last executing test programs:

2.363223104s ago: executing program 3 (id=131):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS    \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1818e58, &(0x7f0000000140)={[{@nobarrier}, {@grpid}]}, 0x22, 0x63f, &(0x7f0000000d80)="$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") (fail_nth: 11)

1.805163113s ago: executing program 3 (id=144):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS    \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10)
process_mrelease(0xffffffffffffffff, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
accept4$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000006c0)=0x14, 0x80000)
r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xba}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_HASH_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x20000}, 0x0)
sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x50, r5, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x62}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x38}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004005}, 0x24008010)
sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x64, r5, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xe, 0x4d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "f9c717582bdda03f8ba2b0f166a4e6fc"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r3, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0)
sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x14, r3, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0)

1.564275726s ago: executing program 1 (id=146):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000540), 0x84)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0)
perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xc, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

1.563816216s ago: executing program 0 (id=147):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x18, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x1004)

1.539056436s ago: executing program 3 (id=148):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="4af6200071bc7a01001600ff0f000007"], 0x50)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r2)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$TUNGETFEATURES(r3, 0x5452, &(0x7f00000013c0))
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e01, 0x0, @perf_bp={0x0, 0x5}, 0x6c8d, 0x5, 0x0, 0x4, 0x0, 0x6e, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
r5 = dup(r4)
r6 = open(0x0, 0x40542, 0x0)
ftruncate(r6, 0xee72)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc0000000000000014000000000000000000000002"], 0x68}, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)

1.538592426s ago: executing program 0 (id=149):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x87, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
rt_sigtimedwait(0x0, 0x0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0xc3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000180)='syzkaller\x00', 0xfffffff8, 0x70, &(0x7f0000000240)=""/112, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r0, r0], 0x0, 0x10, 0x800, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r2}, 0x18)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x34, 0x18, 0x1, 0x2, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x34}}, 0x0)
r4 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000380)={0xffffffffffffffff, r1})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES32=r0], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r5}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})

1.501795387s ago: executing program 0 (id=150):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r3, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0c00000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804)

1.501221557s ago: executing program 0 (id=151):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socket(0x27, 0x3, 0x80000001)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket(0x15, 0x1, 0x205)
recvmmsg(r2, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x1, 0x0)
r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
writev(r3, &(0x7f0000000bc0)=[{&(0x7f0000000640)="4f7f61bfe7ec271202403a540b524a03bda1e44111dd69d3924090d27ac2f6b2c654d94690a10a33d0", 0x29}], 0x1)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
sendfile(r5, r5, 0x0, 0x40000f63c)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)

1.34684899s ago: executing program 1 (id=154):
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000740)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {<r0=>0xffffffffffffffff}}, './bus\x00'})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='kfree\x00', r1}, 0x10)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV")
r4 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073112300000000008510001002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)

1.32103514s ago: executing program 3 (id=156):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="4af6200071bc7a01001600ff0f000007"], 0x50)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r2)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$TUNGETFEATURES(r3, 0x5452, &(0x7f00000013c0))
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e01, 0x0, @perf_bp={0x0, 0x5}, 0x6c8d, 0x5, 0x0, 0x4, 0x0, 0x6e, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
r5 = dup(r4)
r6 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0)
ftruncate(r6, 0xee72)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r7, 0x0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)

1.233947381s ago: executing program 2 (id=157):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x69, 0x7ffc0005}]})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000080)=0x14)
close(r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
lsm_set_self_attr(0x69, 0x0, 0x11d, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='map_files\x00')
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$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")
r5 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='mm_page_free\x00', r6}, 0x18)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f00000007c0)={0x4, {{0xa, 0x4e23, 0x80, @dev={0xfe, 0x80, '\x00', 0xd}, 0x2}}, 0x0, 0x5, [{{0xa, 0x4e24, 0x6, @local, 0x8}}, {{0xa, 0x4e24, 0x380, @private2, 0xfffff801}}, {{0xa, 0x4e21, 0xfff, @local, 0x10}}, {{0xa, 0x4e24, 0x8000000, @remote, 0x4}}, {{0xa, 0x4e24, 0xc, @loopback, 0x81}}]}, 0x310)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2111, 0x300, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
getdents64(r4, &(0x7f0000000080)=""/95, 0x5f)
lsm_get_self_attr(0x66, &(0x7f0000000680)={0x0, 0x0, 0x105, 0xe5, ""/229}, &(0x7f0000000300)=0x105, 0x0)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/uevent_helper', 0x80800, 0x142)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x9, 0x1, 0xbc2, 0x21281, r2, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4, 0x6, @void, @value, @void, @value}, 0x50)
futimesat(r8, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={{0x77359400}})

1.226799181s ago: executing program 4 (id=158):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0, 0x0, 0xffffffffffffffff}, 0x18)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
semctl$IPC_RMID(0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
sysinfo(&(0x7f0000000580)=""/137)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r0}, 0xc)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x18, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x1004)

1.166345012s ago: executing program 4 (id=159):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r2, 0x1, 0x0, 0x0, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x91}, {0x6}, {0x5}}]}, 0x54}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000003c0)={0x1, &(0x7f0000000380)=[{0x4, 0x4b, 0x8}]})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r3)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x30, r4, 0x1c992a431184d011, 0x70bd26, 0x25dfdc01, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0xc8d0}, 0x4)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), r5)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000017c0)={'wpan0\x00', <r7=>0x0})
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r8, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000000680)={0x40, r6, 0x1, 0x100003, 0x0, {}, [@NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x40}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r9}, 0x10)
r10 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f00000011c0)=[@in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e23, @private=0xa010100}]}, &(0x7f0000000180)=0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r12)
r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r14, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00', <r15=>0x0})
r16 = gettid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r14, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x500, 0x0, 0x2000040}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x3c, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r16}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r11, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, r13, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r15}]}, 0x38}, 0x1, 0x0, 0x0, 0x24044000}, 0x4040c80)

1.119577443s ago: executing program 4 (id=160):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r2, 0x1, 0x0, 0x0, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x91}, {0x6}, {0x5}}]}, 0x54}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000003c0)={0x1, &(0x7f0000000380)=[{0x4, 0x4b, 0x8}]})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r3)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x30, r4, 0x1c992a431184d011, 0x70bd26, 0x25dfdc01, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0xc8d0}, 0x4)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), r5)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000017c0)={'wpan0\x00', <r7=>0x0})
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r8, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000000680)={0x40, r6, 0x1, 0x100003, 0x0, {}, [@NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x40}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r9}, 0x10)
r10 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f00000011c0)=[@in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e23, @private=0xa010100}]}, &(0x7f0000000180)=0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r12)
r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r14, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00', <r15=>0x0})
r16 = gettid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r14, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x500, 0x0, 0x2000040}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x3c, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r16}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r11, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, r13, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r15}]}, 0x38}, 0x1, 0x0, 0x0, 0x24044000}, 0x4040c80)

1.047060674s ago: executing program 4 (id=161):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x7fffffff, 0x10001, 0x0, 0x11, 0xffffffffffffffff, 0x85, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1)
r3 = socket$inet6_dccp(0xa, 0x6, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="fd8d00000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0a0009000180c2000000fdff08000b"], 0x30}}, 0x0)
r5 = open(&(0x7f0000000600)='./bus\x00', 0x0, 0x1f2)
vmsplice(r5, 0x0, 0x0, 0x0)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/sockstat6\x00') (fail_nth: 9)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x6, 0x4, 0x83, 0x8183, r0, 0x81, '\x00', r4, r5, 0x3, 0x3, 0x5, 0xd, @value=r6, @void, @void, @value}, 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r8 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
pread64(r8, &(0x7f0000001240)=""/102400, 0x200000, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
connect$inet6(r6, &(0x7f0000000440)={0xa, 0x4e20, 0x8f, @private0, 0x9}, 0x1c)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000200)=0x9, 0x8, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={<r12=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000000)={'veth1_to_hsr\x00', &(0x7f0000000400)=@ethtool_perm_addr={0x4b, 0x23, "4372073830000000020000000000630000000000b6ac1e5b238b3555e67bfad7c70147"}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r11}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000380)={'wg0\x00', <r13=>0x0})
sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)="79902324bff85947c448bd8de16ad22da468be5f4f18b6e4efa7fa491f9de7cb8677fbd0e2", 0x25}, {&(0x7f0000000680)="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", 0xfd}, {&(0x7f00000002c0)="f1d86285bddacec1cd057a823b24c0e173e3e4f8650345be14a928fbad9221", 0x1f}], 0x3, &(0x7f0000000540)=[@ip_retopts={{0x20, 0x0, 0x7, {[@ra={0x94, 0x4}, @generic={0x5e, 0x9, "7067d18d49cd0d"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @rand_addr=0x64010100, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffff800}}], 0x58}, 0x80)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r15 = openat$cgroup_int(r14, &(0x7f0000000340)='cpuset.sched_load_balance\x00', 0x2, 0x0)
write$cgroup_int(r15, 0x0, 0x0)

