last executing test programs:

2m56.853516005s ago: executing program 32 (id=2689):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4)
socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)

2m48.025943701s ago: executing program 33 (id=2770):
syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x1f}}, 0x3c)

2m23.068387849s ago: executing program 2 (id=3046):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$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")
r1 = openat(0xffffffffffffff9c, 0x0, 0x143041, 0x0)
pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)

2m22.876575891s ago: executing program 2 (id=3049):
syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x6)
write$tun(r3, &(0x7f00000007c0)=ANY=[], 0x36)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x1f}}, 0x3c)

2m22.316120869s ago: executing program 2 (id=3060):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000240)='syzkaller\x00', 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
clock_nanosleep(0xa, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f00000003c0)=0x8, 0x4)
sendto$inet(r2, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10)
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x18)
r6 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "69dcaf20127e9a854529f45826cb35be51682e30944313e2ca73845d177d601880221daeccfda56b75cfe2bad94f000066b2ddab614fec2236da7d88ea07c9ee"}, 0x48, 0xfffffffffffffffe)
keyctl$search(0xa, r6, &(0x7f0000000180)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000080)="0000501ef663", 0x0, 0x800004, 0x10030, 0x0, 0x0})
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4)
ioperm(0x1, 0xb7, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b7040000010000008500000078000000"], 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2800128014000180090001006c617374000000000400028010000180060001006c6173740000000008000340000001"], 0xb4}}, 0x20050800)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0x1, 0x4)
r7 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'lo\x00'})
sendmsg$nl_route_sched(r7, 0x0, 0x44080)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)

2m22.203661611s ago: executing program 2 (id=3061):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000580)=ANY=[@ANYRES64=r1, @ANYRESOCT, @ANYBLOB="b404c9898ad060d937750867bcac369269f573b76e", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2e, '\x00', 0x0, @fallback=0x83089133c07be7a1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRES16=r1, @ANYRES8=r2], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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")
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000140))
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
set_mempolicy(0x3, &(0x7f0000000240)=0xb09f, 0x3)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000efffffff850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10)
getrusage(0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r5}, 0x18)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000b00)={'erspan0\x00', <r7=>0x0, 0x80, 0x10, 0x0, 0x9, {{0x29, 0x4, 0x1, 0x27, 0xa4, 0x67, 0x0, 0x45, 0x29, 0x0, @empty, @empty, {[@cipso={0x86, 0x11, 0x1, [{0x5, 0x2}, {0x2, 0x9, "613c88569b17e7"}]}, @noop, @timestamp_addr={0x44, 0x3c, 0xe4, 0x1, 0x4, [{@empty, 0x2}, {@dev={0xac, 0x14, 0x14, 0x20}}, {@local, 0xfffffff8}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x4}, {@loopback, 0x9}, {@empty, 0xd3}, {@multicast2, 0x7fff}]}, @cipso={0x86, 0x2e, 0x3, [{0x6, 0x6, "eb05b684"}, {0x7, 0x7, "e60650df8c"}, {0x7, 0x9, "b9fbab731fc5e4"}, {0x1, 0x12, "e3ca8e3c47bd69e3c3540f23390107a0"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0x80, 0x0, 0x6, [0x0, 0x4]}, @end]}}}}})
r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r8, 0x402, 0x8000003d)
bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0300867367470000ff000000e37d000000020000b713a8bca32e65961e7bda5d43681f1b65ef88f6608907a6fbef01d34511e764f392e2a5289b3c9b5da80c8fcba55706ef527365c0ee7e785793b6c70003887729a415d348c1d6ff06e98db04f4b9f007b28d827f2d5e094ea1770b6bfbfb5b56ffa980c335c877978c1a5f5cfec0c22b2f4bd23df71c4627e261d41d42e0344485e9cc6503563908795b7f52eb2606eaa2dca3e6104e640380fa6ff1ff65e05cd3aa1bf02763da49526edc914f0281a19edce6a4882c4b23f75948de25233e6a31dc3f537128192812691ece7e75639f99a7f63e8ff9094cbd9425b7357f230a17cac5deb5ba00d6043f18f17abc135607b2c476f95a809a4da19578333d6f298e25a50a5505a095270ccac94ddabdb162c09ac8758b8f174de259b1be827d660d69b5401d47947812b132c5cbed10c10197bd0167c4af4ead224c08051bc5ca06a0dce04a5b1a97094e3dd98f8ac9213eaa078656b6dc80b78572f7a04d104990ceb", @ANYRES32=r1, @ANYBLOB="0200"/20, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="04000000010000000300"/28], 0x50)
creat(&(0x7f0000000380)='./file1\x00', 0x144)
io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6})
r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0)
pwrite64(r9, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b0000000a"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f00000005c0)='ext4_journal_start_reserved\x00'}, 0x18)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdedH\xe5+\xf0', 0xffffffffffffffff)

2m22.013002553s ago: executing program 2 (id=3069):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
rmdir(&(0x7f0000000000)='./file0\x00')
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x784, &(0x7f0000001900)="$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")

2m18.4485627s ago: executing program 1 (id=3108):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000580)=ANY=[@ANYRES64=r1, @ANYRESOCT, @ANYBLOB="b404c9898ad060d937750867bcac369269f573b76e", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2e, '\x00', 0x0, @fallback=0x83089133c07be7a1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r2, @ANYRES16=r1, @ANYRES16=r1, @ANYRES8=r2], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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")
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000140))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000ab8009c5f3d96fc0e5000000000000", @ANYRES32, @ANYBLOB="000000008af8ff00000000bf030000000000000702ff0f0010ffffb7030000000000427faf0364f62e8100850000045700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
set_mempolicy(0x3, &(0x7f0000000240)=0xb09f, 0x3)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000efffffff850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10)
getrusage(0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r5}, 0x18)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000b00)={'erspan0\x00', <r7=>0x0, 0x80, 0x10, 0x0, 0x9, {{0x2e, 0x4, 0x1, 0x27, 0xb8, 0x67, 0x0, 0x45, 0x29, 0x0, @empty, @empty, {[@cipso={0x86, 0x17, 0x1, [{0x5, 0x2}, {0x2, 0xf, "613c88569b17e7ad67b8d48c2c"}]}, @noop, @timestamp_addr={0x44, 0x44, 0xe4, 0x1, 0x4, [{@private=0xa010100, 0x3}, {@empty, 0x2}, {@dev={0xac, 0x14, 0x14, 0x20}}, {@local, 0xfffffff8}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x4}, {@loopback, 0x9}, {@empty, 0xd3}, {@multicast2, 0x7fff}]}, @cipso={0x86, 0x32, 0x3, [{0x6, 0x6, "eb05b684"}, {0x7, 0xb, "e60650df8c051a67f7"}, {0x7, 0x9, "b9fbab731fc5e4"}, {0x1, 0x12, "e3ca8e3c47bd69e3c3540f23390107a0"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0x80, 0x0, 0x6, [0xc3, 0x0, 0x4]}, @end]}}}}})
r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r8, 0x402, 0x8000003d)
bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="0200"/19, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="04000000010000000300"/28], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0)

2m18.107566504s ago: executing program 1 (id=3112):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000580)=ANY=[@ANYRES64=r1, @ANYRESOCT, @ANYBLOB="b404c9898ad060d937750867bcac369269f573b76e", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2e, '\x00', 0x0, @fallback=0x83089133c07be7a1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRES16=r1, @ANYRES8=r2], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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")
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000140))
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
set_mempolicy(0x3, &(0x7f0000000240)=0xb09f, 0x3)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000efffffff850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10)
getrusage(0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r5}, 0x18)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000b00)={'erspan0\x00', <r7=>0x0, 0x80, 0x10, 0x0, 0x9, {{0x29, 0x4, 0x1, 0x27, 0xa4, 0x67, 0x0, 0x45, 0x29, 0x0, @empty, @empty, {[@cipso={0x86, 0x14, 0x1, [{0x5, 0x2}, {0x2, 0xc, "613c88569b17e7ad67b8"}]}, @noop, @timestamp_addr={0x44, 0x3c, 0xe4, 0x1, 0x4, [{@empty, 0x2}, {@dev={0xac, 0x14, 0x14, 0x20}}, {@local, 0xfffffff8}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x4}, {@loopback, 0x9}, {@empty, 0xd3}, {@multicast2, 0x7fff}]}, @cipso={0x86, 0x2e, 0x3, [{0x6, 0x6, "eb05b684"}, {0x7, 0x7, "e60650df8c"}, {0x7, 0x9, "b9fbab731fc5e4"}, {0x1, 0x12, "e3ca8e3c47bd69e3c3540f23390107a0"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0x80, 0x0, 0x6, [0x0, 0x4]}, @end]}}}}})
r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r8, 0x402, 0x8000003d)
bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="0200"/20, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="04000000010000000300"/28], 0x50)
creat(&(0x7f0000000380)='./file1\x00', 0x144)
io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6})
r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0)
pwrite64(r9, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b0000000a"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f00000005c0)='ext4_journal_start_reserved\x00'}, 0x18)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdedH\xe5+\xf0', 0xffffffffffffffff)

2m17.800449529s ago: executing program 1 (id=3115):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = msgget(0x0, 0x260)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000380)={0x2, {0x2, 0x1, 0xfff, 0xfe24, 0x2, 0x2}})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>0xffffffffffffffff, 0xffffffffffffffff}}, './bus\x00'})
stat(&(0x7f0000000280)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
getresgid(&(0x7f0000000c40), &(0x7f0000000140), &(0x7f0000000240)=<r6=>0x0)
setgid(r6)
setgroups(0x2, &(0x7f0000000480)=[r5, r6])
r7 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc))
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x800008, &(0x7f0000000000)={[{@init_itable}, {@nodioread_nolock}, {@discard}, {@debug}]}, 0x4, 0x515, &(0x7f00000040c0)="$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")
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r9}, 0x10)
chown(&(0x7f0000000080)='./file1\x00', 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=<r10=>0x0)
msgctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x0, r4, r6, 0x0, 0xee01}, 0x0, 0x0, 0x6, 0x7f1, 0x1, 0x7, 0xb8, 0x1, 0x7, 0x2, r7, r10})
open(&(0x7f0000000100)='./bus\x00', 0x101c42, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000400)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r14 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r15}, 0x10)
syz_read_part_table(0x60d, &(0x7f0000002200)="$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")
splice(r11, 0x0, r13, 0x0, 0x88000cc, 0x0)
io_uring_enter(r12, 0xe02, 0xbf51, 0x24, 0x0, 0x0)

2m16.682026523s ago: executing program 1 (id=3121):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000580)=ANY=[@ANYRES64=r1, @ANYRESOCT, @ANYBLOB="b404c9898ad060d937750867bcac369269f573b76e", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2e, '\x00', 0x0, @fallback=0x83089133c07be7a1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r2, @ANYRES16=r1, @ANYRES16=r1, @ANYRES8=r2], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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")
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000140))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000ab8009c5f3d96fc0e5000000000000", @ANYRES32, @ANYBLOB="000000008af8ff00000000bf030000000000000702ff0f0010ffffb7030000000000427faf0364f62e8100850000045700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
set_mempolicy(0x3, &(0x7f0000000240)=0xb09f, 0x3)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000efffffff850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10)
getrusage(0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r5}, 0x18)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000b00)={'erspan0\x00', <r7=>0x0, 0x80, 0x10, 0x0, 0x9, {{0x2e, 0x4, 0x1, 0x27, 0xb8, 0x67, 0x0, 0x45, 0x29, 0x0, @empty, @empty, {[@cipso={0x86, 0x17, 0x1, [{0x5, 0x2}, {0x2, 0xf, "613c88569b17e7ad67b8d48c2c"}]}, @noop, @timestamp_addr={0x44, 0x44, 0xe4, 0x1, 0x4, [{@private=0xa010100, 0x3}, {@empty, 0x2}, {@dev={0xac, 0x14, 0x14, 0x20}}, {@local, 0xfffffff8}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x4}, {@loopback, 0x9}, {@empty, 0xd3}, {@multicast2, 0x7fff}]}, @cipso={0x86, 0x32, 0x3, [{0x6, 0x6, "eb05b684"}, {0x7, 0xb, "e60650df8c051a67f7"}, {0x7, 0x9, "b9fbab731fc5e4"}, {0x1, 0x12, "e3ca8e3c47bd69e3c3540f23390107a0"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0x80, 0x0, 0x6, [0xc3, 0x0, 0x4]}, @end]}}}}})
r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r8, 0x402, 0x8000003d)
bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="0200"/19, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="04000000010000000300"/28], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0)

2m16.614086444s ago: executing program 1 (id=3126):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18)
r2 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)='5', 0x1}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) (fail_nth: 5)

2m16.278474228s ago: executing program 34 (id=3129):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffff0}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x8}, [{}, {0x0, 0x0, 0x0, 0x0, 0x2000}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7ff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x20000000, 0x0, 0xfffffffe, 0x7}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x303}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xfffffff9, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x3}, {0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4000}, {0xfffffffe}, {}, {0xd5}, {0x0, 0x0, 0x0, 0xa13}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {0x0, 0xffff8001}, {}, {}, {0x8, 0x0, 0x0, 0x1, 0x800}, {}, {0x2, 0x0, 0xffffffff}, {0x0, 0x5, 0x0, 0x0, 0x2}, {}, {0x2}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {0x0, 0x0, 0x1ff, 0x0, 0xfffffffe}, {}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, {0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x233}, {}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x72f1}, {0x0, 0x0, 0xd7ed}, {0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x2}, {0x0, 0x4}, {}, {}, {}, {}, {0x814}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x6}, {}, {0x3}, {}, {}, {0x4}, {}, {}, {0x0, 0xfffffffa, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x5f}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10000}, {}, {0x0, 0x0, 0x0, 0x20000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5, 0x1}, {0x4, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {}, {}, {}, {}, {0xc, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x5}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x7afca22067ae7b97}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)

2m16.267523698s ago: executing program 35 (id=3131):
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setuid(0xee01)
r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu>00\t&&')

2m16.264703888s ago: executing program 1 (id=3132):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffff0}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfe58}, 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x8}, [{}, {0x0, 0x0, 0x0, 0x0, 0x2000}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7ff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x20000000, 0x0, 0xfffffffe, 0x7}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x303}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xfffffff9, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x3}, {0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4000}, {0xfffffffe}, {}, {0xd5}, {0x0, 0x0, 0x0, 0xa13}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {0x0, 0xffff8001}, {}, {}, {0x8, 0x0, 0x0, 0x1, 0x800}, {}, {0x2, 0x0, 0xffffffff}, {0x0, 0x5, 0x0, 0x0, 0x2}, {}, {0x2}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {0x0, 0x0, 0x1ff, 0x0, 0xfffffffe}, {}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, {0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x233}, {}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x72f1}, {0x0, 0x0, 0xd7ed}, {0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x2}, {0x0, 0x4}, {}, {}, {}, {}, {0x814}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x6}, {}, {0x3}, {}, {}, {0x4}, {}, {}, {0x0, 0xfffffffa, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x5f}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10000}, {}, {0x0, 0x0, 0x0, 0x20000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5, 0x1}, {0x4, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {}, {}, {}, {}, {0xc, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x5}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x7afca22067ae7b97}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)

2m16.219376019s ago: executing program 36 (id=3132):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffff0}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfe58}, 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x8}, [{}, {0x0, 0x0, 0x0, 0x0, 0x2000}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7ff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x20000000, 0x0, 0xfffffffe, 0x7}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x303}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xfffffff9, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x3}, {0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4000}, {0xfffffffe}, {}, {0xd5}, {0x0, 0x0, 0x0, 0xa13}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {0x0, 0xffff8001}, {}, {}, {0x8, 0x0, 0x0, 0x1, 0x800}, {}, {0x2, 0x0, 0xffffffff}, {0x0, 0x5, 0x0, 0x0, 0x2}, {}, {0x2}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {0x0, 0x0, 0x1ff, 0x0, 0xfffffffe}, {}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, {0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x233}, {}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x72f1}, {0x0, 0x0, 0xd7ed}, {0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x2}, {0x0, 0x4}, {}, {}, {}, {}, {0x814}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x6}, {}, {0x3}, {}, {}, {0x4}, {}, {}, {0x0, 0xfffffffa, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x5f}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10000}, {}, {0x0, 0x0, 0x0, 0x20000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5, 0x1}, {0x4, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {}, {}, {}, {}, {0xc, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x5}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x7afca22067ae7b97}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)

