate cleaned up
[  223.029046][T17348] lo speed is unknown, defaulting to 1000
[  223.060254][T17348] erspan0 speed is unknown, defaulting to 1000
[  223.113667][T17370] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3205'.
[  223.308449][T17393] usb usb9: usbfs: process 17393 (syz.9.3207) did not claim interface 0 before use
[  223.407739][T17403] loop9: detected capacity change from 0 to 512
[  223.507997][T17413] netlink: 'syz.6.3211': attribute type 6 has an invalid length.
[  223.581587][T17417] veth0_vlan: entered allmulticast mode
[  223.597969][T17417] @: renamed from vlan0 (while UP)
[  223.656146][T17422] netlink: 664 bytes leftover after parsing attributes in process `syz.6.3214'.
[  223.708473][T17432] loop3: detected capacity change from 0 to 512
[  223.764760][T17441] loop3: detected capacity change from 0 to 128
[  223.796493][T17446] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  223.805231][T17446] netlink: 12 bytes leftover after parsing attributes in process `+}[@'.
[  223.818492][T17446] netlink: 12 bytes leftover after parsing attributes in process `+}[@'.
[  223.834044][T17446] netlink: 16 bytes leftover after parsing attributes in process `+}[@'.
[  223.890935][T17453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3225'.
[  223.975021][T15783] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  223.982598][T15783] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  223.990031][T15783] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  223.997409][T15783] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  224.004834][T15783] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  224.012249][T15783] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  224.019622][T15783] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  224.027010][T15783] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  224.034448][T15783] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  224.041832][T15783] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  224.049227][T15783] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  224.056687][T15783] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  224.064235][T15783] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  224.071663][T15783] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  224.079038][T15783] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  224.086411][T15783] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  224.093789][T15783] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  224.101180][T15783] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  224.108611][T15783] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  224.116022][T15783] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  224.123557][T15783] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  224.130956][T15783] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  224.138398][T15783] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  224.145851][T15783] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  224.153229][T15783] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  224.160608][T15783] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  224.168042][T15783] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  224.175416][T15783] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  224.182863][T15783] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  224.190233][T15783] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  224.197612][T15783] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  224.205038][T15783] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  224.212553][T15783] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  224.219993][T15783] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  224.227417][T15783] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  224.234778][T15783] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  224.242152][T15783] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  224.249607][T15783] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  224.257018][T15783] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  224.264400][T15783] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  224.271851][T15783] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  224.279279][T15783] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  224.286668][T15783] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  224.295261][T15783] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  224.351546][T17481] FAULT_INJECTION: forcing a failure.
[  224.351546][T17481] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  224.364640][T17481] CPU: 1 UID: 0 PID: 17481 Comm: syz.6.3237 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0
[  224.375454][T17481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  224.385537][T17481] Call Trace:
[  224.388877][T17481]  <TASK>
[  224.391860][T17481]  dump_stack_lvl+0xf2/0x150
[  224.396542][T17481]  dump_stack+0x15/0x1a
[  224.400813][T17481]  should_fail_ex+0x223/0x230
[  224.405548][T17481]  should_fail+0xb/0x10
[  224.409708][T17481]  should_fail_usercopy+0x1a/0x20
[  224.414801][T17481]  strncpy_from_user+0x25/0x210
[  224.419717][T17481]  ? kmem_cache_alloc_noprof+0x18e/0x320
[  224.425475][T17481]  ? getname_flags+0x81/0x3b0
[  224.430221][T17481]  getname_flags+0xb0/0x3b0
[  224.434729][T17481]  getname+0x17/0x20
[  224.438706][T17481]  __x64_sys_execve+0x40/0x70
[  224.443481][T17481]  x64_sys_call+0x1333/0x2dc0
[  224.448253][T17481]  do_syscall_64+0xc9/0x1c0
[  224.452785][T17481]  ? clear_bhb_loop+0x55/0xb0
[  224.457464][T17481]  ? clear_bhb_loop+0x55/0xb0
[  224.462141][T17481]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.468078][T17481] RIP: 0033:0x7fc88b315d29
[  224.472497][T17481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  224.492105][T17481] RSP: 002b:00007fc889981038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
[  224.500516][T17481] RAX: ffffffffffffffda RBX: 00007fc88b505fa0 RCX: 00007fc88b315d29
[  224.508492][T17481] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000400
[  224.516527][T17481] RBP: 00007fc889981090 R08: 0000000000000000 R09: 0000000000000000
[  224.524555][T17481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  224.532528][T17481] R13: 0000000000000000 R14: 00007fc88b505fa0 R15: 00007ffd42a769b8
[  224.540575][T17481]  </TASK>
[  224.615002][T17486] loop6: detected capacity change from 0 to 1024
[  224.615892][T17484] loop9: detected capacity change from 0 to 1024
[  224.628000][T17484] EXT4-fs: Ignoring removed orlov option
[  224.633763][T17484] EXT4-fs: Ignoring removed nomblk_io_submit option
[  224.651914][T17484] netlink: '4��s': attribute type 178 has an invalid length.