753.444278ms ago: executing program 2 (id=162):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r3, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0c00000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804)

571.584821ms ago: executing program 0 (id=163):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x80000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='kfree\x00', r2}, 0x18)
fallocate(r0, 0x0, 0x0, 0x8000c62)

540.736542ms ago: executing program 1 (id=164):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000a40000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x0, 0x81, 0x0, 0x2, 0x0, 0x7e150a0b, 0xffff, 0x5, 0x0, 0x80000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x0, 0x1007, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e982638, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0xd2d1, 0x0, 0x1, 0x4000b2e, 0x52f7, 0x0, 0x0, 0xfffffffe, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x26, 0x800, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0x80c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x3, 0x8, 0x0, 0x14, 0x1e, 0x0, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1000, 0x100, 0x7f0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0xff, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x153, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xffffffff, 0x400, 0xfffffff0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0x101, 0x0, 0x0, 0xffffffff}, 0x9, 0xf, 0x2000000}}]}}]}, 0x45c}}, 0x0) (fail_nth: 3)

540.270532ms ago: executing program 2 (id=165):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000540), 0x84)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xc, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

430.961463ms ago: executing program 1 (id=166):
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1018000, &(0x7f00000009c0)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES16=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC], 0x1, 0x2ee, &(0x7f00000006c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00')

418.553234ms ago: executing program 4 (id=167):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000600000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 10)

405.680244ms ago: executing program 2 (id=168):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x20, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x24044836}, 0xc0d0)

311.580585ms ago: executing program 1 (id=169):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0, 0x0, 0xffffffffffffffff}, 0x18)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
semctl$IPC_RMID(0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
sysinfo(&(0x7f0000000580)=""/137)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r0}, 0xc)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x18, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x1004)

310.798965ms ago: executing program 3 (id=170):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r2, 0x1, 0x0, 0x0, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x91}, {0x6}, {0x5}}]}, 0x54}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000003c0)={0x1, &(0x7f0000000380)=[{0x4, 0x4b, 0x8}]})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r3)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x30, r4, 0x1c992a431184d011, 0x70bd26, 0x25dfdc01, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0xc8d0}, 0x4)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), r5)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000017c0)={'wpan0\x00', <r7=>0x0})
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r8, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000000680)={0x40, r6, 0x1, 0x100003, 0x0, {}, [@NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x40}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r9}, 0x10)
r10 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f00000011c0)=[@in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e23, @private=0xa010100}]}, &(0x7f0000000180)=0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r12)
r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r14, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00', <r15=>0x0})
r16 = gettid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r14, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x500, 0x0, 0x2000040}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x3c, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r16}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r11, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, r13, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r15}]}, 0x38}, 0x1, 0x0, 0x0, 0x24044000}, 0x4040c80)

294.347325ms ago: executing program 2 (id=171):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS    \x00'}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000540), 0x84)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xc, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r3, 0x0)

128.685458ms ago: executing program 0 (id=172):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/vmallocinfo\x00', 0x0, 0x0)
read$hiddev(r1, &(0x7f00000000c0)=""/4092, 0xffc)
pread64(r1, &(0x7f00000013c0)=""/208, 0xd0, 0x800)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001140), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000640)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fbd1df2504000000140001800800050001000000060009"], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000)
sched_setattr(0x0, &(0x7f0000000140)={0x82}, 0x0)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4008, 0x2)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{0xffffffffffffffff, <r3=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)="110000", 0x3}, 0x1, 0x0, 0x0, 0x4000081}, 0x4c0e4)
getgid()

79.166358ms ago: executing program 4 (id=173):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000540), 0x84)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0)
perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xc, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r3, 0x0)

78.383718ms ago: executing program 3 (id=174):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x69, 0x7ffc0005}]})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000080)=0x14)
close(r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
lsm_set_self_attr(0x69, 0x0, 0x11d, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='map_files\x00')
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$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")
r5 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='mm_page_free\x00', r6}, 0x18)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f00000007c0)={0x4, {{0xa, 0x4e23, 0x80, @dev={0xfe, 0x80, '\x00', 0xd}, 0x2}}, 0x0, 0x5, [{{0xa, 0x4e24, 0x6, @local, 0x8}}, {{0xa, 0x4e24, 0x380, @private2, 0xfffff801}}, {{0xa, 0x4e21, 0xfff, @local, 0x10}}, {{0xa, 0x4e24, 0x8000000, @remote, 0x4}}, {{0xa, 0x4e24, 0xc, @loopback, 0x81}}]}, 0x310)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2111, 0x300, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
getdents64(r4, &(0x7f0000000080)=""/95, 0x5f)
lsm_get_self_attr(0x66, &(0x7f0000000680)={0x0, 0x0, 0x105, 0xe5, ""/229}, &(0x7f0000000300)=0x105, 0x0)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/uevent_helper', 0x80800, 0x142)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x9, 0x1, 0xbc2, 0x21281, r2, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4, 0x6, @void, @value, @void, @value}, 0x50)
futimesat(r8, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={{0x77359400}})

24.486799ms ago: executing program 1 (id=175):
socket$nl_rdma(0x10, 0x3, 0x14)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={<r1=>0xffffffffffffffff}, 0x39, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000140)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r1}}, 0x18)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001200)='/proc/vmallocinfo\x00', 0x0, 0x0)
pread64(r2, &(0x7f00000010c0)=""/173, 0xad, 0x101)
r3 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r3, &(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10)
sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001014013b00000000fedbdf2508000300000000000800cf0004000000"], 0x20}, 0x1, 0x0, 0x0, 0xc084}, 0x488d1)

0s ago: executing program 2 (id=176):
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x21004a, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}})

kernel console output (not intermixed with test programs):