2m15.926782493s ago: executing program 2 (id=3084):
syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x6)
write$tun(r2, &(0x7f00000007c0)=ANY=[], 0x36)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x1f}}, 0x3c)

2m15.926226413s ago: executing program 37 (id=3084):
syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x6)
write$tun(r2, &(0x7f00000007c0)=ANY=[], 0x36)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x1f}}, 0x3c)

1m30.49386878s ago: executing program 8 (id=3793):
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000340)={[0x8]}, 0x8)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000004c0)='[:!++&\x00', &(0x7f0000000500)="830dc29260", 0x5)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt(r3, 0xff, 0x2, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0x1fffffffffffff4c, &(0x7f0000000380)=ANY=[@ANYRES8=r0, @ANYRES8=r2, @ANYRES32=r3], 0x0, 0xd7c, 0x0, 0x0, 0x0, 0x75, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='scsi_dispatch_cmd_start\x00', r4, 0x0, 0x8001}, 0x18)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
sched_getattr(0x0, &(0x7f00000010c0)={0x38}, 0xbe, 0x0)

1m30.175856864s ago: executing program 8 (id=3807):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
clock_getres(0x9158dbb7b5d2d6d6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, @void, @value}, 0x94)
r1 = socket(0x2, 0x80805, 0x0)
setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000240), 0x4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x7c, &(0x7f0000000580)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @private=0xa010101}, @in6={0xa, 0x4e23, 0x3, @loopback, 0x6}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x40}}]}, &(0x7f0000000280)=0x10)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1)
r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2}, 0x0, 0x1, 0x7, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\xac\xed\x00\x00')
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
clock_gettime(0x4, &(0x7f0000000040))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000002c0)='gpu~00\t&&')
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'vcan0\x00', &(0x7f0000000180)=@ethtool_rxnfc={0x32, 0x2, 0x3, {0xb, @usr_ip6_spec={@rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x3e}, 0x5, 0x0, 0xc8}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, 0x1, 0x9, [0xffffffff, 0x99]}, @udp_ip4_spec={@private=0xa010102, @loopback, 0x4e24, 0x0, 0x1}, {0x0, @multicast, 0xb, 0x8, [0x0, 0x8]}, 0x1d, 0x1}}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='xen_mmu_flush_tlb_one_user\x00', r5}, 0x18)
r7 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x2804, 0x0, 0x0, 0x0, 0x400, 0x10001, 0x1, 0x0, 0x0, 0x0, 0x1c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8)
r9 = inotify_init1(0x0)
inotify_add_watch(r9, &(0x7f0000000400)='.\x00', 0xa4000021)
read(r9, 0x0, 0x0)
close(r9)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2)

1m29.359933105s ago: executing program 8 (id=3820):
r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) (async)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$sock_buf(r1, 0x1, 0x1f, 0x0, &(0x7f0000000340)) (async)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[], 0x28}}, 0x0) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) (rerun: 64)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000200)={0x0, r3, 0x9, {0x3, 0xa8}, 0x66}, 0x1) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 32)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r4 = syz_io_uring_setup(0x6903, &(0x7f00000000c0)={0x0, 0xfa, 0x2, 0x2, 0x26, 0x0, r0}, &(0x7f0000000000), &(0x7f0000000280)) (async)
r5 = eventfd2(0x8e, 0x800)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000180)=r5, 0x1) (async)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x200000000000000, 0xffffffff, &(0x7f0000000080)) (async, rerun: 32)
ustat(0x2, &(0x7f0000000040)) (rerun: 32)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x8, 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r7)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r8, 0x0, 0x8}, 0x18) (async)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0)
pwritev(r9, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) (async)
get_mempolicy(0x0, 0x0, 0xfffffffffffffffd, &(0x7f0000365000/0x3000)=nil, 0x3)

1m29.118087658s ago: executing program 8 (id=3825):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x65, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600a400014009000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), 0x0, 0xfe37, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0)
ioctl$TIOCSIG(r3, 0x40045436, 0xe)
utimes(&(0x7f0000001ac0)='./file1\x00', 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000040000000300000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'bond_slave_1\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r5}, 0x10)
r6 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x1})
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
socket$unix(0x1, 0x2, 0x0)
iopl(0x3)
syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@noblock_validity}, {@resuid}, {@dioread_nolock}, {@minixdf}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@orlov}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH")
chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00')
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00')
bpf$PROG_LOAD(0x5, 0x0, 0x0)

1m28.94171464s ago: executing program 8 (id=3829):
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000340)={[0x8]}, 0x8)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000004c0)='[:!++&\x00', &(0x7f0000000500)="830dc29260", 0x5)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt(r3, 0xff, 0x2, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0x1fffffffffffff4c, &(0x7f0000000380)=ANY=[@ANYRES8=r0, @ANYRES8=r2, @ANYRES32=r3], 0x0, 0xd7c, 0x0, 0x0, 0x0, 0x75, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='scsi_dispatch_cmd_start\x00', r4, 0x0, 0x8001}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
sched_getattr(0x0, &(0x7f00000010c0)={0x38}, 0xbe, 0x0)

1m28.027830432s ago: executing program 8 (id=3838):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sys_enter\x00', r0}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x700, &(0x7f0000000a40)="$eJzs3V2P21gZB/D/STJJJoWqAlStqm7ndMpKUzGkTmabKipIGOckY0jiyPbAjIS0KnRmNWqmQFskmpt2bniRli/A3d5wwYdYiQuu9lvAFUgrEBJiBUJGPrbzMnEykzadbtn/b7Qbx358zuNjr896xj4GERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERQVgNw6gItO3uzq6czWq4Tif5ksXU8qi0FdyMJm7Oq3MlrBcQ4T8oFvFWNPutr4xCLof/WsfV6NtVFMOPIgYXLl+6++VcJll/TsIvAosW+Pjp4MG9fn//0Rlis1i4+NcJmTMEtVTX9hy7Y7aUtD1H1ms149Z205NNu628Pc9XHWm5KuM7rtywbspKvb4lVXnP2em2GmZbJTPvfL1qGDX5nUK0owGUPWvbbrftbkvHhIvDmDvygx9EAcrsSHlw2N/fGsvnWVobh0GVlOQz48FhUPW0za0a1WqlUq1Warfrt+8YRm5qhhESxhCmIpZ+0NIbZrkncKKXkLEa/zH+JIA2iuhiB7uQqT8WGnDhoDNjeSzp/9+5pebWO97/J738ymjxFej+/1r07dqs/n9GLhJSr5C2RMyYv9jPis5I4jGeYoAHuIc++tjHoyWULSHXXrqEvBG35FLymfnTgkIXNjw4sNGBiRa+CBnPkaijhhoMvIdtNOFBogkbbSh42IMHHyo8ovJhpgomfDhwIbEBCzchUUEddWxBQqGMPTjYQRctNGDiX0EQHOBQt/tWnM/zlK1GElSZsREF5JLjbh/VOVs7q///4bNo7bj/N9j/f15Fx0Eh+vh4XgzRZ0AQX/8vaO3VZENEREREREREr4LQv30X+q/ybwMI0LTbypiIKby27IiIiIiIiIhoGQSCAq5CRHfl422I6et/IiIiIiIiInqzCf2MnQBQ0jf1i9HjUmf5JUD2HFIkIiIiIiIiopekn/y/lgcCfZf/GsRC1/9ERERERERE9Ab41dgY+7lsPMZukPxZPwNg7c8F8dHfCnBXxHFv96viyAyXmEdxzNQdAH7zirgYD9SrP/IA9DdLXRVxbRL4Z/Lbh9AnB+lj/T8PIkII90QC+ex4ATMSEGHNtVz8DR/gerTK9Xic+fuDDPSSaEThUtNuq7LltO9WYJoXM77a9X/28PDngDvczoPD/n75Rz/u39e5HIezjo/CQp9NpJNJb4xRLk/0eAv6mYu00Y1X0Uyq/HW3UxK6XiPZ/izMo8x4RfN2QG0ViLbyF1iP9tl6EMWWBsMR9wWwpgd/qJT1LpvYendFjLKonNzytB0xY8uLOosbUcyNjRvRR9ImYTkZUfxaFqiWp/fBRBbV8SxObwvx9xPtPz8LiGLYFlthFn8ICzqRxfc/ilbe6u0mw2OcJYupo4CI6HU5GPVCehDzqTH2k+4hOamdvd9BDojPcjN691EtQdx/JL37k98GUQ+VBXLx3ybSa0n6FYRn9A2hy8lHA7rnrqSc0Y3yp0EQmBeLGD+j/zcIkg0yFujdjoMgOHlG//3oHUhx2lNZ/DsIgrsV3ZP85kSv+mG4wocz6/Xa1SyKKODJ0U/0APih9/ff339YrW7VjHcN43YVK/p/FeKPLNj3EBHRlNPfsaMjMnMixLu4HpVx/f5f34mmJnq8L8W3FGi3gD7uYzN5hcBaeqklHOCb/4huQ9iMrlqB9VL0WRrIy5fuhle1w9hDkdNveNmceVWn+9IoVt/eUB3GJu8dOnkFOIrdesV7gYiI6Hytz+iHgYn+H5P9f3Gi/9/ERhSxcSX1urs0dkvhZnJ1PLykH1w4To2tnJ78t5bcGERERJ8Tyv1ElPxfCte1e+9V6vWK6W8r6TrWd6VrN1pK2l1fuda22W0p2XMd37Gctuy5KNirypPeTq/nuL5sOq7sOZ69q9/8LuNXv3uqY3Z92/J6bWV6SlpO1zctXzZsz5K9nW+3bW9buXplr6csu2lbpm87Xek5O66lylJ6So0F2g3V9e2mHU52Zc+1O6a7J7/ntHc6SjaUZ7l2z3eiApO67G7TcTu62DKChV90SERE9P/o8dPBg3v9/v6jkxOr4aV5NOcYM2KmJ/IpBXKMICIios+YUXe9wErFV5gQERERERERERERERERERERERERERERERFNOf2RvgUnVtIeFgSGc356MZ6D5xg9YjhVjsDL5vOp+0c9sN+LrJ5ZtNLkkYjBg4/nBK8O5yTNPx5zvEiluAS8cPv85QvABT0H0ZzcEg+A6edHl36MpU184yBq0VkxemHqosJwX+SW/59DOPHwd9OLRNjyQRAE81cvTLZh/uzHcw7Ao/ycXbB6yvFz3mciIjpv/wsAAP//eO06pA==")
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_MARK={0x8}]}, {0xfffffffffffffe4b}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
futimesat(r1, &(0x7f0000000000)='./file0\x00', 0x0)
mknodat$loop(r1, &(0x7f00000002c0)='./file0\x00', 0x80c8, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = open_tree(r1, &(0x7f0000000100)='./file0\x00', 0x9100)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00'})
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={&(0x7f00000003c0)="629d46576ae49f371d7ec9dcaf280493cc8571856eb88fd9d5fee20144ef09eacab0eccfbf7c2617293ed3fa6ed33d0bb466f1c752475ed1ec276e223e184e3e", &(0x7f0000000400), &(0x7f0000000640)="4ddb6b844fbb19a2194f0d7e5bf89a6fddb0362d72e2598619b8e9160b0000000e7f378de4d7c12f0b6bfe9ede8fec77dc57698bc6bab97762409893182f43b3a6cc4dcacff2a2ac63e67b3b7edb1124acee0cd73a5cb499df701651f30ebdbc403ddbf6ae550360a550be729cec46abcdfe0cbd65893b153ea2e7e3a0f83b0180000000000000fa8176273c472e677f105bd46986dbf57db7ca75e16c4490ba5d750e1ca3955230feaf34649e6c2a3c0011d02c499b3f5ebbbf279e7f1f083f1076f5f33aeb74fe69252bb60d770758498df16bee09a3", &(0x7f0000001140)="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", 0x8, r4, 0x4}, 0x38)
r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r6 = fcntl$dupfd(r5, 0x406, r5)
ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x17, 0x44, &(0x7f0000000200)=""/68}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r8}, 0x18)
arch_prctl$ARCH_GET_GS(0x1004, 0x0)

1m28.027559903s ago: executing program 38 (id=3838):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sys_enter\x00', r0}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x700, &(0x7f0000000a40)="$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")
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_MARK={0x8}]}, {0xfffffffffffffe4b}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
futimesat(r1, &(0x7f0000000000)='./file0\x00', 0x0)
mknodat$loop(r1, &(0x7f00000002c0)='./file0\x00', 0x80c8, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = open_tree(r1, &(0x7f0000000100)='./file0\x00', 0x9100)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00'})
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={&(0x7f00000003c0)="629d46576ae49f371d7ec9dcaf280493cc8571856eb88fd9d5fee20144ef09eacab0eccfbf7c2617293ed3fa6ed33d0bb466f1c752475ed1ec276e223e184e3e", &(0x7f0000000400), &(0x7f0000000640)="4ddb6b844fbb19a2194f0d7e5bf89a6fddb0362d72e2598619b8e9160b0000000e7f378de4d7c12f0b6bfe9ede8fec77dc57698bc6bab97762409893182f43b3a6cc4dcacff2a2ac63e67b3b7edb1124acee0cd73a5cb499df701651f30ebdbc403ddbf6ae550360a550be729cec46abcdfe0cbd65893b153ea2e7e3a0f83b0180000000000000fa8176273c472e677f105bd46986dbf57db7ca75e16c4490ba5d750e1ca3955230feaf34649e6c2a3c0011d02c499b3f5ebbbf279e7f1f083f1076f5f33aeb74fe69252bb60d770758498df16bee09a3", &(0x7f0000001140)="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", 0x8, r4, 0x4}, 0x38)
r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r6 = fcntl$dupfd(r5, 0x406, r5)
ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x17, 0x44, &(0x7f0000000200)=""/68}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r8}, 0x18)
arch_prctl$ARCH_GET_GS(0x1004, 0x0)

1m27.051909055s ago: executing program 7 (id=3846):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000980)={'filter\x00', 0x104, 0x2, 0x3c8, 0x0, 0x1f8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x1, 0xa, {@mac, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0xff]}}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xc0, 0x110, 0x0, {0xb000000}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @dev={0xac, 0x14, 0x14, 0xb}, @local, 0x8, 0x1}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x9, {@empty, {[0xff]}}, {@mac=@remote}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'veth0_macvtap\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x418)
sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x15, 0x0, 0x1, 0xfffffffc}, {}, {0x6}]})
openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf34)
getpgrp(0xffffffffffffffff)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0)

1m26.083777698s ago: executing program 7 (id=3854):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0xb)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_buf(r1, 0x6, 0x1f, 0x0, &(0x7f0000000100))

1m26.059726389s ago: executing program 7 (id=3855):
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000340)={[0x8]}, 0x8)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000004c0)='[:!++&\x00', &(0x7f0000000500)="830dc29260", 0x5)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast})

1m25.98163639s ago: executing program 7 (id=3858):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x65, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600a400014009000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), 0x0, 0xfe37, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0)
ioctl$TIOCSIG(r3, 0x40045436, 0xe)
utimes(&(0x7f0000001ac0)='./file1\x00', 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000040000000300000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'bond_slave_1\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r5}, 0x10)
r6 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x1})
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
socket$unix(0x1, 0x2, 0x0)
iopl(0x3)
syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@noblock_validity}, {@resuid}, {@dioread_nolock}, {@minixdf}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@orlov}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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")
chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00')
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00')
bpf$PROG_LOAD(0x5, 0x0, 0x0)

1m25.583302305s ago: executing program 7 (id=3860):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sys_enter\x00', r0}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
futimesat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)

1m25.083835652s ago: executing program 7 (id=3864):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000080))
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x444, &(0x7f00000006c0)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3bf2c4be27453e1a93ea96e73bde359df03f", @ANYRES32, @ANYRES8], 0xfe, 0x68f, &(0x7f0000000c00)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x835, 0x1)