[  224.809076][T17508] SELinux: security_context_str_to_sid (u) failed with errno=-22
[  224.854638][T17513] bond1: entered promiscuous mode
[  224.859849][T17513] bond1: entered allmulticast mode
[  224.866646][T17513] 8021q: adding VLAN 0 to HW filter on device bond1
[  224.911643][T17513] bond1 (unregistering): Released all slaves
[  224.924102][T17511] tmpfs: Unknown parameter 'usrquota_inode_hardlimit'
[  224.975130][T17524] FAULT_INJECTION: forcing a failure.
[  224.975130][T17524] name failslab, interval 1, probability 0, space 0, times 0
[  224.987809][T17524] CPU: 1 UID: 0 PID: 17524 Comm: syz.6.3249 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0
[  224.998699][T17524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  225.008819][T17524] Call Trace:
[  225.012091][T17524]  <TASK>
[  225.015015][T17524]  dump_stack_lvl+0xf2/0x150
[  225.019619][T17524]  dump_stack+0x15/0x1a
[  225.023861][T17524]  should_fail_ex+0x223/0x230
[  225.028626][T17524]  should_failslab+0x8f/0xb0
[  225.033248][T17524]  kmem_cache_alloc_noprof+0x52/0x320
[  225.038693][T17524]  ? alloc_empty_file+0xd0/0x200
[  225.043628][T17524]  alloc_empty_file+0xd0/0x200
[  225.048516][T17524]  path_openat+0x6a/0x1fa0
[  225.052935][T17524]  ? kernelmode_fixup_or_oops+0x58/0xb0
[  225.058483][T17524]  ? exc_page_fault+0x4b6/0x650
[  225.063384][T17524]  ? kernelmode_fixup_or_oops+0x58/0xb0
[  225.069022][T17524]  ? _parse_integer_limit+0x167/0x180
[  225.074398][T17524]  do_filp_open+0x107/0x230
[  225.078959][T17524]  do_open_execat+0xd0/0x280
[  225.083587][T17524]  alloc_bprm+0x28/0x5d0
[  225.087836][T17524]  do_execveat_common+0x134/0x800
[  225.092936][T17524]  __x64_sys_execve+0x5a/0x70
[  225.097615][T17524]  x64_sys_call+0x1333/0x2dc0
[  225.102289][T17524]  do_syscall_64+0xc9/0x1c0
[  225.106786][T17524]  ? clear_bhb_loop+0x55/0xb0
[  225.111491][T17524]  ? clear_bhb_loop+0x55/0xb0
[  225.116164][T17524]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.122113][T17524] RIP: 0033:0x7fc88b315d29
[  225.126559][T17524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  225.146168][T17524] RSP: 002b:00007fc889981038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
[  225.154658][T17524] RAX: ffffffffffffffda RBX: 00007fc88b505fa0 RCX: 00007fc88b315d29
[  225.162628][T17524] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000400
[  225.170667][T17524] RBP: 00007fc889981090 R08: 0000000000000000 R09: 0000000000000000
[  225.178708][T17524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  225.186685][T17524] R13: 0000000000000000 R14: 00007fc88b505fa0 R15: 00007ffd42a769b8
[  225.194786][T17524]  </TASK>
[  225.234935][T17529] loop9: detected capacity change from 0 to 128
[  225.249892][T17529] syz.9.3251[17529] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  225.249910][   T29] kauditd_printk_skb: 327 callbacks suppressed
[  225.249929][   T29] audit: type=1400 audit(213.403:23280): avc:  denied  { mount } for  pid=17528 comm="syz.9.3251" name="/" dev="loop9" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  225.249979][T17529] ==================================================================