syzkaller
syzkaller login: [   18.231631][   T29] kauditd_printk_skb: 64 callbacks suppressed
[   18.231648][   T29] audit: type=1400 audit(1743406992.567:76): avc:  denied  { transition } for  pid=3181 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   18.235820][   T29] audit: type=1400 audit(1743406992.567:77): avc:  denied  { noatsecure } for  pid=3181 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   18.238956][   T29] audit: type=1400 audit(1743406992.567:78): avc:  denied  { write } for  pid=3181 comm="sh" path="pipe:[851]" dev="pipefs" ino=851 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   18.242145][   T29] audit: type=1400 audit(1743406992.567:79): avc:  denied  { rlimitinh } for  pid=3181 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   18.244893][   T29] audit: type=1400 audit(1743406992.567:80): avc:  denied  { siginh } for  pid=3181 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   22.096936][   T29] audit: type=1400 audit(1743406996.427:81): avc:  denied  { read } for  pid=2987 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
Warning: Permanently added '10.128.0.164' (ED25519) to the list of known hosts.
[   26.370073][   T29] audit: type=1400 audit(1743407000.707:82): avc:  denied  { mounton } for  pid=3291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   26.371125][ T3291] cgroup: Unknown subsys name 'net'
[   26.392844][   T29] audit: type=1400 audit(1743407000.707:83): avc:  denied  { mount } for  pid=3291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   26.420211][   T29] audit: type=1400 audit(1743407000.727:84): avc:  denied  { unmount } for  pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   26.559420][ T3291] cgroup: Unknown subsys name 'cpuset'
[   26.565615][ T3291] cgroup: Unknown subsys name 'rlimit'
[   26.696057][   T29] audit: type=1400 audit(1743407001.027:85): avc:  denied  { setattr } for  pid=3291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   26.719335][   T29] audit: type=1400 audit(1743407001.027:86): avc:  denied  { create } for  pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   26.739899][   T29] audit: type=1400 audit(1743407001.027:87): avc:  denied  { write } for  pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   26.760343][   T29] audit: type=1400 audit(1743407001.027:88): avc:  denied  { read } for  pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   26.780658][   T29] audit: type=1400 audit(1743407001.037:89): avc:  denied  { mounton } for  pid=3291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   26.787948][ T3295] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   26.805506][   T29] audit: type=1400 audit(1743407001.037:90): avc:  denied  { mount } for  pid=3291 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   26.837659][   T29] audit: type=1400 audit(1743407001.177:91): avc:  denied  { relabelto } for  pid=3295 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   26.885595][ T3291] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   28.058927][ T3303] chnl_net:caif_netlink_parms(): no params data found
[   28.074180][ T3304] chnl_net:caif_netlink_parms(): no params data found
[   28.095148][ T3308] chnl_net:caif_netlink_parms(): no params data found
[   28.117963][ T3311] chnl_net:caif_netlink_parms(): no params data found
[   28.232384][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.239616][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.246986][ T3303] bridge_slave_0: entered allmulticast mode
[   28.253505][ T3303] bridge_slave_0: entered promiscuous mode
[   28.261971][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.269168][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.276346][ T3303] bridge_slave_1: entered allmulticast mode
[   28.282948][ T3303] bridge_slave_1: entered promiscuous mode
[   28.289117][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.296231][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.303474][ T3304] bridge_slave_0: entered allmulticast mode
[   28.309827][ T3304] bridge_slave_0: entered promiscuous mode
[   28.318497][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.325811][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.333037][ T3304] bridge_slave_1: entered allmulticast mode
[   28.339602][ T3304] bridge_slave_1: entered promiscuous mode
[   28.350877][ T3302] chnl_net:caif_netlink_parms(): no params data found
[   28.374739][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.381865][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.389043][ T3308] bridge_slave_0: entered allmulticast mode
[   28.395524][ T3308] bridge_slave_0: entered promiscuous mode
[   28.404982][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.412115][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.419434][ T3308] bridge_slave_1: entered allmulticast mode
[   28.425852][ T3308] bridge_slave_1: entered promiscuous mode
[   28.454354][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   28.468398][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.475565][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.482843][ T3311] bridge_slave_0: entered allmulticast mode
[   28.489396][ T3311] bridge_slave_0: entered promiscuous mode
[   28.496876][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   28.506289][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.513383][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.520598][ T3311] bridge_slave_1: entered allmulticast mode
[   28.526968][ T3311] bridge_slave_1: entered promiscuous mode
[   28.539008][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   28.549400][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   28.559477][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   28.569796][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   28.611282][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   28.645907][ T3308] team0: Port device team_slave_0 added
[   28.652733][ T3308] team0: Port device team_slave_1 added
[   28.659409][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   28.683901][ T3303] team0: Port device team_slave_0 added
[   28.690596][ T3303] team0: Port device team_slave_1 added
[   28.696929][ T3304] team0: Port device team_slave_0 added
[   28.717104][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.724288][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.732936][ T3302] bridge_slave_0: entered allmulticast mode
[   28.739449][ T3302] bridge_slave_0: entered promiscuous mode
[   28.751001][ T3304] team0: Port device team_slave_1 added
[   28.762090][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0
[   28.769080][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.795070][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   28.806470][ T3311] team0: Port device team_slave_0 added
[   28.812370][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.819467][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.826850][ T3302] bridge_slave_1: entered allmulticast mode
[   28.833276][ T3302] bridge_slave_1: entered promiscuous mode
[   28.845055][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0
[   28.852032][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.878265][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   28.889542][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1
[   28.896702][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.925360][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   28.936768][ T3311] team0: Port device team_slave_1 added
[   28.957866][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1
[   28.964922][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.990916][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.018397][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.025480][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.051436][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.067769][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.074849][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.101086][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.112378][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.119467][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.145479][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.157355][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.172968][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.180032][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.206126][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.235994][ T3308] hsr_slave_0: entered promiscuous mode
[   29.241982][ T3308] hsr_slave_1: entered promiscuous mode
[   29.250479][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.264180][ T3303] hsr_slave_0: entered promiscuous mode
[   29.270993][ T3303] hsr_slave_1: entered promiscuous mode
[   29.276880][ T3303] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   29.284530][ T3303] Cannot create hsr debugfs directory
[   29.321974][ T3311] hsr_slave_0: entered promiscuous mode
[   29.328035][ T3311] hsr_slave_1: entered promiscuous mode
[   29.334089][ T3311] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   29.341783][ T3311] Cannot create hsr debugfs directory
[   29.347983][ T3302] team0: Port device team_slave_0 added
[   29.354819][ T3302] team0: Port device team_slave_1 added
[   29.387075][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.394297][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.420244][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.449147][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.456183][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.482119][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.507192][ T3304] hsr_slave_0: entered promiscuous mode
[   29.513424][ T3304] hsr_slave_1: entered promiscuous mode
[   29.519525][ T3304] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   29.527115][ T3304] Cannot create hsr debugfs directory
[   29.583749][ T3302] hsr_slave_0: entered promiscuous mode
[   29.590041][ T3302] hsr_slave_1: entered promiscuous mode
[   29.595799][ T3302] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   29.603397][ T3302] Cannot create hsr debugfs directory