1m25.070826001s ago: executing program 39 (id=3864):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000080))
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x444, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES8], 0xfe, 0x68f, &(0x7f0000000c00)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x835, 0x1)

1m12.755934753s ago: executing program 3 (id=4127):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x4008800)

1m12.722172554s ago: executing program 3 (id=4130):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_buf(r0, 0x6, 0x1f, 0x0, 0x0)

1m12.691220484s ago: executing program 3 (id=4132):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast})

1m12.506892517s ago: executing program 3 (id=4140):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
sched_getattr(0x0, &(0x7f00000010c0)={0x38}, 0xbe, 0x0)

1m12.467284747s ago: executing program 3 (id=4144):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1800, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100a55}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f0000000080), &(0x7f0000000180)=r1}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$kcm(0x2, 0x1000000000000002, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r6}, 0x18)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4fb, &(0x7f0000000500)="$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")
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
quotactl_fd$Q_QUOTAOFF(r8, 0xffffffff80000302, 0x0, 0x0)
setsockopt$inet_udp_int(r7, 0x11, 0xb, &(0x7f0000000300)=0x6, 0x4)
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={<r10=>0xffffffffffffffff}, 0x2, 0xc}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, r10, 0xb}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(r9, 0x0, 0x0)
openat$cgroup(r5, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0)
syz_clone(0x2002000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

1m11.763543087s ago: executing program 3 (id=4164):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000015c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x10, 0x1, 0x16000003, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xfff1}, {0xe, 0x1}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x91, 0x3, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x4c}}, 0x0)

56.705583895s ago: executing program 40 (id=4164):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000015c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x10, 0x1, 0x16000003, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xfff1}, {0xe, 0x1}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x91, 0x3, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x4c}}, 0x0)

2.817090003s ago: executing program 6 (id=5698):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000003d40)=[{{0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000000a00)=""/190, 0xbe}, 0x6}, {{0x0, 0x0, &(0x7f0000003b80)}, 0x7f}], 0x2, 0x2b, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

2.706485504s ago: executing program 6 (id=5701):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0)

2.470044477s ago: executing program 5 (id=5703):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000980)={'filter\x00', 0x104, 0x2, 0x3c8, 0x0, 0x1f8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x1, 0xa, {@mac, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0xff]}}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xc0, 0x110, 0x0, {0xb000000}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @dev={0xac, 0x14, 0x14, 0xb}, @local, 0x8, 0x1}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x9, {@empty, {[0xff]}}, {@mac=@remote}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'veth0_macvtap\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x418)
sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x15, 0x0, 0x1, 0xfffffffc}, {}, {0x6}]})
openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf34)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x8, 0x5, 0x4, 0x0, 0x3, 0x88a00, 0xb, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xc6, 0x1, @perf_config_ext={0x1, 0x6}, 0x1, 0x4, 0x10000, 0x6, 0x3, 0x10, 0x45a0, 0x0, 0x1, 0x0, 0xa1}, 0x0, 0x4, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0)

2.400079518s ago: executing program 6 (id=5706):
creat(&(0x7f0000000040)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, @perf_bp={0x0, 0xa}, 0x1000, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[])
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r1 = syz_open_procfs(0x0, &(0x7f0000005e00)='net/rpc\x00')
getdents64(r1, &(0x7f0000000240)=""/73, 0x49)
getdents64(r1, 0x0, 0x43)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000600)=ANY=[@ANYBLOB="18010000170000001000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x143082, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r8 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', &(0x7f0000000300)={0x2000, 0x0, 0x24}, 0x18)
mknodat$null(r8, &(0x7f0000000340)='./file1\x00', 0x8000, 0x103)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}}, 0x0)
r9 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x0, 0x4d299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f0000000040)={0x7a47f62a, 0x7fffffff, 0x1, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f00000003c0)={0x9, 0x0, 0x0, 'queue1\x00', 0x62ff3ba6})
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r9, 0x0)
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$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")

2.043883633s ago: executing program 6 (id=5713):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x8000000}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7fffffff, 0x9, 0x10, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x100000, 0xfff, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0xd4, 0xc, 0x5, 0x0, 0x0, 0x0, 0x3032, 0x0, 0x1, 0x4, 0x6, 0x8, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4]}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}}}]}}]}, 0x45c}}, 0x0)

1.806124426s ago: executing program 6 (id=5715):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r2}, 0x18)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1}}}})

1.778504487s ago: executing program 6 (id=5716):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001340)=@delchain={0x24, 0x65, 0x401, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xffe4, 0xb}, {0x10, 0x2}, {0xfff3, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x4048800)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
connect$can_bcm(r0, &(0x7f0000000040), 0x10)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0))
r5 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r5, 0x0)
accept4$unix(r5, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=unix'])
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
fcntl$dupfd(r4, 0x0, r6)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000000240), 0x80000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x0, 0x0, 0x1d0, 0x0, 0x1d0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

1.760613387s ago: executing program 0 (id=5718):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x4}, 0x18)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x20000000, 0x0, 0x0, 0x3}, {}, {0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xfffffff9, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4000}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x814}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xbbe3}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) (fail_nth: 11)

1.46515818s ago: executing program 0 (id=5719):
creat(&(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[])
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r1 = syz_open_procfs(0x0, &(0x7f0000005e00)='net/rpc\x00')
getdents64(r1, &(0x7f0000000240)=""/73, 0x49)
getdents64(r1, 0x0, 0x43)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000600)=ANY=[@ANYBLOB="18010000170000001000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x143082, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB], 0x1c}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r8 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', &(0x7f0000000300)={0x2000, 0x0, 0x24}, 0x18)
mknodat$null(r8, &(0x7f0000000340)='./file1\x00', 0x8000, 0x103)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}}, 0x0)
r9 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x0, 0x4d299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f0000000040)={0x7a47f62a, 0x7fffffff, 0x1, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f00000003c0)={0x9, 0x0, 0x0, 'queue1\x00', 0x62ff3ba6})
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r10, 0xc08c5336, &(0x7f0000000240)={0x0, 0xfffffffa, 0x0, 'queue0\x00', 0x200})
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r9, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100146, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$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")

1.46461061s ago: executing program 5 (id=5720):
r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='sched_switch\x00', r2}, 0x18)
writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000500)="aefdcd9d240200005a90f57f077029eff0f64ebbee07942c22595943bb05e374cbee8ad1b7244232b0772e11b44e65d766", 0x31}], 0x1)

1.338548772s ago: executing program 5 (id=5722):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x105190, 0x5dd8, 0x0, 0x5, 0x0, 0xc, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x0)

1.060409816s ago: executing program 5 (id=5724):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105400000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d0000008500000023000000"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000080)=r0)
close(r2)

991.190846ms ago: executing program 0 (id=5725):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="04000000040000000400000005ff33f99e4fda35fcb31a2e1bfdefd35ef05ca86ca23a2764e24291efd58ce5"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
socket$packet(0x11, 0xa, 0x300)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x1, 0x8, 0x2}, {0xffffffffffffffff, 0x6, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014)

935.795757ms ago: executing program 5 (id=5726):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, @perf_bp={0x0, 0xa}, 0x1000, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73"], 0x38}}, 0x0)

855.462498ms ago: executing program 5 (id=5729):
r0 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x5c, 0x84000)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000540)={<r1=>0x0, 0x99, "19cf7ebf887acfcb7308a5c9bd4840b1f8f0a2e4acd26431da1c70ddaef4e135df5c208e70a1e3ac11688ff725c4c819ae0fe9f061d4d15412dfaf146860d626278bd4b0e5d6cbd81a170394caa5b384ca149a1cdacdc01a1f1c57c4d184ea62571ec54300a0092a8f4dbbb3bd9104f1fb89cc649d456501cebfad67b4c41b0759a90260b0e901e94e1d70a6a45b72aeafddbfdf0edf914ecb"}, &(0x7f0000000340)=0xa1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000480)={r1, 0x3}, 0x8)
socket$packet(0x11, 0x2, 0x300)
syz_open_procfs$namespace(0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$rds(0x15, 0x5, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000000), 0x1000)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
symlinkat(&(0x7f0000000300)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000440)='./file0\x00')
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r5, 0x0, r4, 0x0, 0x46)
close(r4)
socket$igmp6(0xa, 0x3, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
memfd_create(&(0x7f0000000800)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec=\x9e\xc3\xfd\x85d\x0fl5\xf3\xbe\" 6\r<\xea\x8dz\xcf6\x99\x91\xear8p\xaaR\xd5\xa6\xab#N>\x9a\xdf\xea\x009\xfbB\xc1\xd0_\xc0\'Z\xeb\xd8\xaf\xf0\'J\xe2\xff\xe5x*;(p\xf7p\xce\xbb\xa7\xfe\x04\xd0t\x81\x1a\x1b?m/\x1ex\xf8\x88^\xbaU\xb9\xa6\xab\x8d\a\xa6\"\xd9\x13\xeb\xe2\rh\x8dsx\xaa!\xd5Q\xf8\xce*\x95\x0es\xfaZ\x94t\x19\xdc\xdc\xcf\x0f\x9a\xa2O>\xb9\xfc\x01\fW\xee\xffh\xbd\xb2\xb4z\xeb\x84\x13\x13u\x8f', 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1d, 0x18, &(0x7f00000004c0)=ANY=[@ANYRES64=r5, @ANYRESDEC=r2, @ANYBLOB="0000000000000000b70500000000000085000000a50000001801000020206401000000c4482020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='mm_page_free\x00', r6, 0x0, 0x4}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ad00000085000000d000000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000100)='./file1\x00', 0x200880, &(0x7f0000000280)=ANY=[], 0x11, 0x744, &(0x7f0000001280)="$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")
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8000000003, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x5, 0x800000000003}, 0x115d2, 0x0, 0x10000005, 0x3, 0x3c, 0x8, 0xfffc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

699.756911ms ago: executing program 4 (id=5732):
creat(&(0x7f0000000040)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, @perf_bp={0x0, 0xa}, 0x1000, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[])
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r1 = syz_open_procfs(0x0, &(0x7f0000005e00)='net/rpc\x00')
getdents64(r1, &(0x7f0000000240)=""/73, 0x49)
getdents64(r1, 0x0, 0x43)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000600)=ANY=[@ANYBLOB="18010000170000001000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x143082, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB], 0x1c}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r8 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', &(0x7f0000000300)={0x2000, 0x0, 0x24}, 0x18)
mknodat$null(r8, &(0x7f0000000340)='./file1\x00', 0x8000, 0x103)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}}, 0x0)
r9 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x0, 0x4d299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f0000000040)={0x7a47f62a, 0x7fffffff, 0x1, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f00000003c0)={0x9, 0x0, 0x0, 'queue1\x00', 0x62ff3ba6})
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r9, 0x0)
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$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")

678.594121ms ago: executing program 0 (id=5733):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r3, &(0x7f0000000140)={0x1d, r5, 0x1, {0x0, 0xff, 0x3}, 0xfd}, 0x18)
bind$can_j1939(r3, &(0x7f0000000540)={0x1d, r5, 0x2, {0x3d571f64d2fd87d7, 0xff}, 0x1}, 0x18)

631.051332ms ago: executing program 9 (id=5734):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x105190, 0x5dd8, 0x0, 0x5, 0x0, 0xc, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x0)

589.239662ms ago: executing program 0 (id=5735):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x4}, 0x18)
r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r5, 0x0, 0x8}, 0x18)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
r6 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0)
setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfc, 0x574, &(0x7f0000000e40)="$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")
setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa79a7470de937218520fa789c93aaaabb08004500001c0000002000029078e00000"], 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, &(0x7f0000000240)={0x5, 0x4, 0x0, 0x8}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000140)=0x1e)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000001ac0)={0x0, 0x600, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="01dfffffff9a2600000021"], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x20000000, 0x0, 0x0, 0x3}, {}, {0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xfffffff9, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4000}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x814}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xbbe3}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)

589.001572ms ago: executing program 9 (id=5736):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x1c, r3, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

531.122653ms ago: executing program 9 (id=5737):
r0 = io_uring_setup(0x476, &(0x7f0000000000)={0x0, 0xb9b3, 0x1000, 0x1, 0x30})
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x18)
recvfrom$inet(r1, 0x0, 0x0, 0x120, 0x0, 0x0)
sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040040}, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

521.249923ms ago: executing program 4 (id=5738):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, @perf_bp={0x0, 0xa}, 0x1000, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73"], 0x38}}, 0x0)

419.316584ms ago: executing program 4 (id=5739):
bpf$PROG_LOAD(0x5, &(0x7f0000003fc0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="83a1958fe6ad7c78a7e646d8bc370e4c2b6041e24b5f424e899fb8af1923184feb9bd64a3d10982bc204ce3dbc0ee9c7f6668275dab6895b659e0a3f25a1adbab83f64e01a0ae451a6c11c0e47a08b5dbb1edc071cfd5f660b2fae49c94001aecedd06a888777daf6bf488ce36ed18ea31628257b3", @ANYRES32=r0, @ANYRES16=r0, @ANYRESDEC, @ANYRES8=0x0, @ANYRES16=r0, @ANYRES8=r0, @ANYRES32, @ANYRES16=r0, @ANYRESHEX=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, @void, @value}, 0x94)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r3=>0x0})
bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ptype\x00')
r5 = socket$packet(0x11, 0x3, 0x300)
signalfd(r1, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x8)
bind$packet(r5, &(0x7f0000000000)={0x11, 0x5, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000340)=""/171, 0xab}], 0x1, 0x33, 0x0)

402.530815ms ago: executing program 9 (id=5740):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1}}}})

298.032296ms ago: executing program 4 (id=5741):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r3 = io_uring_setup(0x6b3, &(0x7f0000000000)={0x0, 0xf324, 0x100, 0xfffffefe, 0xb9})
io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000300)={&(0x7f0000002000)={[{0x0, 0x0, 0x2}, {0x0}, {0x0, 0x0, 0x3}, {0x0}]}, 0x4, 0x1}, 0x1)
io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x17, &(0x7f00000075c0)={0x0, 0x0, 0x1}, 0x1)

291.885136ms ago: executing program 9 (id=5742):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18)
socket$inet(0x2, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=r3, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0)

234.023817ms ago: executing program 9 (id=5743):
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$inet6(r2, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}, 0x3}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newtaction={0x88c, 0x30, 0xffff, 0x3, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x22, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x27ffdbfc, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0xeeb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x100000]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x20000000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x8dc, 0x0, 0x5, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x800, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2000000, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xf9, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x7a1, 0x0, 0x7, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0xfffffffd, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x100]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x0, 0x0, 0xfffffffe, {0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x3}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x40c1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001, @void, @value}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x28, 0x1, 0x4, 0x25dfdbf8, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x784, &(0x7f0000001900)="$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")
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000240), 0x208e24b)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c2, &(0x7f00000008c0)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0xac, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x98, 0x1, [@m_mirred={0x94, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x10001, 0x1, 0x400, 0xfffffff7}, 0x1}}]}, {0x26, 0x6, "a8cb243e16f9b8f873b9ac0f9735848df2808d92a325e6af27c1853fc9b803000000"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

202.701047ms ago: executing program 4 (id=5744):
r0 = socket$nl_route(0x10, 0x3, 0x0)
read(r0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0x3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x34, 0x2, [@TCA_MATCHALL_ACT={0x30, 0x2, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x0)

46.200279ms ago: executing program 0 (id=5745):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
fstat(r2, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@local, 0x4e24, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x11, 0x0, r3}, {0x0, 0x0, 0x0, 0x100000000, 0xca8, 0x0, 0xfffffffffffffffc}, {0x8}, 0xff, 0x800000, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x14, 0x26, 0x9, 0x70bd2b, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x844)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
socket$inet_sctp(0x2, 0x1, 0x84)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x204410, &(0x7f0000000740), 0xfe, 0x4a1, &(0x7f00000001c0)="$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")
ptrace$setregs(0xd, r6, 0x0, &(0x7f00000003c0))
ptrace$getregset(0x4205, r6, 0x200, &(0x7f0000000080)={0x0})
ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000000))
mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x100000000000600d, 0x0)
r7 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7)
r8 = dup2(r7, r7)
ioctl$BLKTRACESETUP(r8, 0xc0481273, 0x0)
ioctl$BLKTRACESETUP(r8, 0x1276, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r9)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)={0x38, r10, 0xc4fc9e906872338b, 0x20, 0x2000000, {{0x15}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffc}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}]}]}]}]}, 0x38}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r8, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r10, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x44840)