[  225.250007][T17529] BUG: KCSAN: data-race in data_push_tail / vsnprintf
[  225.250043][T17529] 
[  225.250051][T17529] write to 0xffffffff88bcb307 of 1 bytes by task 29 on cpu 0:
[  225.250071][T17529]  vsnprintf+0xdd8/0xe30
[  225.250098][T17529]  vscnprintf+0x42/0x90
[  225.250123][T17529]  printk_sprint+0x30/0x2d0
[  225.250151][T17529]  vprintk_store+0x589/0x870
[  225.250177][T17529]  vprintk_emit+0x15e/0x680
[  225.250200][T17529]  _printk_deferred+0x83/0xb0
[  225.250220][T17529]  ___ratelimit+0x294/0x2b0
[  225.250254][T17529]  __printk_ratelimit+0x1c/0x30
[  225.250282][T17529]  kauditd_hold_skb+0x61/0x1b0
[  225.250308][T17529]  kauditd_send_queue+0x288/0x2e0
[  225.250340][T17529]  kauditd_thread+0x42a/0x650
[  225.250366][T17529]  kthread+0x1d1/0x210
[  225.250383][T17529]  ret_from_fork+0x4b/0x60
[  225.250403][T17529]  ret_from_fork_asm+0x1a/0x30
[  225.250427][T17529] 
[  225.250435][T17529] read to 0xffffffff88bcb300 of 8 bytes by task 17529 on cpu 1:
[  225.250454][T17529]  data_push_tail+0x102/0x430
[  225.250480][T17529]  data_alloc+0xbe/0x2c0
[  225.250503][T17529]  prb_reserve+0x85e/0xb60
[  225.250527][T17529]  vprintk_store+0x558/0x870
[  225.250555][T17529]  vprintk_emit+0x15e/0x680
[  225.250579][T17529]  vprintk_default+0x26/0x30
[  225.250603][T17529]  vprintk+0x75/0x80
[  225.250618][T17529]  _printk+0x7a/0xa0
[  225.250637][T17529]  bpf_get_probe_write_proto+0x8b/0x90
[  225.250672][T17529]  bpf_tracing_func_proto+0x596/0x790
[  225.250709][T17529]  raw_tp_prog_func_proto+0x65/0xc0
[  225.250745][T17529]  mark_fastcall_patterns+0x566/0xd10
[  225.250773][T17529]  bpf_check+0x3ec1/0xd5e0
[  225.250799][T17529]  bpf_prog_load+0xed4/0x1070
[  225.250820][T17529]  __sys_bpf+0x463/0x7a0
[  225.250837][T17529]  __x64_sys_bpf+0x43/0x50
[  225.250871][T17529]  x64_sys_call+0x2914/0x2dc0
[  225.250893][T17529]  do_syscall_64+0xc9/0x1c0
[  225.250914][T17529]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.250953][T17529] 
[  225.250959][T17529] value changed: 0x00000000fffff706 -> 0x000a646564657373
[  225.250974][T17529] 
[  225.250980][T17529] Reported by Kernel Concurrency Sanitizer on:
[  225.250991][T17529] CPU: 1 UID: 0 PID: 17529 Comm: syz.9.3251 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0
[  225.251018][T17529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  225.251031][T17529] ==================================================================
[  225.271544][T17533] loop6: detected capacity change from 0 to 4096
[  225.318507][T17529] syz.9.3251[17529] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  225.319787][T17533] EXT4-fs: Ignoring removed nobh option
[  225.347073][T17529] syz.9.3251[17529] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  225.562642][   T29] audit: type=1400 audit(213.703:23281): avc:  denied  { unmount } for  pid=10861 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1