[   29.722204][ T3308] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   29.733620][ T3308] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   29.744327][ T3308] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   29.759388][ T3308] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   29.776121][ T3303] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   29.784802][ T3303] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   29.795194][ T3303] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   29.806197][ T3303] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   29.828135][ T3311] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   29.837220][ T3311] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   29.856337][ T3311] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   29.868387][ T3311] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   29.885315][ T3304] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   29.905139][ T3304] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   29.917869][ T3304] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   29.926898][ T3304] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   29.952505][ T3302] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   29.967656][ T3302] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   29.977117][ T3302] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   29.995103][ T3302] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   30.033553][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.074065][ T3308] 8021q: adding VLAN 0 to HW filter on device team0
[   30.091226][ T1867] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.098380][ T1867] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.108211][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.121561][ T1867] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.128661][ T1867] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.138296][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.148557][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.160886][ T3303] 8021q: adding VLAN 0 to HW filter on device team0
[   30.190288][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.197385][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.207363][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.214524][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.226214][ T3304] 8021q: adding VLAN 0 to HW filter on device team0
[   30.244526][ T3311] 8021q: adding VLAN 0 to HW filter on device team0
[   30.257258][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.267506][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.274701][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.285712][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.292912][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.310023][ T3302] 8021q: adding VLAN 0 to HW filter on device team0
[   30.321230][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.328329][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.345278][ T1867] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.352410][ T1867] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.372037][ T1867] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.379144][ T1867] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.389607][ T1867] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.396744][ T1867] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.415765][ T3304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   30.426230][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   30.475711][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.527875][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.566638][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.604627][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.620503][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.683632][ T3304] veth0_vlan: entered promiscuous mode
[   30.694701][ T3308] veth0_vlan: entered promiscuous mode
[   30.707774][ T3304] veth1_vlan: entered promiscuous mode
[   30.731588][ T3308] veth1_vlan: entered promiscuous mode
[   30.758162][ T3304] veth0_macvtap: entered promiscuous mode
[   30.769628][ T3304] veth1_macvtap: entered promiscuous mode
[   30.794956][ T3311] veth0_vlan: entered promiscuous mode
[   30.806254][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0
[   30.820802][ T3302] veth0_vlan: entered promiscuous mode
[   30.829306][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1
[   30.842222][ T3311] veth1_vlan: entered promiscuous mode
[   30.850401][ T3304] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   30.859411][ T3304] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   30.868167][ T3304] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   30.877034][ T3304] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   30.892799][ T3303] veth0_vlan: entered promiscuous mode
[   30.899396][ T3302] veth1_vlan: entered promiscuous mode
[   30.922400][ T3308] veth0_macvtap: entered promiscuous mode
[   30.930964][ T3308] veth1_macvtap: entered promiscuous mode
[   30.937946][ T3303] veth1_vlan: entered promiscuous mode
[   30.950859][ T3311] veth0_macvtap: entered promiscuous mode
[   30.962528][ T3304] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   30.966543][ T3302] veth0_macvtap: entered promiscuous mode
[   30.991397][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.002015][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.012713][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.023298][ T3302] veth1_macvtap: entered promiscuous mode
[   31.034901][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.045423][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.055343][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.065917][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.076614][ T3442] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3442 comm=syz.0.1
[   31.076775][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.097073][ T3311] veth1_macvtap: entered promiscuous mode
[   31.113526][ T3303] veth0_macvtap: entered promiscuous mode
[   31.130881][ T3303] veth1_macvtap: entered promiscuous mode
[   31.138108][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.148774][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.159533][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.168505][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.179006][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.188900][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.199372][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.210693][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.226226][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.236780][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.246637][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.257105][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.266962][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.277500][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.289198][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.297535][ T3308] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.306310][ T3308] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.315160][ T3308] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.323995][ T3308] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.337532][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.348220][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.358181][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.368923][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.378785][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.389289][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.399202][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.409668][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.420657][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.432185][ T3302] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.441008][ T3302] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.449851][ T3302] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.458627][ T3302] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.469533][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.480025][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.490028][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.500487][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.510476][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.520953][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.532307][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.544298][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.554920][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.564850][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.575358][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.585216][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.595748][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.605655][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.616133][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.616143][   T29] kauditd_printk_skb: 40 callbacks suppressed
[   31.616158][   T29] audit: type=1400 audit(1743407005.937:132): avc:  denied  { create } for  pid=3476 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   31.627345][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.632061][   T29] audit: type=1400 audit(1743407005.937:133): avc:  denied  { write } for  pid=3476 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   31.677295][   T29] audit: type=1400 audit(1743407005.937:134): avc:  denied  { map_read map_write } for  pid=3476 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   31.696993][   T29] audit: type=1400 audit(1743407005.937:135): avc:  denied  { create } for  pid=3476 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   31.703035][ T3303] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.717322][   T29] audit: type=1400 audit(1743407005.937:136): avc:  denied  { write } for  pid=3476 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   31.726056][ T3303] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.755012][ T3303] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.763900][ T3303] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.774008][    C0] hrtimer: interrupt took 27352 ns