0s ago: executing program 4 (id=5746):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x1c, r3, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

kernel console output (not intermixed with test programs):

 T29] audit: type=1400 audit(351.970:34602): avc:  denied  { create } for  pid=19054 comm="syz.4.5056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  352.099023][T19063] loop0: detected capacity change from 0 to 1024
[  352.163063][   T29] audit: type=1400 audit(352.140:34603): avc:  denied  { read } for  pid=19054 comm="syz.4.5056" path="socket:[58663]" dev="sockfs" ino=58663 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  352.174848][   T29] audit: type=1400 audit(352.200:34604): avc:  denied  { create } for  pid=19057 comm="syz.6.5051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  352.328061][T19063] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  352.333730][   T29] audit: type=1400 audit(352.320:34605): avc:  denied  { write } for  pid=19057 comm="syz.6.5051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  352.466603][   T29] audit: type=1326 audit(352.320:34606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19057 comm="syz.6.5051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37961ee969 code=0x7ffc0000
[  352.489756][   T29] audit: type=1326 audit(352.330:34607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19057 comm="syz.6.5051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37961ee969 code=0x7ffc0000
[  352.512828][   T29] audit: type=1326 audit(352.330:34608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19057 comm="syz.6.5051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f37961ee969 code=0x7ffc0000
[  352.539234][T19070] FAULT_INJECTION: forcing a failure.
[  352.539234][T19070] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  352.552396][T19070] CPU: 1 UID: 0 PID: 19070 Comm: syz.5.5059 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) 
[  352.552439][T19070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  352.552454][T19070] Call Trace:
[  352.552463][T19070]  <TASK>
[  352.552473][T19070]  __dump_stack+0x1d/0x30
[  352.552499][T19070]  dump_stack_lvl+0xe8/0x140
[  352.552523][T19070]  dump_stack+0x15/0x1b
[  352.552621][T19070]  should_fail_ex+0x265/0x280
[  352.552715][T19070]  should_fail+0xb/0x20
[  352.552763][T19070]  should_fail_usercopy+0x1a/0x20
[  352.552788][T19070]  _copy_from_user+0x1c/0xb0
[  352.552864][T19070]  snd_seq_write+0x1d3/0x530
[  352.552904][T19070]  ? __pfx_snd_seq_write+0x10/0x10
[  352.552949][T19070]  vfs_write+0x266/0x8d0
[  352.552993][T19070]  ? __rcu_read_unlock+0x4f/0x70
[  352.553021][T19070]  ? __fget_files+0x184/0x1c0
[  352.553060][T19070]  ksys_write+0xda/0x1a0
[  352.553094][T19070]  __x64_sys_write+0x40/0x50
[  352.553160][T19070]  x64_sys_call+0x2cdd/0x2fb0
[  352.553184][T19070]  do_syscall_64+0xd0/0x1a0
[  352.553235][T19070]  ? clear_bhb_loop+0x40/0x90
[  352.553262][T19070]  ? clear_bhb_loop+0x40/0x90
[  352.553289][T19070]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.553315][T19070] RIP: 0033:0x7faa98a9e969
[  352.553335][T19070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  352.553419][T19070] RSP: 002b:00007faa97107038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  352.553441][T19070] RAX: ffffffffffffffda RBX: 00007faa98cc5fa0 RCX: 00007faa98a9e969
[  352.553457][T19070] RDX: 000000000000ffc8 RSI: 0000200000000000 RDI: 0000000000000003
[  352.553472][T19070] RBP: 00007faa97107090 R08: 0000000000000000 R09: 0000000000000000
[  352.553487][T19070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  352.553502][T19070] R13: 0000000000000000 R14: 00007faa98cc5fa0 R15: 00007ffde2d02608
[  352.553545][T19070]  </TASK>
[  352.756070][T17308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  352.800981][T19076] FAULT_INJECTION: forcing a failure.
[  352.800981][T19076] name failslab, interval 1, probability 0, space 0, times 0
[  352.813712][T19076] CPU: 0 UID: 0 PID: 19076 Comm: syz.6.5061 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) 
[  352.813766][T19076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  352.813782][T19076] Call Trace:
[  352.813790][T19076]  <TASK>
[  352.813802][T19076]  __dump_stack+0x1d/0x30
[  352.813828][T19076]  dump_stack_lvl+0xe8/0x140
[  352.813852][T19076]  dump_stack+0x15/0x1b
[  352.813873][T19076]  should_fail_ex+0x265/0x280
[  352.813910][T19076]  should_failslab+0x8c/0xb0
[  352.813977][T19076]  kmem_cache_alloc_noprof+0x50/0x310
[  352.813999][T19076]  ? __anon_vma_prepare+0xcd/0x2f0
[  352.814172][T19076]  __anon_vma_prepare+0xcd/0x2f0
[  352.814252][T19076]  do_wp_page+0x17fa/0x23e0
[  352.814288][T19076]  ? __lruvec_stat_mod_folio+0xd6/0x120
[  352.814358][T19076]  ? __rcu_read_lock+0x37/0x50
[  352.814397][T19076]  handle_mm_fault+0x6dc/0x2ae0
[  352.814430][T19076]  ? mas_walk+0xf2/0x120
[  352.814515][T19076]  do_user_addr_fault+0x636/0x1090
[  352.814575][T19076]  ? fpregs_assert_state_consistent+0x84/0xa0
[  352.814685][T19076]  exc_page_fault+0x54/0xc0
[  352.814712][T19076]  asm_exc_page_fault+0x26/0x30
[  352.814738][T19076] RIP: 0033:0x7f37960b0cc3
[  352.814757][T19076] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c
[  352.814780][T19076] RSP: 002b:00007f37948564a0 EFLAGS: 00010202
[  352.814862][T19076] RAX: 0000000000000400 RBX: 00007f3794856540 RCX: 00007f378c437000
[  352.814879][T19076] RDX: 00007f37948566e0 RSI: 0000000000000069 RDI: 00007f37948565e0
[  352.814895][T19076] RBP: 00000000000000f9 R08: 0000000000000007 R09: 0000000000000046
[  352.814911][T19076] R10: 0000000000000052 R11: 00007f3794856540 R12: 0000000000000001
[  352.814927][T19076] R13: 00007f379628bfc0 R14: 0000000000000020 R15: 00007f37948565e0
[  352.814951][T19076]  </TASK>
[  352.814980][T19076] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  353.034512][T19076] loop6: detected capacity change from 0 to 512
[  353.061990][T19076] EXT4-fs: Ignoring removed nobh option
[  353.092991][T19076] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117
[  353.104840][T19076] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #13: comm syz.6.5061: casefold flag without casefold feature
[  353.174030][T19076] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.5061: couldn't read orphan inode 13 (err -117)
[  353.279957][T19076] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  353.300189][T19076] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  353.318783][T19089] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  353.348488][T19091] sg_write: data in/out 512/1 bytes for SCSI command 0xb7-- guessing data in;
[  353.348488][T19091]    program syz.6.5067 not setting count and/or reply_len properly
[  353.434751][T19094] loop0: detected capacity change from 0 to 1024
[  353.467944][T19101] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  353.473972][T19094] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  353.476021][T19101] team0: Device ipvlan2 is already an upper device of the team interface
[  353.511025][T17308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  353.525106][T19105] loop6: detected capacity change from 0 to 1024
[  353.532574][T19105] EXT4-fs: Ignoring removed nobh option
[  353.538310][T19105] EXT4-fs: Ignoring removed bh option
[  353.553825][T19105] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  353.581171][T19101] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt.
[  353.581847][T19113] netlink: 'syz.0.5072': attribute type 21 has an invalid length.
[  353.603591][T19113] netlink: 176 bytes leftover after parsing attributes in process `syz.0.5072'.
[  353.618939][T19112] netlink: 172 bytes leftover after parsing attributes in process `syz.0.5072'.
[  353.629885][T12236] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  353.732846][T19126] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  353.760518][T19127] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  353.768947][T19127] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  353.956882][T19141] loop0: detected capacity change from 0 to 128
[  353.967144][T19141] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  354.029545][T19148] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  354.039489][T17308] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  354.111153][T19151] netlink: 452 bytes leftover after parsing attributes in process `syz.4.5089'.
[  354.144532][T19157] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  354.246417][T19120] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5076'.
[  354.269686][T19120] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5076'.
[  354.330274][T19168] loop5: detected capacity change from 0 to 1024
[  354.375745][T19168] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  354.473454][T15824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  354.548870][T19181] sch_tbf: burst 0 is lower than device lo mtu (18) !
[  354.578050][T19183] sg_write: data in/out 512/1 bytes for SCSI command 0xb7-- guessing data in;
[  354.578050][T19183]    program syz.6.5100 not setting count and/or reply_len properly
[  354.616065][T19185] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  354.683249][T19189] loop0: detected capacity change from 0 to 2048
[  354.729988][T19193] loop5: detected capacity change from 0 to 512
[  354.762223][T19189]  loop0: p1 < > p2 < > p3 p4
[  354.767166][T19189] loop0: partition table partially beyond EOD, truncated
[  354.776532][T19193] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  354.787111][T19193] EXT4-fs (loop5): orphan cleanup on readonly fs
[  354.798435][T19189] loop0: p1 start 2305 is beyond EOD, truncated
[  354.804946][T19189] loop0: p2 start 4294902784 is beyond EOD, truncated
[  354.811970][T19189] loop0: p3 start 3724543488 is beyond EOD, truncated
[  354.818769][T19189] loop0: p4 size 8192 extends beyond EOD, truncated
[  354.864020][T19193] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.5104: invalid indirect mapped block 256 (level 2)
[  354.904789][T19193] EXT4-fs (loop5): 2 truncates cleaned up
[  354.911173][T19193] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  354.926246][T19193] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5104'.
[  354.935632][T19193] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5104'.
[  354.946172][T19193] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  354.959399][T19205] loop0: detected capacity change from 0 to 1024
[  354.973930][T19201] FAULT_INJECTION: forcing a failure.
[  354.973930][T19201] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  354.987124][T19201] CPU: 0 UID: 0 PID: 19201 Comm: syz.9.5105 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) 
[  354.987159][T19201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  354.987174][T19201] Call Trace:
[  354.987180][T19201]  <TASK>
[  354.987234][T19201]  __dump_stack+0x1d/0x30
[  354.987255][T19201]  dump_stack_lvl+0xe8/0x140
[  354.987275][T19201]  dump_stack+0x15/0x1b
[  354.987292][T19201]  should_fail_ex+0x265/0x280
[  354.987333][T19201]  should_fail+0xb/0x20
[  354.987401][T19201]  should_fail_usercopy+0x1a/0x20
[  354.987422][T19201]  _copy_from_user+0x1c/0xb0
[  354.987460][T19201]  kstrtouint_from_user+0x69/0xf0
[  354.987504][T19201]  ? avc_policy_seqno+0x15/0x30
[  354.987570][T19201]  proc_fail_nth_write+0x50/0x160
[  354.987670][T19201]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  354.987702][T19201]  vfs_write+0x266/0x8d0
[  354.987741][T19201]  ? vfs_read+0x47f/0x6f0
[  354.987824][T19201]  ? __rcu_read_unlock+0x4f/0x70
[  354.987899][T19201]  ? __fget_files+0x184/0x1c0
[  354.987939][T19201]  ksys_write+0xda/0x1a0
[  354.988037][T19201]  __x64_sys_write+0x40/0x50
[  354.988068][T19201]  x64_sys_call+0x2cdd/0x2fb0
[  354.988098][T19201]  do_syscall_64+0xd0/0x1a0
[  354.988130][T19201]  ? clear_bhb_loop+0x40/0x90
[  354.988221][T19201]  ? clear_bhb_loop+0x40/0x90
[  354.988250][T19201]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.988279][T19201] RIP: 0033:0x7ff0e453d41f
[  354.988299][T19201] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  354.988364][T19201] RSP: 002b:00007ff0e2ba7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  354.988388][T19201] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff0e453d41f
[  354.988406][T19201] RDX: 0000000000000001 RSI: 00007ff0e2ba70a0 RDI: 0000000000000006
[  354.988423][T19201] RBP: 00007ff0e2ba7090 R08: 0000000000000000 R09: 0000000000000000
[  354.988451][T19201] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  354.988478][T19201] R13: 0000000000000000 R14: 00007ff0e4765fa0 R15: 00007ffe6f2a98b8
[  354.988501][T19201]  </TASK>
[  355.214360][T19203] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  355.223700][T15824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  355.241382][T19210] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  355.250343][T19205] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  355.290694][T19203] loop6: detected capacity change from 0 to 2050
[  355.300418][T19203] EXT4-fs warning (device loop6): read_mmp_block:115: Error -117 while reading MMP block 64
[  355.343739][T17308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  355.352779][T19215] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  355.374548][T19218] loop0: detected capacity change from 0 to 512
[  355.381349][T19218] ext3: Unknown parameter 'subj_type'
[  355.485535][T19224] loop9: detected capacity change from 0 to 512
[  355.502549][T19224] EXT4-fs: Ignoring removed nobh option
[  355.513698][T19224] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.5114: invalid indirect mapped block 256 (level 2)
[  355.532812][T19224] EXT4-fs (loop9): 2 truncates cleaned up
[  355.539221][T19224] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  355.570583][T19224] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5114'.
[  355.628686][T19241] loop0: detected capacity change from 0 to 1024
[  355.694447][T19241] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  355.707985][T13445] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  355.794316][T19258] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  355.829596][T19260] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5130'.
[  355.966808][T19276] loop5: detected capacity change from 0 to 512
[  355.975479][T19276] EXT4-fs: Ignoring removed nobh option
[  355.998390][T19278] FAULT_INJECTION: forcing a failure.
[  355.998390][T19278] name failslab, interval 1, probability 0, space 0, times 0
[  355.999092][T19276] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.5136: invalid indirect mapped block 256 (level 2)
[  356.011154][T19278] CPU: 1 UID: 0 PID: 19278 Comm: syz.6.5138 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) 
[  356.011191][T19278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  356.011206][T19278] Call Trace:
[  356.011255][T19278]  <TASK>
[  356.011263][T19278]  __dump_stack+0x1d/0x30
[  356.011286][T19278]  dump_stack_lvl+0xe8/0x140
[  356.011305][T19278]  dump_stack+0x15/0x1b
[  356.011375][T19278]  should_fail_ex+0x265/0x280
[  356.011424][T19278]  ? xfrm_policy_alloc+0x62/0x1b0
[  356.011458][T19278]  should_failslab+0x8c/0xb0
[  356.011507][T19278]  __kmalloc_cache_noprof+0x4c/0x320
[  356.011539][T19278]  xfrm_policy_alloc+0x62/0x1b0
[  356.011590][T19278]  pfkey_compile_policy+0x193/0x410
[  356.011631][T19278]  ? xfrm_compile_policy+0x106/0x240
[  356.011662][T19278]  ? __pfx_pfkey_compile_policy+0x10/0x10
[  356.011751][T19278]  xfrm_user_policy+0x297/0x540
[  356.011816][T19278]  do_ip_setsockopt+0x1723/0x2240
[  356.011902][T19278]  ip_setsockopt+0x58/0x110
[  356.011940][T19278]  raw_setsockopt+0xbd/0x150
[  356.011993][T19278]  sock_common_setsockopt+0x66/0x80
[  356.012039][T19278]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  356.012080][T19278]  __sys_setsockopt+0x181/0x200
[  356.012114][T19278]  __x64_sys_setsockopt+0x64/0x80
[  356.012141][T19278]  x64_sys_call+0x2bd5/0x2fb0
[  356.012171][T19278]  do_syscall_64+0xd0/0x1a0
[  356.012273][T19278]  ? clear_bhb_loop+0x40/0x90