[   31.792297][ T3311] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.801076][ T3311] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.809876][ T3311] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.818668][ T3311] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.905035][   T29] audit: type=1400 audit(1743407006.237:137): avc:  denied  { prog_run } for  pid=3476 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   31.978964][   T29] audit: type=1400 audit(1743407006.287:138): avc:  denied  { create } for  pid=3485 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   31.999063][   T29] audit: type=1400 audit(1743407006.287:139): avc:  denied  { write } for  pid=3485 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   32.018836][   T29] audit: type=1400 audit(1743407006.307:140): avc:  denied  { create } for  pid=3484 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   32.053811][ T3491] =======================================================
[   32.053811][ T3491] WARNING: The mand mount option has been deprecated and
[   32.053811][ T3491]          and is ignored by this kernel. Remove the mand
[   32.053811][ T3491]          option from the mount to silence this warning.
[   32.053811][ T3491] =======================================================
[   32.094308][ T3477] loop0: detected capacity change from 0 to 512
[   32.108867][ T3490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'.
[   32.117435][   T29] audit: type=1400 audit(1743407006.347:141): avc:  denied  { ioctl } for  pid=3484 comm="syz.4.5" path="socket:[4232]" dev="sockfs" ino=4232 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   32.197047][ T3497] loop2: detected capacity change from 0 to 1024
[   32.205651][ T3497] EXT4-fs: Ignoring removed nobh option
[   32.211304][ T3497] EXT4-fs: Ignoring removed bh option
[   32.224000][ T3477] EXT4-fs (loop0): too many log groups per flexible block group
[   32.231940][ T3477] EXT4-fs (loop0): failed to initialize mballoc (-12)
[   32.252435][ T3477] EXT4-fs (loop0): mount failed
[   32.285745][ T3497] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   32.325376][ T3497] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4115: comm syz.2.9: Allocating blocks 385-513 which overlap fs metadata
[   32.376301][ T3497] EXT4-fs (loop2): pa ffff888106953000: logic 16, phys. 129, len 24
[   32.384392][ T3497] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8
[   32.397167][ T3497] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28
[   32.398244][ T3512] loop1: detected capacity change from 0 to 1024
[   32.409570][ T3497] EXT4-fs (loop2): This should not happen!! Data will be lost
[   32.409570][ T3497] 
[   32.409593][ T3497] EXT4-fs (loop2): Total free blocks count 0
[   32.431825][ T3497] EXT4-fs (loop2): Free/Dirty block details
[   32.437785][ T3497] EXT4-fs (loop2): free_blocks=128
[   32.440691][ T3512] EXT4-fs: Ignoring removed nobh option
[   32.443000][ T3497] EXT4-fs (loop2): dirty_blocks=0
[   32.448690][ T3512] EXT4-fs: Ignoring removed bh option
[   32.453688][ T3497] EXT4-fs (loop2): Block reservation details
[   32.453713][ T3497] EXT4-fs (loop2): i_reserved_data_blocks=0
[   32.489102][ T3497] syz.2.9 (3497) used greatest stack depth: 9544 bytes left
[   32.491821][ T3512] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   32.534521][ T3517] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[   32.541123][ T3517] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   32.548815][ T3517] vhci_hcd vhci_hcd.0: Device attached
[   32.555215][ T3512] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4115: comm syz.1.12: Allocating blocks 385-513 which overlap fs metadata
[   32.576701][ T3517] loop2: detected capacity change from 0 to 256
[   32.580137][ T3509] EXT4-fs (loop1): pa ffff8881068f4000: logic 16, phys. 129, len 24
[   32.591087][ T3509] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8
[   32.600524][ T3523] loop4: detected capacity change from 0 to 1024
[   32.611820][ T3523] EXT4-fs: Ignoring removed nobh option
[   32.617534][ T3523] EXT4-fs: Ignoring removed bh option
[   32.624074][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.655331][ T3523] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   32.705536][ T3523] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4115: comm syz.4.16: Allocating blocks 385-513 which overlap fs metadata
[   32.773826][ T3530] ref_ctr increment failed for inode: 0x22 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810005a680
[   32.792621][ T3523] EXT4-fs (loop4): pa ffff888106953070: logic 16, phys. 129, len 24
[   32.800778][ T3523] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8
[   32.808461][ T3529] uprobe: syz.1.18:3529 failed to unregister, leaking uprobe
[   32.818711][   T23] usb 5-1: new high-speed USB device number 2 using vhci_hcd
[   32.827157][ T3523] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28
[   32.839711][ T3523] EXT4-fs (loop4): This should not happen!! Data will be lost
[   32.839711][ T3523] 
[   32.849999][ T3523] EXT4-fs (loop4): Total free blocks count 0
[   32.856345][ T3523] EXT4-fs (loop4): Free/Dirty block details
[   32.862468][ T3523] EXT4-fs (loop4): free_blocks=128
[   32.869115][ T3523] EXT4-fs (loop4): dirty_blocks=0
[   32.874352][ T3523] EXT4-fs (loop4): Block reservation details
[   32.880469][ T3523] EXT4-fs (loop4): i_reserved_data_blocks=0
[   32.896871][ T3518] vhci_hcd: connection reset by peer
[   32.908742][   T37] vhci_hcd: stop threads
[   32.913021][   T37] vhci_hcd: release socket
[   32.917476][   T37] vhci_hcd: disconnect device
[   32.963455][ T3534] loop4: detected capacity change from 0 to 1024
[   32.970238][ T3534] EXT4-fs: Ignoring removed nobh option
[   32.975877][ T3534] EXT4-fs: Ignoring removed bh option
[   33.013368][ T3534] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   33.033022][ T3534] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4115: comm syz.4.19: Allocating blocks 385-513 which overlap fs metadata
[   33.060952][ T3534] EXT4-fs (loop4): pa ffff8881069530e0: logic 16, phys. 129, len 24
[   33.069107][ T3534] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8
[   33.082076][ T3534] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28
[   33.094405][ T3534] EXT4-fs (loop4): This should not happen!! Data will be lost
[   33.094405][ T3534] 
[   33.104320][ T3534] EXT4-fs (loop4): Total free blocks count 0
[   33.110360][ T3534] EXT4-fs (loop4): Free/Dirty block details
[   33.116382][ T3534] EXT4-fs (loop4): free_blocks=128
[   33.121623][ T3534] EXT4-fs (loop4): dirty_blocks=0
[   33.126665][ T3534] EXT4-fs (loop4): Block reservation details
[   33.132719][ T3534] EXT4-fs (loop4): i_reserved_data_blocks=0
[   33.253055][ T3556] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   33.513235][ T3574] hub 9-0:1.0: USB hub found
[   33.517984][ T3574] hub 9-0:1.0: 8 ports detected
[   33.957548][ T3558] loop3: detected capacity change from 0 to 512
[   33.969328][ T3558] ext4: Unknown parameter 'smackfsfloor'
[   34.008741][ T3587] ref_ctr increment failed for inode: 0x2e offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810005cd00
[   34.028013][ T3586] uprobe: syz.4.28:3586 failed to unregister, leaking uprobe
[   34.111428][ T3577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=3577 comm=syz.3.25
[   34.279620][ T3603] ref_ctr increment failed for inode: 0x29 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810005e880
[   34.292450][ T3602] uprobe: syz.3.34:3602 failed to unregister, leaking uprobe
[   34.361926][ T3609] loop4: detected capacity change from 0 to 128
[   34.489265][ T3623] loop0: detected capacity change from 0 to 1024
[   34.496557][ T3623] EXT4-fs: Ignoring removed nobh option
[   34.502425][ T3623] EXT4-fs: Ignoring removed bh option
[   34.535063][ T3623] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.553490][ T3623] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4115: comm syz.0.40: Allocating blocks 385-513 which overlap fs metadata
[   34.570839][ T3623] EXT4-fs (loop0): pa ffff888106953150: logic 16, phys. 129, len 24
[   34.578952][ T3623] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8
[   34.580197][ T3628] xt_cgroup: xt_cgroup: no path or classid specified
[   34.592566][ T3623] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28
[   34.607871][ T3623] EXT4-fs (loop0): This should not happen!! Data will be lost
[   34.607871][ T3623] 
[   34.617611][ T3623] EXT4-fs (loop0): Total free blocks count 0
[   34.619070][ T3628] delete_channel: no stack
[   34.623705][ T3623] EXT4-fs (loop0): Free/Dirty block details
[   34.628562][ T3628] delete_channel: no stack
[   34.634065][ T3623] EXT4-fs (loop0): free_blocks=128
[   34.634084][ T3623] EXT4-fs (loop0): dirty_blocks=0
[   34.634095][ T3623] EXT4-fs (loop0): Block reservation details
[   34.634107][ T3623] EXT4-fs (loop0): i_reserved_data_blocks=0
[   34.687785][ T3635] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[   34.690847][ T3634] IPVS: stopping master sync thread 3635 ...
[   34.860220][ T3648] ref_ctr increment failed for inode: 0x64 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88811b7d4780
[   34.878074][ T3647] uprobe: syz.1.50:3647 failed to unregister, leaking uprobe
[   34.935834][ T3652] infiniband syz0: set active
[   34.940811][ T3652] infiniband syz0: added bond0
[   34.952889][ T3652] RDS/IB: syz0: added
[   34.956986][ T3652] smc: adding ib device syz0 with port count 1
[   34.964192][ T3652] smc:    ib device syz0 port 1 has pnetid 
[   34.976706][ T3656] loop0: detected capacity change from 0 to 1024
[   34.989018][ T3656] EXT4-fs: Ignoring removed nobh option
[   34.994693][ T3656] EXT4-fs: Ignoring removed bh option
[   35.010999][ T3659] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3659 comm=syz.1.54
[   35.020587][ T3656] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.039594][ T3654] netlink: 28 bytes leftover after parsing attributes in process `syz.4.53'.
[   35.062433][ T3656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   35.072764][ T3656] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   35.115815][ T3656] ALSA: seq fatal error: cannot create timer (-19)
[   35.201043][ T3666] smc: removing ib device syz0
[   35.443826][ T3670] ref_ctr increment failed for inode: 0x3a offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810005cd00
[   35.455450][ T3669] uprobe: syz.3.57:3669 failed to unregister, leaking uprobe
[   35.547166][ T3675] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3675 comm=syz.3.59
[   35.592224][ T3677] netlink: 16 bytes leftover after parsing attributes in process `syz.3.60'.
[   35.742171][ T3681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   35.758833][ T3681] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   35.784450][ T3683] loop3: detected capacity change from 0 to 1024
[   35.800816][ T3683] EXT4-fs: Ignoring removed nobh option
[   35.806474][ T3683] EXT4-fs: Ignoring removed bh option
[   35.830573][ T3683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   35.866320][ T3687] loop4: detected capacity change from 0 to 1024
[   35.879990][ T3683] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4115: comm syz.3.62: Allocating blocks 385-513 which overlap fs metadata
[   35.918122][ T3687] EXT4-fs: Ignoring removed nobh option
[   35.923884][ T3687] EXT4-fs: Ignoring removed bh option
[   35.933946][ T3683] EXT4-fs (loop3): pa ffff8881068f4000: logic 16, phys. 129, len 24
[   35.942107][ T3683] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8
[   35.970952][ T3683] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28
[   35.983247][ T3683] EXT4-fs (loop3): This should not happen!! Data will be lost
[   35.983247][ T3683] 
[   35.993596][ T3683] EXT4-fs (loop3): Total free blocks count 0
[   35.999643][ T3683] EXT4-fs (loop3): Free/Dirty block details
[   36.000676][ T3687] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.005539][ T3683] EXT4-fs (loop3): free_blocks=128
[   36.005555][ T3683] EXT4-fs (loop3): dirty_blocks=0
[   36.005568][ T3683] EXT4-fs (loop3): Block reservation details
[   36.005580][ T3683] EXT4-fs (loop3): i_reserved_data_blocks=0
[   36.045872][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.088897][ T3687] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4115: comm syz.4.63: Allocating blocks 385-513 which overlap fs metadata
[   36.103200][ T3695] x_tables: duplicate underflow at hook 3
[   36.110852][ T3694] ref_ctr increment failed for inode: 0x60 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88811b7d5280
[   36.117026][ T3686] EXT4-fs (loop4): pa ffff8881069531c0: logic 16, phys. 129, len 24
[   36.130168][ T3686] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8
[   36.131098][ T3693] uprobe: syz.0.65:3693 failed to unregister, leaking uprobe
[   36.185715][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.203492][ T3698] loop3: detected capacity change from 0 to 1024
[   36.213644][ T3698] EXT4-fs: Ignoring removed nobh option
[   36.219266][ T3698] EXT4-fs: Ignoring removed bh option
[   36.256831][ T3698] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.324162][ T3704] ref_ctr increment failed for inode: 0x66 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810005a680
[   36.347113][ T3703] uprobe: syz.0.68:3703 failed to unregister, leaking uprobe
[   36.382381][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.426676][ T3709] loop3: detected capacity change from 0 to 128
[   36.657185][   T29] kauditd_printk_skb: 122 callbacks suppressed
[   36.657203][   T29] audit: type=1400 audit(1743407010.987:264): avc:  denied  { mounton } for  pid=3712 comm="syz.3.72" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=75 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[   36.713501][   T29] audit: type=1326 audit(1743407010.987:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3712 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec20b2d169 code=0x7ffc0000
[   36.737105][   T29] audit: type=1326 audit(1743407010.987:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3712 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec20b2d169 code=0x7ffc0000
[   36.760365][   T29] audit: type=1326 audit(1743407010.987:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3712 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fec20b2d169 code=0x7ffc0000
[   36.783569][   T29] audit: type=1326 audit(1743407010.987:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3712 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec20b2d169 code=0x7ffc0000
[   36.806946][   T29] audit: type=1326 audit(1743407010.987:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3712 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec20b2d169 code=0x7ffc0000
[   36.808412][ T3717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.71'.
[   36.830467][   T29] audit: type=1326 audit(1743407010.987:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3712 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec20b2d169 code=0x7ffc0000
[   36.862485][   T29] audit: type=1326 audit(1743407010.987:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3712 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec20b2d169 code=0x7ffc0000
[   36.885779][   T29] audit: type=1326 audit(1743407010.987:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3712 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec20b2d169 code=0x7ffc0000
[   36.909146][   T29] audit: type=1326 audit(1743407010.987:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3712 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec20b2d169 code=0x7ffc0000
[   36.932540][ T3688] dccp_close: ABORT with 124 bytes unread
[   36.984945][ T3723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.75'.
[   37.027420][ T3727] loop1: detected capacity change from 0 to 1024
[   37.036764][ T3727] EXT4-fs: Ignoring removed nobh option
[   37.042633][ T3727] EXT4-fs: Ignoring removed bh option
[   37.076558][ T3727] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.102737][ T3727] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4115: comm syz.1.77: Allocating blocks 385-513 which overlap fs metadata
[   37.120377][ T3727] EXT4-fs (loop1): pa ffff8881069531c0: logic 16, phys. 129, len 24
[   37.128432][ T3727] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8
[   37.141034][ T3727] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28
[   37.153456][ T3727] EXT4-fs (loop1): This should not happen!! Data will be lost
[   37.153456][ T3727] 
[   37.161497][ T3736] loop4: detected capacity change from 0 to 1024
[   37.163115][ T3727] EXT4-fs (loop1): Total free blocks count 0
[   37.175492][ T3727] EXT4-fs (loop1): Free/Dirty block details
[   37.181529][ T3727] EXT4-fs (loop1): free_blocks=128
[   37.186695][ T3727] EXT4-fs (loop1): dirty_blocks=0
[   37.192040][ T3727] EXT4-fs (loop1): Block reservation details
[   37.193730][ T3736] EXT4-fs: Ignoring removed nobh option
[   37.198074][ T3727] EXT4-fs (loop1): i_reserved_data_blocks=0
[   37.210144][ T3736] EXT4-fs: Ignoring removed bh option
[   37.263466][ T3736] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.297605][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.318868][ T3746] ref_ctr increment failed for inode: 0x78 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88811b7d5280
[   37.330796][ T3745] uprobe: syz.3.84:3745 failed to unregister, leaking uprobe
[   37.351352][ T3750] FAULT_INJECTION: forcing a failure.
[   37.351352][ T3750] name failslab, interval 1, probability 0, space 0, times 1
[   37.364091][ T3750] CPU: 1 UID: 0 PID: 3750 Comm: syz.4.86 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) 
[   37.364171][ T3750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   37.364184][ T3750] Call Trace:
[   37.364190][ T3750]  <TASK>
[   37.364197][ T3750]  dump_stack_lvl+0xf6/0x150
[   37.364218][ T3750]  dump_stack+0x15/0x1a
[   37.364251][ T3750]  should_fail_ex+0x261/0x270
[   37.364269][ T3750]  should_failslab+0x8f/0xb0
[   37.364290][ T3750]  __kmalloc_cache_noprof+0x55/0x320
[   37.364350][ T3750]  ? audit_log_d_path+0x8e/0x150
[   37.364370][ T3750]  audit_log_d_path+0x8e/0x150
[   37.364389][ T3750]  audit_log_d_path_exe+0x42/0x70
[   37.364454][ T3750]  audit_log_task+0x1f1/0x250
[   37.364471][ T3750]  audit_seccomp+0x68/0x130
[   37.364494][ T3750]  __seccomp_filter+0x694/0x10e0
[   37.364547][ T3750]  ? __rcu_read_unlock+0x4e/0x70
[   37.364570][ T3750]  ? mntput_no_expire+0x73/0x3e0
[   37.364592][ T3750]  __secure_computing+0x7e/0x160
[   37.364616][ T3750]  syscall_trace_enter+0xcf/0x1f0
[   37.364650][ T3750]  ? fpregs_assert_state_consistent+0x83/0xa0
[   37.364678][ T3750]  do_syscall_64+0xaa/0x1c0
[   37.364695][ T3750]  ? clear_bhb_loop+0x25/0x80
[   37.364712][ T3750]  ? clear_bhb_loop+0x25/0x80
[   37.364786][ T3750]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   37.364807][ T3750] RIP: 0033:0x7fdd31ebbb7c
[   37.364819][ T3750] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   37.364906][ T3750] RSP: 002b:00007fdd3051f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   37.364923][ T3750] RAX: ffffffffffffffda RBX: 00007fdd320d5fa0 RCX: 00007fdd31ebbb7c
[   37.364933][ T3750] RDX: 000000000000000f RSI: 00007fdd3051f0a0 RDI: 0000000000000006
[   37.364943][ T3750] RBP: 00007fdd3051f090 R08: 0000000000000000 R09: 0000000000000000
[   37.364953][ T3750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   37.364962][ T3750] R13: 0000000000000000 R14: 00007fdd320d5fa0 R15: 00007ffdb6d26248
[   37.364978][ T3750]  </TASK>
[   37.612949][ T3755] loop4: detected capacity change from 0 to 1024
[   37.614443][ T3757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.88'.
[   37.656900][ T3759] netlink: 'syz.3.89': attribute type 9 has an invalid length.
[   37.666643][ T3755] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.690935][ T3763] Zero length message leads to an empty skb
[   37.723150][ T3766] ref_ctr increment failed for inode: 0x8f offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88811b7d6e00
[   37.734861][ T3764] uprobe: syz.1.91:3764 failed to unregister, leaking uprobe
[   37.744406][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.744539][ T3767] loop3: detected capacity change from 0 to 1024
[   37.760898][ T3767] EXT4-fs: Ignoring removed nobh option
[   37.766572][ T3767] EXT4-fs: Ignoring removed bh option
[   37.790901][ T3767] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.811387][ T3767] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4115: comm syz.3.92: Allocating blocks 385-513 which overlap fs metadata
[   37.827577][ T3767] EXT4-fs (loop3): pa ffff8881069531c0: logic 16, phys. 129, len 24
[   37.835743][ T3767] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8