[  356.012303][T19278]  ? clear_bhb_loop+0x40/0x90
[  356.012333][T19278]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.012373][T19278] RIP: 0033:0x7f37961ee969
[  356.012411][T19278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  356.012437][T19278] RSP: 002b:00007f3794857038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  356.012463][T19278] RAX: ffffffffffffffda RBX: 00007f3796415fa0 RCX: 00007f37961ee969
[  356.012529][T19278] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000005
[  356.012546][T19278] RBP: 00007f3794857090 R08: 000000000000010c R09: 0000000000000000
[  356.012563][T19278] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001
[  356.012581][T19278] R13: 0000000000000000 R14: 00007f3796415fa0 R15: 00007ffd8e457a48
[  356.012619][T19278]  </TASK>
[  356.014023][T19281] loop9: detected capacity change from 0 to 1024
[  356.025148][T19276] EXT4-fs (loop5): 2 truncates cleaned up
[  356.084521][T19287] loop0: detected capacity change from 0 to 512
[  356.268429][T19287] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  356.342747][T19287] EXT4-fs (loop0): 1 truncate cleaned up
[  356.445356][T19297] netlink: 'syz.9.5143': attribute type 1 has an invalid length.
[  356.469753][T19297] loop9: detected capacity change from 0 to 164
[  356.479089][T19297] iso9660: Unknown parameter '00000000000000000000000017777777777777777777770xffffffffffffffff01777777777777777777777ÿÿÿÿÿÿÿ'
[  356.642796][T19311] lo speed is unknown, defaulting to 1000
[  356.906973][T19317] sg_write: data in/out 512/1 bytes for SCSI command 0xb7-- guessing data in;
[  356.906973][T19317]    program syz.9.5150 not setting count and/or reply_len properly
[  357.059831][   T29] kauditd_printk_skb: 103 callbacks suppressed
[  357.059850][   T29] audit: type=1400 audit(357.080:34710): avc:  denied  { ioctl } for  pid=19320 comm="syz.4.5152" path="/dev/ptp0" dev="devtmpfs" ino=246 ioctlcmd=0x3d04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  357.105606][T19323] loop6: detected capacity change from 0 to 512
[  357.112460][T19323] EXT4-fs: Ignoring removed nobh option
[  357.120215][T19323] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.5154: invalid indirect mapped block 256 (level 2)
[  357.140202][T19323] EXT4-fs (loop6): 2 truncates cleaned up
[  357.148792][T19328] FAULT_INJECTION: forcing a failure.
[  357.148792][T19328] name failslab, interval 1, probability 0, space 0, times 0
[  357.161685][T19328] CPU: 1 UID: 0 PID: 19328 Comm: syz.4.5155 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) 
[  357.161720][T19328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  357.161736][T19328] Call Trace:
[  357.161743][T19328]  <TASK>
[  357.161752][T19328]  __dump_stack+0x1d/0x30
[  357.161824][T19328]  dump_stack_lvl+0xe8/0x140
[  357.161849][T19328]  dump_stack+0x15/0x1b
[  357.161876][T19328]  should_fail_ex+0x265/0x280
[  357.161921][T19328]  should_failslab+0x8c/0xb0
[  357.161965][T19328]  kmem_cache_alloc_noprof+0x50/0x310
[  357.162015][T19328]  ? audit_log_start+0x365/0x6c0
[  357.162056][T19328]  audit_log_start+0x365/0x6c0
[  357.162100][T19328]  audit_seccomp+0x48/0x100
[  357.162135][T19328]  ? __seccomp_filter+0x68c/0x10d0
[  357.162243][T19328]  __seccomp_filter+0x69d/0x10d0
[  357.162281][T19328]  ? do_fcntl+0x997/0xdf0
[  357.162306][T19328]  ? should_failslab+0x8c/0xb0
[  357.162414][T19328]  ? __kmalloc_cache_noprof+0x189/0x320
[  357.162449][T19328]  __secure_computing+0x82/0x150
[  357.162477][T19328]  syscall_trace_enter+0xcf/0x1e0
[  357.162520][T19328]  do_syscall_64+0xaa/0x1a0
[  357.162627][T19328]  ? clear_bhb_loop+0x40/0x90
[  357.162657][T19328]  ? clear_bhb_loop+0x40/0x90
[  357.162681][T19328]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  357.162730][T19328] RIP: 0033:0x7fe18fe9d37c
[  357.162750][T19328] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  357.162774][T19328] RSP: 002b:00007fe18e507030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  357.162797][T19328] RAX: ffffffffffffffda RBX: 00007fe1900c5fa0 RCX: 00007fe18fe9d37c
[  357.162814][T19328] RDX: 000000000000000f RSI: 00007fe18e5070a0 RDI: 0000000000000006
[  357.162831][T19328] RBP: 00007fe18e507090 R08: 0000000000000000 R09: 0000000000000000
[  357.162875][T19328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  357.162892][T19328] R13: 0000000000000000 R14: 00007fe1900c5fa0 R15: 00007ffdfdb8b9c8
[  357.162915][T19328]  </TASK>
[  357.363538][T19328] audit: audit_lost=9 audit_rate_limit=0 audit_backlog_limit=64
[  357.366947][   T29] audit: type=1326 audit(357.180:34711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19327 comm="syz.4.5155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18fe9e969 code=0x7ffc0000
[  357.371228][T19328] audit: out of memory in audit_log_start
[  357.396614][T19323] __nla_validate_parse: 8 callbacks suppressed
[  357.396633][T19323] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5154'.
[  357.400204][   T29] audit: type=1326 audit(357.180:34712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19327 comm="syz.4.5155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18fe9e969 code=0x7ffc0000
[  357.438412][   T29] audit: type=1326 audit(357.180:34713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19327 comm="syz.4.5155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe18fe9e969 code=0x7ffc0000
[  357.461674][   T29] audit: type=1326 audit(357.180:34714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19327 comm="syz.4.5155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18fe9e969 code=0x7ffc0000
[  357.484801][   T29] audit: type=1326 audit(357.180:34715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19327 comm="syz.4.5155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe18fe9e969 code=0x7ffc0000
[  357.508426][   T29] audit: type=1326 audit(357.180:34716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19327 comm="syz.4.5155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18fe9e969 code=0x7ffc0000
[  357.531585][   T29] audit: type=1326 audit(357.180:34717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19327 comm="syz.4.5155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fe18fe9e969 code=0x7ffc0000
[  357.586454][T19333] FAULT_INJECTION: forcing a failure.
[  357.586454][T19333] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  357.599938][T19333] CPU: 1 UID: 0 PID: 19333 Comm: syz.5.5157 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) 
[  357.600064][T19333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  357.600079][T19333] Call Trace:
[  357.600085][T19333]  <TASK>
[  357.600094][T19333]  __dump_stack+0x1d/0x30
[  357.600188][T19333]  dump_stack_lvl+0xe8/0x140
[  357.600208][T19333]  dump_stack+0x15/0x1b
[  357.600225][T19333]  should_fail_ex+0x265/0x280
[  357.600317][T19333]  should_fail_alloc_page+0xf2/0x100
[  357.600403][T19333]  __alloc_frozen_pages_noprof+0xff/0x360
[  357.600441][T19333]  alloc_pages_mpol+0xb3/0x250
[  357.600469][T19333]  alloc_pages_noprof+0x90/0x130
[  357.600501][T19333]  pgd_alloc+0x4f/0x2b0
[  357.600527][T19333]  mm_init+0x34b/0x810
[  357.600580][T19333]  ? kmem_cache_alloc_noprof+0x220/0x310
[  357.600604][T19333]  ? copy_mm+0xdf/0x1360
[  357.600670][T19333]  copy_mm+0x11b/0x1360
[  357.600706][T19333]  ? __hrtimer_setup+0x144/0x170
[  357.600786][T19333]  ? __pfx_it_real_fn+0x10/0x10
[  357.600817][T19333]  ? __pfx_it_real_fn+0x10/0x10
[  357.600851][T19333]  ? tty_audit_fork+0x4b/0x60
[  357.600880][T19333]  ? __init_rwsem+0x5d/0x70
[  357.600968][T19333]  copy_process+0xcf1/0x1f90
[  357.601014][T19333]  kernel_clone+0x16c/0x5b0
[  357.601049][T19333]  ? vfs_write+0x75e/0x8d0
[  357.601086][T19333]  __x64_sys_clone+0xe6/0x120
[  357.601201][T19333]  x64_sys_call+0x2c59/0x2fb0
[  357.601223][T19333]  do_syscall_64+0xd0/0x1a0
[  357.601297][T19333]  ? clear_bhb_loop+0x40/0x90
[  357.601320][T19333]  ? clear_bhb_loop+0x40/0x90
[  357.601343][T19333]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  357.601391][T19333] RIP: 0033:0x7faa98a9e969
[  357.601450][T19333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  357.601474][T19333] RSP: 002b:00007faa970e5fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  357.601589][T19333] RAX: ffffffffffffffda RBX: 00007faa98cc6080 RCX: 00007faa98a9e969
[  357.601661][T19333] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011
[  357.601678][T19333] RBP: 00007faa970e6090 R08: 0000000000000000 R09: 0000000000000000
[  357.601695][T19333] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002
[  357.601709][T19333] R13: 0000000000000000 R14: 00007faa98cc6080 R15: 00007ffde2d02608
[  357.601741][T19333]  </TASK>
[  357.890116][T19336] loop9: detected capacity change from 0 to 2048
[  357.911714][T19345] syz_tun: entered allmulticast mode
[  357.919106][T19345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5163'.
[  357.930030][T19345] syz_tun (unregistering): left allmulticast mode
[  357.937474][T19336] EXT4-fs error (device loop9): ext4_find_extent:938: inode #2: comm syz.9.5159: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  357.979917][T19349] sg_write: data in/out 512/1 bytes for SCSI command 0xb7-- guessing data in;
[  357.979917][T19349]    program syz.9.5164 not setting count and/or reply_len properly
[  358.031708][T19351] netlink: 'syz.4.5165': attribute type 29 has an invalid length.
[  358.106293][T19355] pim6reg1: entered promiscuous mode
[  358.111702][T19355] pim6reg1: entered allmulticast mode
[  358.128681][T19353] loop9: detected capacity change from 0 to 2048
[  358.135393][T19357] loop0: detected capacity change from 0 to 2048
[  358.143742][T19357] EXT4-fs: Ignoring removed bh option
[  358.197342][T19353] EXT4-fs error (device loop9): ext4_find_extent:938: inode #2: comm syz.9.5166: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  358.224504][T19365] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  358.245694][T19365] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  358.258019][T19365] EXT4-fs (loop0): This should not happen!! Data will be lost
[  358.258019][T19365] 
[  358.267978][T19365] EXT4-fs (loop0): Total free blocks count 0
[  358.274004][T19365] EXT4-fs (loop0): Free/Dirty block details
[  358.279975][T19365] EXT4-fs (loop0): free_blocks=2415919104
[  358.285729][T19365] EXT4-fs (loop0): dirty_blocks=368
[  358.290940][T19365] EXT4-fs (loop0): Block reservation details
[  358.296985][T19365] EXT4-fs (loop0): i_reserved_data_blocks=23
[  358.377173][T19368] loop9: detected capacity change from 0 to 512
[  358.412066][T19369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5167'.
[  358.439138][T19368] EXT4-fs: Ignoring removed nobh option
[  358.461415][T19368] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.5170: invalid indirect mapped block 256 (level 2)
[  358.492900][T19358] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5160'.
[  358.515685][T19368] EXT4-fs (loop9): 2 truncates cleaned up
[  358.548702][T19378] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5160'.
[  358.634757][T19368] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5170'.
[  358.666308][T19383] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  358.730803][T19385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5177'.
[  358.759278][T19390] loop9: detected capacity change from 0 to 128
[  358.772657][   T55] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28
[  358.778396][T19392] sg_write: data in/out 512/1 bytes for SCSI command 0xb7-- guessing data in;
[  358.778396][T19392]    program syz.4.5180 not setting count and/or reply_len properly
[  358.785296][   T55] EXT4-fs (loop0): This should not happen!! Data will be lost
[  358.785296][   T55] 
[  358.826891][T19390] syz.9.5178: attempt to access beyond end of device
[  358.826891][T19390] loop9: rw=2049, sector=153, nr_sectors = 8 limit=128
[  358.872032][T19390] syz.9.5178: attempt to access beyond end of device
[  358.872032][T19390] loop9: rw=2049, sector=169, nr_sectors = 1 limit=128
[  358.984608][T19407] loop6: detected capacity change from 0 to 512
[  358.991424][T19407] EXT4-fs: Ignoring removed nobh option
[  359.022007][T19407] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.5188: invalid indirect mapped block 256 (level 2)
[  359.052209][T19417] loop9: detected capacity change from 0 to 2048
[  359.058961][T19417] EXT4-fs: Ignoring removed bh option
[  359.074203][T19407] EXT4-fs (loop6): 2 truncates cleaned up
[  359.083729][T19407] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5188'.
[  359.099482][T19422] pim6reg1: entered promiscuous mode
[  359.105084][T19422] pim6reg1: entered allmulticast mode
[  359.188848][T19432] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  359.213905][T19432] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  359.226202][T19432] EXT4-fs (loop9): This should not happen!! Data will be lost
[  359.226202][T19432] 
[  359.236047][T19432] EXT4-fs (loop9): Total free blocks count 0
[  359.242096][T19432] EXT4-fs (loop9): Free/Dirty block details
[  359.248088][T19432] EXT4-fs (loop9): free_blocks=2415919104
[  359.253892][T19432] EXT4-fs (loop9): dirty_blocks=2000
[  359.259221][T19432] EXT4-fs (loop9): Block reservation details
[  359.265257][T19432] EXT4-fs (loop9): i_reserved_data_blocks=126
[  359.368177][T19451] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  359.377510][T19452] FAULT_INJECTION: forcing a failure.
[  359.377510][T19452] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  359.386711][T19432] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5190'.
[  359.390871][T19452] CPU: 0 UID: 0 PID: 19452 Comm: syz.0.5201 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) 
[  359.390914][T19452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  359.390992][T19452] Call Trace:
[  359.391001][T19452]  <TASK>
[  359.391012][T19452]  __dump_stack+0x1d/0x30
[  359.391041][T19452]  dump_stack_lvl+0xe8/0x140
[  359.391070][T19452]  dump_stack+0x15/0x1b
[  359.391093][T19452]  should_fail_ex+0x265/0x280
[  359.391159][T19452]  should_fail+0xb/0x20
[  359.391201][T19452]  should_fail_usercopy+0x1a/0x20
[  359.391230][T19452]  _copy_from_user+0x1c/0xb0
[  359.391269][T19452]  ___sys_sendmsg+0xc1/0x1d0
[  359.391321][T19452]  __x64_sys_sendmsg+0xd4/0x160
[  359.391411][T19452]  x64_sys_call+0x2999/0x2fb0
[  359.391442][T19452]  do_syscall_64+0xd0/0x1a0
[  359.391476][T19452]  ? clear_bhb_loop+0x40/0x90
[  359.391507][T19452]  ? clear_bhb_loop+0x40/0x90
[  359.391538][T19452]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  359.391571][T19452] RIP: 0033:0x7f1441b0e969
[  359.391591][T19452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  359.391675][T19452] RSP: 002b:00007f1440177038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  359.391702][T19452] RAX: ffffffffffffffda RBX: 00007f1441d35fa0 RCX: 00007f1441b0e969
[  359.391720][T19452] RDX: 00000000000008c0 RSI: 0000200000000000 RDI: 0000000000000005
[  359.391738][T19452] RBP: 00007f1440177090 R08: 0000000000000000 R09: 0000000000000000
[  359.391755][T19452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  359.391774][T19452] R13: 0000000000000000 R14: 00007f1441d35fa0 R15: 00007ffe1d09a5a8
[  359.391801][T19452]  </TASK>
[  359.698970][   T55] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28
[  359.711720][   T55] EXT4-fs (loop9): This should not happen!! Data will be lost
[  359.711720][   T55] 
[  359.817000][T19474] loop0: detected capacity change from 0 to 512
[  359.825355][T19474] EXT4-fs (loop0): orphan cleanup on readonly fs
[  359.832378][T19474] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5212: bg 0: block 248: padding at end of block bitmap is not set
[  359.847045][T19474] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.5212: Failed to acquire dquot type 1
[  359.859927][T19474] EXT4-fs (loop0): 1 truncate cleaned up
[  359.868768][T19470] lo: entered promiscuous mode
[  359.873622][T19470] lo: entered allmulticast mode
[  359.896452][T19484] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  359.907600][T19485] netlink: 'syz.9.5215': attribute type 13 has an invalid length.