[   37.873314][ T3767] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28
[   37.885687][ T3767] EXT4-fs (loop3): This should not happen!! Data will be lost
[   37.885687][ T3767] 
[   37.895474][ T3767] EXT4-fs (loop3): Total free blocks count 0
[   37.901530][ T3767] EXT4-fs (loop3): Free/Dirty block details
[   37.907492][ T3767] EXT4-fs (loop3): free_blocks=128
[   37.912723][ T3767] EXT4-fs (loop3): dirty_blocks=0
[   37.917823][ T3767] EXT4-fs (loop3): Block reservation details
[   37.923901][ T3767] EXT4-fs (loop3): i_reserved_data_blocks=0
[   37.975650][   T23] vhci_hcd: vhci_device speed not set
[   38.009053][ T3781] ref_ctr increment failed for inode: 0x93 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810005e880
[   38.027088][ T3780] uprobe: syz.3.97:3780 failed to unregister, leaking uprobe
[   38.042186][ T3783] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3783 comm=syz.1.99
[   38.142851][ T3794] ref_ctr increment failed for inode: 0x9a offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810005a680
[   38.156629][ T3792] uprobe: syz.1.112:3792 failed to unregister, leaking uprobe
[   38.169448][ T3797] loop0: detected capacity change from 0 to 512
[   38.177426][ T3797] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   38.185746][ T3797] EXT4-fs (loop0): orphan cleanup on readonly fs
[   38.192444][ T3797] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.103: invalid indirect mapped block 256 (level 2)
[   38.207021][ T3797] EXT4-fs (loop0): 2 truncates cleaned up
[   38.213388][ T3797] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   38.251002][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.324620][ T3809] netlink: 28 bytes leftover after parsing attributes in process `syz.1.106'.
[   38.386122][ T3812] loop0: detected capacity change from 0 to 1024
[   38.393951][ T3812] EXT4-fs: Ignoring removed nobh option
[   38.399621][ T3812] EXT4-fs: Ignoring removed bh option
[   38.431948][ T3812] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.448304][ T3812] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4115: comm syz.0.108: Allocating blocks 385-513 which overlap fs metadata
[   38.463334][ T3812] EXT4-fs (loop0): pa ffff8881068f4000: logic 16, phys. 129, len 24
[   38.465015][ T3817] netlink: 28 bytes leftover after parsing attributes in process `syz.3.109'.
[   38.471455][ T3812] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8
[   38.474960][ T3812] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28
[   38.502664][ T3812] EXT4-fs (loop0): This should not happen!! Data will be lost
[   38.502664][ T3812] 
[   38.512396][ T3812] EXT4-fs (loop0): Total free blocks count 0
[   38.518484][ T3812] EXT4-fs (loop0): Free/Dirty block details
[   38.524420][ T3812] EXT4-fs (loop0): free_blocks=128
[   38.529670][ T3812] EXT4-fs (loop0): dirty_blocks=0
[   38.534757][ T3812] EXT4-fs (loop0): Block reservation details
[   38.540791][ T3812] EXT4-fs (loop0): i_reserved_data_blocks=0
[   38.577844][ T3821] ipvlan2: entered promiscuous mode
[   38.583204][ T3821] ipvlan2: entered allmulticast mode
[   38.588510][ T3821] bridge0: entered allmulticast mode
[   38.596065][ T3821] batman_adv: batadv0: Adding interface: ipvlan2
[   38.602492][ T3821] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.628508][ T3821] batman_adv: batadv0: Interface activated: ipvlan2
[   38.632005][ T3825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.114'.
[   38.836969][ T3844] syz.2.119 uses obsolete (PF_INET,SOCK_PACKET)
[   38.954795][ T3858] loop4: detected capacity change from 0 to 1024
[   38.963342][ T3858] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   38.975635][ T3858] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #11: comm syz.4.127: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[   38.995966][ T3858] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.127: couldn't read orphan inode 11 (err -117)
[   39.008361][ T3858] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.116943][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.176003][ T3865] loop1: detected capacity change from 0 to 1024
[   39.193627][ T3865] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[   39.203019][ T3865] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[   39.307485][ T3870] FAULT_INJECTION: forcing a failure.
[   39.307485][ T3870] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   39.320964][ T3870] CPU: 0 UID: 0 PID: 3870 Comm: syz.3.131 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) 
[   39.320996][ T3870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   39.321011][ T3870] Call Trace:
[   39.321020][ T3870]  <TASK>
[   39.321029][ T3870]  dump_stack_lvl+0xf6/0x150
[   39.321107][ T3870]  dump_stack+0x15/0x1a
[   39.321124][ T3870]  should_fail_ex+0x261/0x270
[   39.321143][ T3870]  should_fail_alloc_page+0xfd/0x110
[   39.321203][ T3870]  __alloc_frozen_pages_noprof+0x11e/0x340
[   39.321233][ T3870]  alloc_pages_mpol+0xb6/0x260
[   39.321254][ T3870]  alloc_pages_noprof+0xe8/0x130
[   39.321277][ T3870]  pte_alloc_one+0x2f/0x110
[   39.321349][ T3870]  __pte_alloc+0x36/0x2b0
[   39.321371][ T3870]  handle_mm_fault+0x1bab/0x2b30
[   39.321404][ T3870]  exc_page_fault+0x3b9/0x650
[   39.321441][ T3870]  asm_exc_page_fault+0x26/0x30
[   39.321472][ T3870] RIP: 0033:0x7fec209efc86
[   39.321490][ T3870] Code: f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01
[   39.321510][ T3870] RSP: 002b:00007fec1f1964a0 EFLAGS: 00010246
[   39.321525][ T3870] RAX: 0000000000000001 RBX: 00007fec1f196540 RCX: 0000000000000101
[   39.321536][ T3870] RDX: 0000000000000050 RSI: 0000000000000001 RDI: 00007fec1f1965e0
[   39.321546][ T3870] RBP: 0000000000000102 R08: 00007fec16d77000 R09: 0000000000000000
[   39.321557][ T3870] R10: 0000000000000000 R11: 00007fec1f196550 R12: 0000000000000001
[   39.321567][ T3870] R13: 00007fec20bc93e0 R14: 0000000000000000 R15: 00007fec1f1965e0
[   39.321661][ T3870]  </TASK>
[   39.321670][ T3870] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[   39.359032][ T3872] loop1: detected capacity change from 0 to 128
[   39.405246][ T3870] loop3: detected capacity change from 0 to 1024
[   39.503890][ T3870] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   39.522519][ T3865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.130'.
[   39.532581][ T3870] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.131: Invalid block bitmap block 0 in block_group 0
[   39.533092][ T3865] syz.1.130 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   39.546720][ T3870] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.131: Failed to acquire dquot type 0
[   39.573472][ T3870] EXT4-fs error (device loop3): ext4_free_blocks:6589: comm syz.3.131: Freeing blocks not in datazone - block = 0, count = 4096
[   39.575519][ T3878] netlink: 280 bytes leftover after parsing attributes in process `syz.0.135'.
[   39.613943][ T3870] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.131: Invalid inode bitmap blk 0 in block_group 0
[   39.630880][ T3870] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem
[   39.639678][   T12] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 0
[   39.658155][ T3872] syz.1.130: attempt to access beyond end of device
[   39.658155][ T3872] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128
[   39.717705][ T3887] loop0: detected capacity change from 0 to 128
[   39.727399][ T3870] EXT4-fs (loop3): 1 orphan inode deleted
[   39.760522][ T3891] loop2: detected capacity change from 0 to 1024
[   39.767422][ T3870] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.801254][ T3891] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   39.838091][ T3870] syz.3.131 (3870) used greatest stack depth: 9264 bytes left
[   39.846898][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.856574][ T3891] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #11: comm syz.2.140: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[   39.857144][   T37] kworker/u8:2: attempt to access beyond end of device
[   39.857144][   T37] loop0: rw=1, sector=153, nr_sectors = 8 limit=128
[   39.888924][   T37] kworker/u8:2: attempt to access beyond end of device
[   39.888924][   T37] loop0: rw=1, sector=169, nr_sectors = 8 limit=128
[   39.895109][ T3897] ref_ctr increment failed for inode: 0xbf offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88811b7d3c80
[   39.902557][   T37] kworker/u8:2: attempt to access beyond end of device
[   39.902557][   T37] loop0: rw=1, sector=185, nr_sectors = 8 limit=128
[   39.926689][   T37] kworker/u8:2: attempt to access beyond end of device
[   39.926689][   T37] loop0: rw=1, sector=201, nr_sectors = 8 limit=128
[   39.941391][   T37] kworker/u8:2: attempt to access beyond end of device
[   39.941391][   T37] loop0: rw=1, sector=217, nr_sectors = 8 limit=128
[   39.955858][   T37] kworker/u8:2: attempt to access beyond end of device
[   39.955858][   T37] loop0: rw=1, sector=233, nr_sectors = 8 limit=128
[   39.970333][   T37] kworker/u8:2: attempt to access beyond end of device
[   39.970333][   T37] loop0: rw=1, sector=249, nr_sectors = 8 limit=128
[   39.983722][   T37] kworker/u8:2: attempt to access beyond end of device
[   39.983722][   T37] loop0: rw=1, sector=265, nr_sectors = 8 limit=128
[   39.999421][ T3891] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.140: couldn't read orphan inode 11 (err -117)
[   40.010716][   T37] kworker/u8:2: attempt to access beyond end of device
[   40.010716][   T37] loop0: rw=1, sector=281, nr_sectors = 8 limit=128
[   40.012417][ T3891] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.063827][ T3896] uprobe: syz.4.141:3896 failed to unregister, leaking uprobe
[   40.081631][ T3901] smc: net device bond0 applied user defined pnetid SYZ0
[   40.089959][ T3901] smc: net device bond0 erased user defined pnetid SYZ0
[   40.209669][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.251254][ T3923] loop2: detected capacity change from 0 to 128
[   40.336158][ T3927] loop1: detected capacity change from 0 to 512
[   40.353318][ T3927] EXT4-fs (loop1): orphan cleanup on readonly fs
[   40.376818][ T3927] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.154: bg 0: block 248: padding at end of block bitmap is not set
[   40.438872][ T3927] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.154: Failed to acquire dquot type 1
[   40.455702][ T3934] loop2: detected capacity change from 0 to 1024
[   40.509063][ T3942] netlink: 4 bytes leftover after parsing attributes in process `syz.4.159'.
[   40.545672][ T3944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.160'.
[   40.558612][ T3927] EXT4-fs (loop1): 1 truncate cleaned up
[   40.569153][ T3927] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   40.618460][ T3948] FAULT_INJECTION: forcing a failure.
[   40.618460][ T3948] name failslab, interval 1, probability 0, space 0, times 0
[   40.631457][ T3948] CPU: 1 UID: 0 PID: 3948 Comm: syz.4.161 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) 
[   40.631550][ T3948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   40.631564][ T3948] Call Trace:
[   40.631569][ T3948]  <TASK>
[   40.631576][ T3948]  dump_stack_lvl+0xf6/0x150
[   40.631599][ T3948]  dump_stack+0x15/0x1a
[   40.631614][ T3948]  should_fail_ex+0x261/0x270
[   40.631634][ T3948]  should_failslab+0x8f/0xb0
[   40.631706][ T3948]  kmem_cache_alloc_lru_noprof+0x5e/0x330
[   40.631737][ T3948]  ? __d_alloc+0x3d/0x350
[   40.631758][ T3948]  __d_alloc+0x3d/0x350
[   40.631802][ T3948]  d_alloc_parallel+0x57/0xcb0
[   40.631867][ T3948]  ? __d_lookup+0x362/0x390
[   40.631887][ T3948]  ? make_vfsuid+0x52/0xa0
[   40.631960][ T3948]  ? down_read+0x173/0x4c0
[   40.632000][ T3948]  path_openat+0x6ed/0x2000
[   40.632034][ T3948]  do_filp_open+0x115/0x240
[   40.632076][ T3948]  ? __pfx_kfree_link+0x10/0x10
[   40.632106][ T3948]  do_sys_openat2+0xaa/0x110
[   40.632144][ T3948]  __x64_sys_openat+0xf8/0x120
[   40.632250][ T3948]  x64_sys_call+0x1ac/0x2e10
[   40.632272][ T3948]  do_syscall_64+0xc9/0x1c0
[   40.632373][ T3948]  ? clear_bhb_loop+0x25/0x80
[   40.632393][ T3948]  ? clear_bhb_loop+0x25/0x80
[   40.632416][ T3948]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   40.632440][ T3948] RIP: 0033:0x7fdd31ebbad0
[   40.632456][ T3948] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44
[   40.632486][ T3948] RSP: 002b:00007fdd3051ef10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[   40.632503][ T3948] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fdd31ebbad0
[   40.632514][ T3948] RDX: 0000000000000002 RSI: 00007fdd3051efa0 RDI: 00000000ffffff9c
[   40.632647][ T3948] RBP: 00007fdd3051efa0 R08: 0000000000000000 R09: 0000000000000000
[   40.632660][ T3948] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[   40.632671][ T3948] R13: 0000000000000000 R14: 00007fdd320d5fa0 R15: 00007ffdb6d26248
[   40.632731][ T3948]  </TASK>
[   40.855330][ T3927] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[   40.869560][ T3934] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.900952][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.009949][ T3927] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[   41.034875][ T3927] syz.1.154 (3927) used greatest stack depth: 9216 bytes left
[   41.096732][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.104430][ T3971] loop0: detected capacity change from 0 to 1024
[   41.124686][ T3971] EXT4-fs: Ignoring removed nobh option
[   41.130383][ T3971] EXT4-fs: Ignoring removed bh option
[   41.187464][ T3971] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.204219][ T3986] loop1: detected capacity change from 0 to 128
[   41.234090][ T3971] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4115: comm syz.0.163: Allocating blocks 385-513 which overlap fs metadata
[   41.267459][ T3992] FAULT_INJECTION: forcing a failure.
[   41.267459][ T3992] name failslab, interval 1, probability 0, space 0, times 0
[   41.280186][ T3992] CPU: 0 UID: 0 PID: 3992 Comm: syz.4.167 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) 
[   41.280218][ T3992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   41.280234][ T3992] Call Trace:
[   41.280241][ T3992]  <TASK>
[   41.280248][ T3992]  dump_stack_lvl+0xf6/0x150
[   41.280277][ T3992]  dump_stack+0x15/0x1a
[   41.280297][ T3992]  should_fail_ex+0x261/0x270
[   41.280403][ T3992]  should_failslab+0x8f/0xb0
[   41.280439][ T3992]  kmem_cache_alloc_bulk_noprof+0x60/0x4a0
[   41.280477][ T3992]  bpf_test_run_xdp_live+0xd00/0x1050
[   41.280556][ T3992]  ? synchronize_rcu_expedited+0x6d5/0x790
[   41.280642][ T3992]  ? __pfx_wait_rcu_exp_gp+0x10/0x10
[   41.280680][ T3992]  ? bpf_test_run_xdp_live+0x2b3/0x1050
[   41.280874][ T3992]  bpf_prog_test_run_xdp+0x526/0x8e0
[   41.280906][ T3992]  ? __rcu_read_unlock+0x4e/0x70
[   41.280938][ T3992]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   41.280970][ T3992]  bpf_prog_test_run+0x20e/0x3a0
[   41.281004][ T3992]  __sys_bpf+0x440/0x800
[   41.281027][ T3992]  __x64_sys_bpf+0x43/0x50
[   41.281057][ T3992]  x64_sys_call+0x23da/0x2e10
[   41.281084][ T3992]  do_syscall_64+0xc9/0x1c0
[   41.281187][ T3992]  ? clear_bhb_loop+0x25/0x80
[   41.281219][ T3992]  ? clear_bhb_loop+0x25/0x80
[   41.281240][ T3992]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   41.281260][ T3992] RIP: 0033:0x7fdd31ebd169
[   41.281274][ T3992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   41.281290][ T3992] RSP: 002b:00007fdd3051f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   41.281311][ T3992] RAX: ffffffffffffffda RBX: 00007fdd320d5fa0 RCX: 00007fdd31ebd169
[   41.281325][ T3992] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[   41.281383][ T3992] RBP: 00007fdd3051f090 R08: 0000000000000000 R09: 0000000000000000
[   41.281397][ T3992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   41.281408][ T3992] R13: 0000000000000000 R14: 00007fdd320d5fa0 R15: 00007ffdb6d26248
[   41.281424][ T3992]  </TASK>
[   41.289016][ T3970] EXT4-fs (loop0): pa ffff8881068f40e0: logic 16, phys. 129, len 24
[   41.502649][ T3970] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8
[   41.514086][ T3997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.170'.
[   41.537685][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.591374][ T4006] loop3: detected capacity change from 0 to 1024
[   41.614627][ T4004] ref_ctr increment failed for inode: 0xe3 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88811b7d2100
[   41.635538][ T4002] uprobe: syz.4.173:4002 failed to unregister, leaking uprobe
[   41.673442][ T4010] ==================================================================
[   41.681593][ T4010] BUG: KCSAN: data-race in vmalloc_info_show / vmalloc_info_show
[   41.689344][ T4010] 
[   41.691695][ T4010] read-write to 0xffff88810100eff0 of 4 bytes by task 4008 on cpu 1:
[   41.699787][ T4010]  vmalloc_info_show+0x476/0x780
[   41.704733][ T4010]  seq_read_iter+0x2c8/0x970
[   41.709330][ T4010]  proc_reg_read_iter+0x118/0x190
[   41.714384][ T4010]  vfs_read+0x5e6/0x710
[   41.718666][ T4010]  ksys_read+0xeb/0x1b0
[   41.722834][ T4010]  __x64_sys_read+0x42/0x50
[   41.727342][ T4010]  x64_sys_call+0x2a3b/0x2e10
[   41.732039][ T4010]  do_syscall_64+0xc9/0x1c0
[   41.736540][ T4010]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   41.742438][ T4010] 
[   41.744757][ T4010] read-write to 0xffff88810100eff0 of 4 bytes by task 4010 on cpu 0:
[   41.752817][ T4010]  vmalloc_info_show+0x476/0x780
[   41.757859][ T4010]  traverse+0x155/0x3c0
[   41.762022][ T4010]  seq_read_iter+0x89f/0x970
[   41.766605][ T4010]  proc_reg_read_iter+0x118/0x190
[   41.771649][ T4010]  vfs_read+0x5e6/0x710
[   41.775813][ T4010]  __x64_sys_pread64+0xfb/0x150
[   41.780666][ T4010]  x64_sys_call+0x26ad/0x2e10
[   41.785353][ T4010]  do_syscall_64+0xc9/0x1c0
[   41.789868][ T4010]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   41.795790][ T4010] 
[   41.798112][ T4010] value changed: 0x00000087 -> 0x00000002
[   41.803821][ T4010] 
[   41.806135][ T4010] Reported by Kernel Concurrency Sanitizer on:
[   41.812275][ T4010] CPU: 0 UID: 0 PID: 4010 Comm: syz.1.175 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) 
[   41.824249][ T4010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   41.834339][ T4010] ==================================================================
[   41.861317][ T4006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.919699][   T29] kauditd_printk_skb: 294 callbacks suppressed
[   41.919718][   T29] audit: type=1326 audit(1743407016.207:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4005 comm="syz.3.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fec20b2bad0 code=0x7ffc0000
[   41.949205][   T29] audit: type=1326 audit(1743407016.207:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4005 comm="syz.3.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fec20b2beb7 code=0x7ffc0000
[   41.972984][   T29] audit: type=1326 audit(1743407016.207:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4005 comm="syz.3.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fec20b2bad0 code=0x7ffc0000
[   41.996307][   T29] audit: type=1326 audit(1743407016.207:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4005 comm="syz.3.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec20b2d169 code=0x7ffc0000
[   42.019634][   T29] audit: type=1326 audit(1743407016.207:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4005 comm="syz.3.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec20b2d169 code=0x7ffc0000
[   42.043021][   T29] audit: type=1326 audit(1743407016.207:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4005 comm="syz.3.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fec20b2d169 code=0x7ffc0000
[   42.066420][   T29] audit: type=1326 audit(1743407016.207:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4005 comm="syz.3.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec20b2d169 code=0x7ffc0000
[   42.089966][   T29] audit: type=1326 audit(1743407016.207:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4005 comm="syz.3.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec20b2d169 code=0x7ffc0000
[   42.113326][   T29] audit: type=1326 audit(1743407016.217:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4005 comm="syz.3.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec20b2d169 code=0x7ffc0000
[   42.136650][   T29] audit: type=1326 audit(1743407016.217:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4005 comm="syz.3.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec20b2d169 code=0x7ffc0000
[   42.281693][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.