[  360.018999][T19499] loop9: detected capacity change from 0 to 2048
[  360.030701][T19499] EXT4-fs: Ignoring removed bh option
[  360.121153][T19522] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  360.150930][T19522] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  360.163520][T19522] EXT4-fs (loop9): This should not happen!! Data will be lost
[  360.163520][T19522] 
[  360.173278][T19522] EXT4-fs (loop9): Total free blocks count 0
[  360.179289][T19522] EXT4-fs (loop9): Free/Dirty block details
[  360.185313][T19522] EXT4-fs (loop9): free_blocks=2415919104
[  360.191132][T19522] EXT4-fs (loop9): dirty_blocks=1632
[  360.196644][T19522] EXT4-fs (loop9): Block reservation details
[  360.202694][T19522] EXT4-fs (loop9): i_reserved_data_blocks=122
[  360.310707][T19522] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5220'.
[  360.403013][T19559] loop6: detected capacity change from 0 to 512
[  360.411431][T19559] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  360.421064][T19559] EXT4-fs (loop6): orphan cleanup on readonly fs
[  360.428030][T19559] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.5245: invalid indirect mapped block 256 (level 2)
[  360.443548][T19559] EXT4-fs (loop6): 2 truncates cleaned up
[  360.452442][T19559] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  360.550921][T19573] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  360.601618][T19573] loop0: detected capacity change from 0 to 2050
[  360.644204][T19573] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 64
[  360.659830][ T5656] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28
[  360.672574][ T5656] EXT4-fs (loop9): This should not happen!! Data will be lost
[  360.672574][ T5656] 
[  360.737948][T19580] netlink: 'syz.4.5253': attribute type 1 has an invalid length.
[  360.785973][T19584] sg_write: data in/out 512/1 bytes for SCSI command 0xb7-- guessing data in;
[  360.785973][T19584]    program syz.9.5252 not setting count and/or reply_len properly
[  360.803881][T19586] loop0: detected capacity change from 0 to 2048
[  360.829743][T19586] EXT4-fs error (device loop0): ext4_find_extent:938: inode #2: comm syz.0.5255: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  360.892712][T19596] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  360.953478][T19598] netlink: 'syz.0.5259': attribute type 3 has an invalid length.
[  360.968232][T19598] wireguard0: entered promiscuous mode
[  361.058124][T19608] loop9: detected capacity change from 0 to 512
[  361.065353][T19608] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  361.076743][T19608] EXT4-fs (loop9): 1 truncate cleaned up
[  361.127248][T19613] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  361.135655][T19613] team0: Device ipvlan2 is already an upper device of the team interface
[  361.165357][T19617] sg_write: data in/out 512/1 bytes for SCSI command 0xb7-- guessing data in;
[  361.165357][T19617]    program syz.0.5266 not setting count and/or reply_len properly
[  361.181923][T19618] loop9: detected capacity change from 0 to 1024
[  361.200200][T19618] EXT4-fs: Ignoring removed nobh option
[  361.205897][T19618] EXT4-fs: Ignoring removed bh option
[  361.240789][T19613] EXT4-fs error (device loop9): mb_free_blocks:1948: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt.
[  361.285972][T19628] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  361.318174][T19630] netlink: 'syz.5.5270': attribute type 13 has an invalid length.
[  361.360649][T19630] bridge0: port 2(bridge_slave_1) entered disabled state
[  361.367917][T19630] bridge0: port 1(bridge_slave_0) entered disabled state
[  361.429537][T19630] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  361.440708][T19642] xt_CT: You must specify a L4 protocol and not use inversions on it
[  361.442804][T19630] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  361.467911][T19642] ALSA: seq fatal error: cannot create timer (-19)
[  361.484245][T19644] ALSA: seq fatal error: cannot create timer (-19)
[  361.492483][T19642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  361.500898][T19644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  361.501192][T19642] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  361.510538][T19644] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  361.526747][T19630] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  361.535850][T19630] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  361.544801][T19630] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  361.553734][T19630] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  361.576557][ T3389] syz2: Port: 1 Link DOWN
[  361.594217][T19649] FAULT_INJECTION: forcing a failure.
[  361.594217][T19649] name failslab, interval 1, probability 0, space 0, times 0
[  361.607027][T19649] CPU: 0 UID: 0 PID: 19649 Comm: syz.9.5276 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) 
[  361.607138][T19649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  361.607153][T19649] Call Trace:
[  361.607161][T19649]  <TASK>
[  361.607220][T19649]  __dump_stack+0x1d/0x30
[  361.607247][T19649]  dump_stack_lvl+0xe8/0x140
[  361.607271][T19649]  dump_stack+0x15/0x1b
[  361.607292][T19649]  should_fail_ex+0x265/0x280
[  361.607334][T19649]  should_failslab+0x8c/0xb0
[  361.607436][T19649]  __kmalloc_noprof+0xa5/0x3e0
[  361.607460][T19649]  ? genl_family_rcv_msg_attrs_parse+0x75/0x190
[  361.607514][T19649]  genl_family_rcv_msg_attrs_parse+0x75/0x190
[  361.607548][T19649]  ? kernelmode_fixup_or_oops+0x59/0xb0
[  361.607619][T19649]  genl_family_rcv_msg_doit+0x48/0x1b0
[  361.607653][T19649]  ? genl_get_cmd+0x425/0x660
[  361.607733][T19649]  ? radix_tree_lookup+0xfa/0x140
[  361.607776][T19649]  genl_rcv_msg+0x422/0x460
[  361.607806][T19649]  ? __pfx_ctrl_getfamily+0x10/0x10
[  361.607860][T19649]  netlink_rcv_skb+0x123/0x220
[  361.607899][T19649]  ? __pfx_genl_rcv_msg+0x10/0x10
[  361.608006][T19649]  genl_rcv+0x28/0x40
[  361.608033][T19649]  netlink_unicast+0x5a1/0x670
[  361.608107][T19649]  netlink_sendmsg+0x58b/0x6b0
[  361.608143][T19649]  ? __pfx_netlink_sendmsg+0x10/0x10
[  361.608169][T19649]  __sock_sendmsg+0x145/0x180
[  361.608268][T19649]  __sys_sendto+0x268/0x330
[  361.608321][T19649]  __x64_sys_sendto+0x76/0x90
[  361.608392][T19649]  x64_sys_call+0x2eb6/0x2fb0
[  361.608430][T19649]  do_syscall_64+0xd0/0x1a0
[  361.608460][T19649]  ? clear_bhb_loop+0x40/0x90
[  361.608486][T19649]  ? clear_bhb_loop+0x40/0x90
[  361.608512][T19649]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  361.608611][T19649] RIP: 0033:0x7ff0e45407fc
[  361.608630][T19649] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b
[  361.608676][T19649] RSP: 002b:00007ff0e2ba5ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  361.608699][T19649] RAX: ffffffffffffffda RBX: 00007ff0e2ba5fc0 RCX: 00007ff0e45407fc
[  361.608715][T19649] RDX: 0000000000000020 RSI: 00007ff0e2ba6010 RDI: 0000000000000007
[  361.608730][T19649] RBP: 0000000000000000 R08: 00007ff0e2ba5f14 R09: 000000000000000c
[  361.608798][T19649] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007
[  361.608813][T19649] R13: 00007ff0e2ba5f68 R14: 00007ff0e2ba6010 R15: 0000000000000000
[  361.608837][T19649]  </TASK>
[  361.877828][T19651] sg_write: data in/out 512/1 bytes for SCSI command 0xb7-- guessing data in;
[  361.877828][T19651]    program syz.9.5277 not setting count and/or reply_len properly
[  361.920918][T19659] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  361.930582][T19659] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  361.961432][T19659] loop9: detected capacity change from 0 to 2050
[  361.973835][T19659] EXT4-fs warning (device loop9): read_mmp_block:115: Error -117 while reading MMP block 64
[  362.044302][T19667] pim6reg1: entered promiscuous mode
[  362.049724][T19667] pim6reg1: entered allmulticast mode
[  362.055923][T19642] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19642 comm=syz.6.5275
[  362.198306][T19685] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  362.206385][T19685] team0: Device ipvlan2 is already an upper device of the team interface
[  362.308143][T19691] FAULT_INJECTION: forcing a failure.
[  362.308143][T19691] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  362.321399][T19691] CPU: 1 UID: 0 PID: 19691 Comm: syz.0.5293 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) 
[  362.321436][T19691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  362.321449][T19691] Call Trace:
[  362.321455][T19691]  <TASK>
[  362.321462][T19691]  __dump_stack+0x1d/0x30
[  362.321484][T19691]  dump_stack_lvl+0xe8/0x140
[  362.321585][T19691]  dump_stack+0x15/0x1b
[  362.321607][T19691]  should_fail_ex+0x265/0x280
[  362.321648][T19691]  should_fail+0xb/0x20
[  362.321687][T19691]  should_fail_usercopy+0x1a/0x20
[  362.321714][T19691]  _copy_to_user+0x20/0xa0
[  362.321745][T19691]  rng_dev_read+0x3ef/0x740
[  362.321851][T19691]  vfs_readv+0x3e9/0x670
[  362.321880][T19691]  ? __pfx_rng_dev_read+0x10/0x10
[  362.321962][T19691]  __x64_sys_preadv+0xfd/0x1c0
[  362.322075][T19691]  x64_sys_call+0x1503/0x2fb0
[  362.322100][T19691]  do_syscall_64+0xd0/0x1a0
[  362.322130][T19691]  ? clear_bhb_loop+0x40/0x90
[  362.322189][T19691]  ? clear_bhb_loop+0x40/0x90
[  362.322265][T19691]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  362.322295][T19691] RIP: 0033:0x7f1441b0e969
[  362.322361][T19691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  362.322421][T19691] RSP: 002b:00007f1440177038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  362.322441][T19691] RAX: ffffffffffffffda RBX: 00007f1441d35fa0 RCX: 00007f1441b0e969
[  362.322458][T19691] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003
[  362.322486][T19691] RBP: 00007f1440177090 R08: 0000000000000000 R09: 0000000000000000
[  362.322502][T19691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  362.322519][T19691] R13: 0000000000000000 R14: 00007f1441d35fa0 R15: 00007ffe1d09a5a8
[  362.322544][T19691]  </TASK>
[  362.651584][T19698] lo speed is unknown, defaulting to 1000
[  362.677062][T19694] lo: entered promiscuous mode
[  362.681949][T19694] lo: entered allmulticast mode
[  362.737167][T19711] loop9: detected capacity change from 0 to 2048
[  362.748681][T19714] pim6reg1: entered promiscuous mode
[  362.754073][T19714] pim6reg1: entered allmulticast mode
[  362.771090][T19711] EXT4-fs: Ignoring removed bh option
[  362.780372][T19716] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  362.789731][T19716] team0: Device ipvlan2 is already an upper device of the team interface
[  362.837335][T19721] loop6: detected capacity change from 0 to 1024
[  362.852417][T19721] EXT4-fs: Ignoring removed nobh option
[  362.858054][T19721] EXT4-fs: Ignoring removed bh option
[  362.861784][T19723] loop0: detected capacity change from 0 to 2048
[  362.872859][T19726] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  362.892703][T19726] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  362.905056][T19726] EXT4-fs (loop9): This should not happen!! Data will be lost
[  362.905056][T19726] 
[  362.914803][T19726] EXT4-fs (loop9): Total free blocks count 0
[  362.920813][T19726] EXT4-fs (loop9): Free/Dirty block details
[  362.926752][T19726] EXT4-fs (loop9): free_blocks=2415919104
[  362.932588][T19726] EXT4-fs (loop9): dirty_blocks=1264
[  362.937896][T19726] EXT4-fs (loop9): Block reservation details
[  362.943937][T19726] EXT4-fs (loop9): i_reserved_data_blocks=97
[  362.989665][T19725] __nla_validate_parse: 3 callbacks suppressed
[  362.989686][T19725] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5305'.
[  363.013414][T19723] EXT4-fs error (device loop0): ext4_find_extent:938: inode #2: comm syz.0.5304: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  363.048311][T19740] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5307'.
[  363.048941][T19740] netlink: 'syz.6.5307': attribute type 1 has an invalid length.
[  363.084246][T19726] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5300'.
[  363.110484][T19744] syz!: rxe_newlink: already configured on team_slave_0
[  363.145797][T19744] loop0: detected capacity change from 0 to 2049
[  363.202429][T19744] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 64
[  363.231543][T19750] loop5: detected capacity change from 0 to 128
[  363.287787][T19757] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  363.319324][T19757] loop6: detected capacity change from 0 to 2050
[  363.380495][T19757] EXT4-fs warning (device loop6): read_mmp_block:115: Error -117 while reading MMP block 64
[  363.411740][T19761] loop5: detected capacity change from 0 to 2048
[  363.431466][ T5682] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28
[  363.444135][ T5682] EXT4-fs (loop9): This should not happen!! Data will be lost
[  363.444135][ T5682] 
[  363.461359][T19769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5320'.
[  363.476938][T19761] EXT4-fs error (device loop5): ext4_find_extent:938: inode #2: comm syz.5.5316: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  363.494792][T19769] bridge_slave_1: left allmulticast mode
[  363.500523][T19769] bridge_slave_1: left promiscuous mode
[  363.506315][T19769] bridge0: port 2(bridge_slave_1) entered disabled state
[  363.533210][T19769] bridge_slave_0: left allmulticast mode
[  363.538950][T19769] bridge_slave_0: left promiscuous mode
[  363.544809][T19769] bridge0: port 1(bridge_slave_0) entered disabled state
[  363.579991][T19777] loop5: detected capacity change from 0 to 512
[  363.587182][T19777] EXT4-fs: Ignoring removed oldalloc option
[  363.594778][T19773] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  363.609830][T19781] sg_write: data in/out 512/1 bytes for SCSI command 0xb7-- guessing data in;
[  363.609830][T19781]    program syz.6.5324 not setting count and/or reply_len properly
[  363.627949][T19777] EXT4-fs (loop5): 1 truncate cleaned up
[  363.678773][T19788] pim6reg1: entered promiscuous mode
[  363.684337][T19788] pim6reg1: entered allmulticast mode
[  363.712224][T19794] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  363.720519][T19794] team0: Device ipvlan2 is already an upper device of the team interface
[  363.740190][T19798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5331'.
[  363.752773][T19796] loop0: detected capacity change from 0 to 2048
[  363.759466][T19796] EXT4-fs: Ignoring removed bh option
[  363.770449][T19802] loop9: detected capacity change from 0 to 1024
[  363.780295][T19802] EXT4-fs: Ignoring removed nobh option
[  363.786124][T19802] EXT4-fs: Ignoring removed bh option
[  363.800462][T19804] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  363.814897][T19804] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  363.835206][T19812] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  363.846308][T19811] loop6: detected capacity change from 0 to 512
[  363.854201][T19812] team0: Device ipvlan2 is already an upper device of the team interface
[  363.863567][T19811] EXT4-fs: Ignoring removed nobh option
[  363.890478][T19811] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.5335: invalid indirect mapped block 256 (level 2)
[  363.905658][T19816] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  363.920556][T19817] loop5: detected capacity change from 0 to 1024
[  363.921516][T19811] EXT4-fs (loop6): 2 truncates cleaned up
[  363.928928][T19817] EXT4-fs: Ignoring removed nobh option
[  363.933987][T19816] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  363.938352][T19817] EXT4-fs: Ignoring removed bh option
[  363.950572][T19816] EXT4-fs (loop0): This should not happen!! Data will be lost
[  363.950572][T19816] 
[  363.950594][T19816] EXT4-fs (loop0): Total free blocks count 0
[  363.971801][T19816] EXT4-fs (loop0): Free/Dirty block details
[  363.977854][T19816] EXT4-fs (loop0): free_blocks=2415919104
[  363.983619][T19816] EXT4-fs (loop0): dirty_blocks=1920
[  363.989063][T19816] EXT4-fs (loop0): Block reservation details
[  363.995135][T19816] EXT4-fs (loop0): i_reserved_data_blocks=139
[  364.031166][T19821] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  364.040585][T19811] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5335'.
[  364.112481][T19823] sg_write: data in/out 512/1 bytes for SCSI command 0xb7-- guessing data in;
[  364.112481][T19823]    program syz.4.5339 not setting count and/or reply_len properly
[  364.169503][T19812] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt.
[  364.198772][T19816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5330'.
[  364.263651][T19831] netlink: 'syz.4.5341': attribute type 1 has an invalid length.
[  364.293830][T19833] pim6reg1: entered promiscuous mode
[  364.299171][T19833] pim6reg1: entered allmulticast mode
[  364.309928][T19837] loop5: detected capacity change from 0 to 512
[  364.323873][T19837] EXT4-fs: Ignoring removed nobh option
[  364.336695][T19837] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.5344: invalid indirect mapped block 256 (level 2)
[  364.356987][ T5682] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28
[  364.369727][ T5682] EXT4-fs (loop0): This should not happen!! Data will be lost
[  364.369727][ T5682] 
[  364.379725][T19837] EXT4-fs (loop5): 2 truncates cleaned up
[  364.403276][T19837] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5344'.
[  364.448084][T19848] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  364.457227][T19848] team0: Device ipvlan2 is already an upper device of the team interface
[  364.475314][T19850] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  364.488968][T19852] sg_write: data in/out 512/1 bytes for SCSI command 0xb7-- guessing data in;
[  364.488968][T19852]    program syz.9.5351 not setting count and/or reply_len properly
[  364.535741][T19857] FAULT_INJECTION: forcing a failure.
[  364.535741][T19857] name failslab, interval 1, probability 0, space 0, times 0
[  364.548521][T19857] CPU: 0 UID: 0 PID: 19857 Comm: syz.5.5352 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) 
[  364.548638][T19857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  364.548654][T19857] Call Trace:
[  364.548661][T19857]  <TASK>
[  364.548670][T19857]  __dump_stack+0x1d/0x30
[  364.548697][T19857]  dump_stack_lvl+0xe8/0x140
[  364.548723][T19857]  dump_stack+0x15/0x1b
[  364.548774][T19857]  should_fail_ex+0x265/0x280
[  364.548810][T19857]  ? tcf_pedit_init+0x448/0x970
[  364.548904][T19857]  should_failslab+0x8c/0xb0
[  364.549068][T19857]  __kmalloc_cache_noprof+0x4c/0x320
[  364.549110][T19857]  tcf_pedit_init+0x448/0x970
[  364.549223][T19857]  ? should_fail_ex+0xdb/0x280
[  364.549274][T19857]  tcf_action_init_1+0x36a/0x4a0
[  364.549399][T19857]  tcf_action_init+0x1be/0x5f0
[  364.549470][T19857]  tc_ctl_action+0x291/0x830
[  364.549581][T19857]  ? __pfx_tc_ctl_action+0x10/0x10
[  364.549618][T19857]  rtnetlink_rcv_msg+0x657/0x6d0
[  364.549653][T19857]  ? avc_has_perm_noaudit+0x1b1/0x200
[  364.549684][T19857]  netlink_rcv_skb+0x123/0x220
[  364.549734][T19857]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  364.549777][T19857]  rtnetlink_rcv+0x1c/0x30
[  364.549808][T19857]  netlink_unicast+0x5a1/0x670
[  364.549859][T19857]  netlink_sendmsg+0x58b/0x6b0
[  364.549895][T19857]  ? __pfx_netlink_sendmsg+0x10/0x10
[  364.549922][T19857]  __sock_sendmsg+0x145/0x180
[  364.549989][T19857]  ____sys_sendmsg+0x31e/0x4e0
[  364.550022][T19857]  ___sys_sendmsg+0x17b/0x1d0
[  364.550070][T19857]  __x64_sys_sendmsg+0xd4/0x160
[  364.550106][T19857]  x64_sys_call+0x2999/0x2fb0
[  364.550202][T19857]  do_syscall_64+0xd0/0x1a0
[  364.550236][T19857]  ? clear_bhb_loop+0x40/0x90
[  364.550265][T19857]  ? clear_bhb_loop+0x40/0x90
[  364.550336][T19857]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.550365][T19857] RIP: 0033:0x7faa98a9e969
[  364.550448][T19857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  364.550474][T19857] RSP: 002b:00007faa97107038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  364.550499][T19857] RAX: ffffffffffffffda RBX: 00007faa98cc5fa0 RCX: 00007faa98a9e969
[  364.550516][T19857] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  364.550533][T19857] RBP: 00007faa97107090 R08: 0000000000000000 R09: 0000000000000000
[  364.550554][T19857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  364.550571][T19857] R13: 0000000000000000 R14: 00007faa98cc5fa0 R15: 00007ffde2d02608
[  364.550603][T19857]  </TASK>
[  364.805950][T19856] loop9: detected capacity change from 0 to 1024
[  364.812994][T19856] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  364.823174][T19856] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  364.836765][T19861] syz!: rxe_newlink: already configured on team_slave_0
[  364.856673][T19861] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  364.868007][T19868] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  364.872489][T19856] EXT4-fs (loop9): revision level too high, forcing read-only mode
[  364.886506][T19861] loop0: detected capacity change from 0 to 2049
[  364.892174][T19856] EXT4-fs (loop9): orphan cleanup on readonly fs
[  364.900094][T19856] EXT4-fs error (device loop9): ext4_read_inode_bitmap:167: comm syz.9.5353: Inode bitmap for bg 0 marked uninitialized
[  364.901336][T19868] team0: Device ipvlan2 is already an upper device of the team interface
[  364.924812][   T29] kauditd_printk_skb: 118 callbacks suppressed
[  364.924827][   T29] audit: type=1400 audit(364.950:34834): avc:  denied  { bind } for  pid=19855 comm="syz.9.5353" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  364.956001][T19872] loop5: detected capacity change from 0 to 1024
[  364.963247][T19872] EXT4-fs: Ignoring removed nobh option
[  364.968874][T19872] EXT4-fs: Ignoring removed bh option
[  364.974390][   T29] audit: type=1400 audit(364.950:34835): avc:  denied  { node_bind } for  pid=19855 comm="syz.9.5353" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  364.975982][T19861] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 64
[  365.013632][T19860] EXT4-fs (loop9): ext4_remount: Checksum for group 0 failed (32298!=35945)
[  365.097609][T19883] loop6: detected capacity change from 0 to 512
[  365.104544][T19883] EXT4-fs: Ignoring removed nobh option
[  365.114373][T19883] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.5360: invalid indirect mapped block 256 (level 2)
[  365.143271][T19883] EXT4-fs (loop6): 2 truncates cleaned up
[  365.154377][T19887] netlink: 'syz.9.5361': attribute type 1 has an invalid length.
[  365.171001][T19883] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5360'.
[  365.231452][T19894] loop9: detected capacity change from 0 to 512
[  365.254820][T19898] sg_write: data in/out 512/1 bytes for SCSI command 0xb7-- guessing data in;
[  365.254820][T19898]    program syz.6.5364 not setting count and/or reply_len properly
[  365.256024][T19896] loop5: detected capacity change from 0 to 2048
[  365.279587][T19873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5357'.
[  365.306915][T19901] loop6: detected capacity change from 0 to 512
[  365.312312][   T29] audit: type=1326 audit(365.320:34836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19891 comm="syz.0.5363" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1441b0e969 code=0x0
[  365.336771][T19901] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  365.348238][T19901] EXT4-fs (loop6): orphan cleanup on readonly fs
[  365.353000][T19896] EXT4-fs error (device loop5): ext4_find_extent:938: inode #2: comm syz.5.5366: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  365.371344][T19901] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.5367: invalid indirect mapped block 256 (level 2)
[  365.393361][T19901] EXT4-fs (loop6): 2 truncates cleaned up
[  365.409068][T19901] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  365.429635][T19911] netlink: 'syz.5.5369': attribute type 1 has an invalid length.
[  365.467337][   T29] audit: type=1400 audit(365.490:34837): avc:  denied  { mount } for  pid=19915 comm="syz.5.5372" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  365.490029][   T29] audit: type=1400 audit(365.490:34838): avc:  denied  { mounton } for  pid=19915 comm="syz.5.5372" path="/282/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1
[  365.503828][T19920] loop9: detected capacity change from 0 to 512
[  365.512003][   T29] audit: type=1400 audit(365.490:34839): avc:  denied  { mount } for  pid=19915 comm="syz.5.5372" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  365.518508][T19920] EXT4-fs: Ignoring removed nobh option
[  365.540917][   T29] audit: type=1400 audit(365.520:34840): avc:  denied  { unmount } for  pid=15824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  365.566679][   T29] audit: type=1400 audit(365.590:34841): avc:  denied  { unmount } for  pid=15824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  365.587522][T19922] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  365.588855][T19920] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.5374: invalid indirect mapped block 256 (level 2)
[  365.610379][T19920] EXT4-fs (loop9): 2 truncates cleaned up
[  365.619471][T19922] loop6: detected capacity change from 0 to 2050
[  365.631835][T19922] EXT4-fs warning (device loop6): read_mmp_block:115: Error -117 while reading MMP block 64
[  365.699090][T19930] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  365.712133][T19930] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  365.742721][T19930] loop9: detected capacity change from 0 to 2050
[  365.754841][T19930] EXT4-fs warning (device loop9): read_mmp_block:115: Error -117 while reading MMP block 64
[  365.777075][   T29] audit: type=1326 audit(365.800:34842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19942 comm="syz.5.5383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa98a9e969 code=0x7ffc0000
[  365.800137][   T29] audit: type=1326 audit(365.800:34843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19942 comm="syz.5.5383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa98a9e969 code=0x7ffc0000
[  365.829582][T19943] FAULT_INJECTION: forcing a failure.
[  365.829582][T19943] name failslab, interval 1, probability 0, space 0, times 0
[  365.842399][T19943] CPU: 0 UID: 0 PID: 19943 Comm: syz.5.5383 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) 
[  365.842438][T19943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  365.842464][T19943] Call Trace:
[  365.842479][T19943]  <TASK>
[  365.842488][T19943]  __dump_stack+0x1d/0x30
[  365.842511][T19943]  dump_stack_lvl+0xe8/0x140
[  365.842531][T19943]  dump_stack+0x15/0x1b
[  365.842547][T19943]  should_fail_ex+0x265/0x280
[  365.842589][T19943]  should_failslab+0x8c/0xb0
[  365.842721][T19943]  kmem_cache_alloc_lru_noprof+0x55/0x310
[  365.842793][T19943]  ? proc_alloc_inode+0x34/0x90
[  365.842824][T19943]  ? __pfx_proc_alloc_inode+0x10/0x10
[  365.842935][T19943]  proc_alloc_inode+0x34/0x90
[  365.843016][T19943]  alloc_inode+0x3d/0x170
[  365.843111][T19943]  new_inode+0x1d/0xe0
[  365.843142][T19943]  proc_pid_make_inode+0x1f/0xd0
[  365.843221][T19943]  proc_pident_instantiate+0x44/0x190
[  365.843243][T19943]  proc_pident_lookup+0x112/0x190
[  365.843265][T19943]  proc_tgid_base_lookup+0x2b/0x40
[  365.843289][T19943]  __lookup_slow+0x190/0x250
[  365.843342][T19943]  lookup_slow+0x3c/0x60
[  365.843392][T19943]  link_path_walk+0x71d/0x8b0
[  365.843496][T19943]  path_openat+0x1de/0x2170
[  365.843531][T19943]  ? kmem_cache_free+0xdd/0x2f0
[  365.843596][T19943]  ? audit_log_end+0x1d7/0x1f0
[  365.843642][T19943]  do_filp_open+0x109/0x230
[  365.843677][T19943]  ? __pfx_kfree_link+0x10/0x10
[  365.843766][T19943]  do_sys_openat2+0xa6/0x110
[  365.843797][T19943]  __x64_sys_openat+0xf2/0x120
[  365.843829][T19943]  x64_sys_call+0x1af/0x2fb0
[  365.843859][T19943]  do_syscall_64+0xd0/0x1a0
[  365.843970][T19943]  ? clear_bhb_loop+0x40/0x90
[  365.843999][T19943]  ? clear_bhb_loop+0x40/0x90
[  365.844098][T19943]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  365.844127][T19943] RIP: 0033:0x7faa98a9d2d0
[  365.844148][T19943] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44
[  365.844173][T19943] RSP: 002b:00007faa97106f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  365.844239][T19943] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007faa98a9d2d0
[  365.844254][T19943] RDX: 0000000000000000 RSI: 00007faa98b20bc9 RDI: 00000000ffffff9c
[  365.844269][T19943] RBP: 00007faa98b20bc9 R08: 0000000000000000 R09: 0000000000000000
[  365.844286][T19943] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[  365.844303][T19943] R13: 0000000000000000 R14: 00007faa98cc5fa0 R15: 00007ffde2d02608
[  365.844327][T19943]  </TASK>
[  366.170055][T19960] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  366.174064][T19961] loop5: detected capacity change from 0 to 512
[  366.184942][T19953] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  366.194139][T19960] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  366.217198][T19953] loop6: detected capacity change from 0 to 2050
[  366.220703][T19960] loop9: detected capacity change from 0 to 2049
[  366.230275][T19961] EXT4-fs: Ignoring removed nobh option
[  366.237135][T19963] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  366.244018][T19961] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.5388: invalid indirect mapped block 256 (level 2)
[  366.245220][T19961] EXT4-fs (loop5): 2 truncates cleaned up
[  366.265875][T19953] EXT4-fs warning (device loop6): read_mmp_block:115: Error -117 while reading MMP block 64
[  366.267371][T19963] team0: Device ipvlan2 is already an upper device of the team interface
[  366.288181][T19960] EXT4-fs warning (device loop9): read_mmp_block:115: Error -117 while reading MMP block 64
[  366.298840][T19967] loop0: detected capacity change from 0 to 1024
[  366.305790][T19967] EXT4-fs: Ignoring removed nobh option
[  366.311494][T19967] EXT4-fs: Ignoring removed bh option
[  366.369944][T19977] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  366.389835][T19979] FAULT_INJECTION: forcing a failure.
[  366.389835][T19979] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  366.403145][T19979] CPU: 1 UID: 0 PID: 19979 Comm: syz.4.5398 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) 
[  366.403243][T19979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  366.403261][T19979] Call Trace:
[  366.403269][T19979]  <TASK>
[  366.403279][T19979]  __dump_stack+0x1d/0x30
[  366.403309][T19979]  dump_stack_lvl+0xe8/0x140
[  366.403335][T19979]  dump_stack+0x15/0x1b
[  366.403375][T19979]  should_fail_ex+0x265/0x280
[  366.403428][T19979]  should_fail+0xb/0x20
[  366.403466][T19979]  should_fail_usercopy+0x1a/0x20
[  366.403561][T19979]  strncpy_from_user+0x25/0x230
[  366.403588][T19979]  ? kmem_cache_alloc_noprof+0x186/0x310
[  366.403640][T19979]  ? getname_flags+0x80/0x3b0
[  366.403679][T19979]  getname_flags+0xae/0x3b0
[  366.403771][T19979]  __x64_sys_mkdirat+0x40/0x60
[  366.403801][T19979]  x64_sys_call+0x2be0/0x2fb0
[  366.403828][T19979]  do_syscall_64+0xd0/0x1a0
[  366.403853][T19979]  ? clear_bhb_loop+0x40/0x90
[  366.403880][T19979]  ? clear_bhb_loop+0x40/0x90
[  366.403915][T19979]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  366.403972][T19979] RIP: 0033:0x7fe18fe9d1d7
[  366.403991][T19979] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  366.404015][T19979] RSP: 002b:00007fe18e506e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  366.404040][T19979] RAX: ffffffffffffffda RBX: 00007fe18e506ef0 RCX: 00007fe18fe9d1d7
[  366.404078][T19979] RDX: 00000000000001ff RSI: 0000200000000f00 RDI: 00000000ffffff9c
[  366.404095][T19979] RBP: 0000200000000f40 R08: 0000200000000000 R09: 0000000000000000
[  366.404112][T19979] R10: 0000200000000f40 R11: 0000000000000246 R12: 0000200000000f00
[  366.404130][T19979] R13: 00007fe18e506eb0 R14: 0000000000000000 R15: 00002000000008c0
[  366.404155][T19979]  </TASK>
[  366.611436][T19983] loop0: detected capacity change from 0 to 512
[  366.623609][T19983] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  366.649816][T19983] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.5399: invalid block
[  366.669194][T19985] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  366.676500][T19983] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.5399: invalid indirect mapped block 4294967295 (level 1)
[  366.699099][T19983] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.5399: invalid indirect mapped block 4294967295 (level 1)
[  366.713660][T19983] EXT4-fs (loop0): 2 truncates cleaned up
[  366.726254][T19985] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  366.764769][T19995] loop5: detected capacity change from 0 to 512
[  366.771348][T19995] EXT4-fs: Ignoring removed nobh option
[  366.788609][T19983] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.0.5399: path /184/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0
[  366.814421][T19995] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.5405: invalid indirect mapped block 256 (level 2)
[  366.842193][T19995] EXT4-fs (loop5): 2 truncates cleaned up
[  366.873059][T20006] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  366.881558][T20006] team0: Device ipvlan2 is already an upper device of the team interface
[  366.926635][T20014] loop0: detected capacity change from 0 to 1024
[  366.938474][T20014] EXT4-fs: Ignoring removed nobh option
[  366.944191][T20014] EXT4-fs: Ignoring removed bh option
[  366.965191][T20013] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  366.989755][T20013] loop5: detected capacity change from 0 to 256
[  367.013841][T20021] loop6: detected capacity change from 0 to 512
[  367.022811][T20022] loop9: detected capacity change from 0 to 2048
[  367.032285][T20021] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  367.040842][T20021] EXT4-fs (loop6): orphan cleanup on readonly fs
[  367.053414][T20021] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.5414: invalid indirect mapped block 256 (level 2)
[  367.066611][T20025] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  367.074309][T20021] EXT4-fs (loop6): 2 truncates cleaned up
[  367.084729][T20021] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  367.120910][T20022] EXT4-fs error (device loop9): ext4_find_extent:938: inode #2: comm syz.9.5415: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  367.201151][T20045] loop9: detected capacity change from 0 to 512
[  367.215528][T20045] EXT4-fs: Ignoring removed nobh option
[  367.244930][T20045] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.5422: invalid indirect mapped block 256 (level 2)
[  367.275131][T20057] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  367.283374][T20045] EXT4-fs (loop9): 2 truncates cleaned up
[  367.291576][T20057] team0: Device ipvlan2 is already an upper device of the team interface
[  367.304773][T20062] FAULT_INJECTION: forcing a failure.
[  367.304773][T20062] name failslab, interval 1, probability 0, space 0, times 0
[  367.317490][T20062] CPU: 0 UID: 0 PID: 20062 Comm: syz.5.5429 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) 
[  367.317599][T20062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  367.317672][T20062] Call Trace:
[  367.317678][T20062]  <TASK>
[  367.317685][T20062]  __dump_stack+0x1d/0x30
[  367.317770][T20062]  dump_stack_lvl+0xe8/0x140
[  367.317788][T20062]  dump_stack+0x15/0x1b
[  367.317803][T20062]  should_fail_ex+0x265/0x280
[  367.317843][T20062]  should_failslab+0x8c/0xb0
[  367.317885][T20062]  kmem_cache_alloc_node_noprof+0x57/0x320
[  367.317905][T20062]  ? __alloc_skb+0x101/0x320
[  367.317936][T20062]  __alloc_skb+0x101/0x320
[  367.318033][T20062]  netlink_alloc_large_skb+0xba/0xf0
[  367.318062][T20062]  netlink_sendmsg+0x3cf/0x6b0
[  367.318082][T20062]  ? __pfx_netlink_sendmsg+0x10/0x10
[  367.318142][T20062]  __sock_sendmsg+0x145/0x180
[  367.318168][T20062]  ____sys_sendmsg+0x31e/0x4e0
[  367.318221][T20062]  ___sys_sendmsg+0x17b/0x1d0
[  367.318253][T20062]  __x64_sys_sendmsg+0xd4/0x160
[  367.318282][T20062]  x64_sys_call+0x2999/0x2fb0
[  367.318301][T20062]  do_syscall_64+0xd0/0x1a0
[  367.318324][T20062]  ? clear_bhb_loop+0x40/0x90
[  367.318350][T20062]  ? clear_bhb_loop+0x40/0x90
[  367.318370][T20062]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.318433][T20062] RIP: 0033:0x7faa98a9e969
[  367.318447][T20062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  367.318513][T20062] RSP: 002b:00007faa97107038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  367.318570][T20062] RAX: ffffffffffffffda RBX: 00007faa98cc5fa0 RCX: 00007faa98a9e969
[  367.318588][T20062] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000006
[  367.318606][T20062] RBP: 00007faa97107090 R08: 0000000000000000 R09: 0000000000000000
[  367.318624][T20062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  367.318635][T20062] R13: 0000000000000000 R14: 00007faa98cc5fa0 R15: 00007ffde2d02608
[  367.318653][T20062]  </TASK>
[  367.524177][T20059] FAULT_INJECTION: forcing a failure.
[  367.524177][T20059] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  367.537342][T20059] CPU: 1 UID: 0 PID: 20059 Comm: syz.4.5428 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) 
[  367.537426][T20059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  367.537443][T20059] Call Trace:
[  367.537451][T20059]  <TASK>
[  367.537461][T20059]  __dump_stack+0x1d/0x30
[  367.537488][T20059]  dump_stack_lvl+0xe8/0x140
[  367.537509][T20059]  dump_stack+0x15/0x1b
[  367.537574][T20059]  should_fail_ex+0x265/0x280
[  367.537611][T20059]  should_fail+0xb/0x20
[  367.537671][T20059]  should_fail_usercopy+0x1a/0x20
[  367.537693][T20059]  _copy_to_user+0x20/0xa0
[  367.537717][T20059]  simple_read_from_buffer+0xb5/0x130
[  367.537745][T20059]  proc_fail_nth_read+0x100/0x140
[  367.537817][T20059]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  367.537885][T20059]  vfs_read+0x19d/0x6f0
[  367.537911][T20059]  ? __rcu_read_unlock+0x4f/0x70
[  367.538005][T20059]  ? __fget_files+0x184/0x1c0
[  367.538039][T20059]  ksys_read+0xda/0x1a0
[  367.538087][T20059]  __x64_sys_read+0x40/0x50
[  367.538115][T20059]  x64_sys_call+0x2d77/0x2fb0
[  367.538138][T20059]  do_syscall_64+0xd0/0x1a0
[  367.538165][T20059]  ? clear_bhb_loop+0x40/0x90
[  367.538206][T20059]  ? clear_bhb_loop+0x40/0x90
[  367.538293][T20059]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.538318][T20059] RIP: 0033:0x7fe18fe9d37c
[  367.538333][T20059] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  367.538353][T20059] RSP: 002b:00007fe18e507030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  367.538431][T20059] RAX: ffffffffffffffda RBX: 00007fe1900c5fa0 RCX: 00007fe18fe9d37c
[  367.538447][T20059] RDX: 000000000000000f RSI: 00007fe18e5070a0 RDI: 0000000000000004
[  367.538461][T20059] RBP: 00007fe18e507090 R08: 0000000000000000 R09: 0000000000000000
[  367.538474][T20059] R10: 000000000000002b R11: 0000000000000246 R12: 0000000000000001
[  367.538497][T20059] R13: 0000000000000000 R14: 00007fe1900c5fa0 R15: 00007ffdfdb8b9c8
[  367.538517][T20059]  </TASK>
[  367.753302][T20057] loop6: detected capacity change from 0 to 1024
[  367.760139][T20057] EXT4-fs: Ignoring removed nobh option
[  367.765829][T20057] EXT4-fs: Ignoring removed bh option
[  367.781843][T20071] loop9: detected capacity change from 0 to 512
[  367.793469][T20071] EXT4-fs (loop9): revision level too high, forcing read-only mode
[  367.803942][T20071] EXT4-fs (loop9): orphan cleanup on readonly fs
[  367.810560][T20071] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.5431: invalid indirect mapped block 256 (level 2)
[  367.824945][T20071] EXT4-fs (loop9): 2 truncates cleaned up
[  367.833987][T20071] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  367.928774][T20098] loop9: detected capacity change from 0 to 512
[  367.935484][T20098] EXT4-fs: Ignoring removed nobh option
[  367.942932][T20098] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.5441: invalid indirect mapped block 256 (level 2)
[  367.957015][T20098] EXT4-fs (loop9): 2 truncates cleaned up
[  367.975159][T20102] loop6: detected capacity change from 0 to 2048
[  368.008134][T20102] EXT4-fs error (device loop6): ext4_find_extent:938: inode #2: comm syz.6.5443: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  368.031789][T20108] loop9: detected capacity change from 0 to 512
[  368.038856][T20108] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  368.039533][T20110] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  368.053180][T20108] netlink: 'syz.9.5445': attribute type 10 has an invalid length.
[  368.067246][T20108] hsr_slave_0: left promiscuous mode
[  368.074009][T20108] hsr_slave_1: left promiscuous mode
[  368.126722][T20099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  368.158921][T20099] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  368.174386][T20127] loop9: detected capacity change from 0 to 128
[  368.190773][T20128] loop6: detected capacity change from 0 to 2048
[  368.200232][T20128] EXT4-fs: Ignoring removed bh option
[  368.259722][T20141] __nla_validate_parse: 10 callbacks suppressed
[  368.259756][T20141] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5458'.
[  368.288459][T20141] netlink: 'syz.9.5458': attribute type 1 has an invalid length.
[  368.297258][T20142] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  368.312382][T20142] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  368.324753][T20142] EXT4-fs (loop6): This should not happen!! Data will be lost
[  368.324753][T20142] 
[  368.334436][T20142] EXT4-fs (loop6): Total free blocks count 0
[  368.340435][T20142] EXT4-fs (loop6): Free/Dirty block details
[  368.346474][T20142] EXT4-fs (loop6): free_blocks=2415919104
[  368.352322][T20142] EXT4-fs (loop6): dirty_blocks=1776
[  368.357662][T20142] EXT4-fs (loop6): Block reservation details
[  368.363758][T20142] EXT4-fs (loop6): i_reserved_data_blocks=119
[  368.471798][T20142] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5454'.
[  368.534052][T20163] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  368.625101][T20163] team0: Device ipvlan2 is already an upper device of the team interface
[  368.700632][T20167] loop9: detected capacity change from 0 to 1024
[  368.721586][ T5659] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28
[  368.734199][ T5659] EXT4-fs (loop6): This should not happen!! Data will be lost
[  368.734199][ T5659] 
[  368.756473][T20167] EXT4-fs: Ignoring removed nobh option
[  368.762172][T20167] EXT4-fs: Ignoring removed bh option
[  368.801229][T20171] loop5: detected capacity change from 0 to 128
[  369.023104][T20195] FAULT_INJECTION: forcing a failure.
[  369.023104][T20195] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  369.036313][T20195] CPU: 0 UID: 0 PID: 20195 Comm: syz.6.5467 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) 
[  369.036427][T20195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  369.036444][T20195] Call Trace:
[  369.036451][T20195]  <TASK>
[  369.036459][T20195]  __dump_stack+0x1d/0x30
[  369.036487][T20195]  dump_stack_lvl+0xe8/0x140
[  369.036566][T20195]  dump_stack+0x15/0x1b
[  369.036582][T20195]  should_fail_ex+0x265/0x280
[  369.036618][T20195]  should_fail+0xb/0x20
[  369.036660][T20195]  should_fail_usercopy+0x1a/0x20
[  369.036686][T20195]  _copy_to_user+0x20/0xa0
[  369.036722][T20195]  __se_sys_move_pages+0xf74/0x1330
[  369.036817][T20195]  ? get_pid_task+0x96/0xd0
[  369.036875][T20195]  ? ksys_write+0x16e/0x1a0
[  369.036911][T20195]  __x64_sys_move_pages+0x78/0x90
[  369.036951][T20195]  x64_sys_call+0x2eab/0x2fb0
[  369.037004][T20195]  do_syscall_64+0xd0/0x1a0
[  369.037030][T20195]  ? clear_bhb_loop+0x40/0x90
[  369.037059][T20195]  ? clear_bhb_loop+0x40/0x90
[  369.037088][T20195]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  369.037114][T20195] RIP: 0033:0x7f37961ee969
[  369.037169][T20195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  369.037194][T20195] RSP: 002b:00007f3794857038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[  369.037223][T20195] RAX: ffffffffffffffda RBX: 00007f3796415fa0 RCX: 00007f37961ee969
[  369.037236][T20195] RDX: 0000200000000080 RSI: 0000000000001efe RDI: 0000000000000000
[  369.037248][T20195] RBP: 00007f3794857090 R08: 0000200000000040 R09: 0000000000000000
[  369.037265][T20195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  369.037282][T20195] R13: 0000000000000000 R14: 00007f3796415fa0 R15: 00007ffd8e457a48
[  369.037307][T20195]  </TASK>
[  369.349639][T20213] loop0: detected capacity change from 0 to 128
[  369.357932][T20204] loop9: detected capacity change from 0 to 2048
[  369.389850][T20204] EXT4-fs: Ignoring removed bh option
[  369.395028][T20219] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  369.404090][T20219] team0: Device ipvlan2 is already an upper device of the team interface
[  369.405845][T20221] loop6: detected capacity change from 0 to 512
[  369.449971][T20221] EXT4-fs: Ignoring removed nobh option
[  369.478288][T20221] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.5483: invalid indirect mapped block 256 (level 2)
[  369.496630][T20225] loop5: detected capacity change from 0 to 1024
[  369.503128][ T5682] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  369.522698][T20221] EXT4-fs (loop6): 2 truncates cleaned up
[  369.533376][T20221] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5483'.
[  369.544003][T20225] EXT4-fs: Ignoring removed nobh option
[  369.549643][T20225] EXT4-fs: Ignoring removed bh option
[  369.564430][ T5682] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  369.576741][ T5682] EXT4-fs (loop9): This should not happen!! Data will be lost
[  369.576741][ T5682] 
[  369.586512][ T5682] EXT4-fs (loop9): Total free blocks count 0
[  369.592626][ T5682] EXT4-fs (loop9): Free/Dirty block details
[  369.598532][ T5682] EXT4-fs (loop9): free_blocks=2415919104
[  369.604307][ T5682] EXT4-fs (loop9): dirty_blocks=400
[  369.609522][ T5682] EXT4-fs (loop9): Block reservation details
[  369.615550][ T5682] EXT4-fs (loop9): i_reserved_data_blocks=33
[  369.644361][ T5682] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 776 with error 28
[  369.657052][ T5682] EXT4-fs (loop9): This should not happen!! Data will be lost
[  369.657052][ T5682] 
[  369.702246][T20237] netlink: 'syz.6.5487': attribute type 1 has an invalid length.
[  369.766707][T20233] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5477'.
[  369.854517][T20248] loop0: detected capacity change from 0 to 2048
[  369.951537][T20254] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  369.975989][T20248] EXT4-fs mount: 106 callbacks suppressed
[  369.976035][T20248] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  370.079545][T20248] EXT4-fs error (device loop0): ext4_find_extent:938: inode #2: comm syz.0.5491: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  370.119134][T20259] loop5: detected capacity change from 0 to 128
[  370.160165][T20259] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  370.188184][T17308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  370.268569][T15824] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  370.314644][T20270] loop5: detected capacity change from 0 to 512
[  370.322515][T20270] EXT4-fs: Ignoring removed nobh option
[  370.362234][T20270] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.5498: invalid indirect mapped block 256 (level 2)
[  370.390550][T20273] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  370.400787][T20270] EXT4-fs (loop5): 2 truncates cleaned up
[  370.407592][T20270] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  370.429833][T20273] team0: Device ipvlan2 is already an upper device of the team interface
[  370.450082][T20270] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5498'.
[  370.471357][T20276] loop9: detected capacity change from 0 to 1024
[  370.483739][T20276] EXT4-fs: Ignoring removed nobh option
[  370.489406][T20276] EXT4-fs: Ignoring removed bh option
[  370.520816][T20276] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  370.558082][T15824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  370.569218][T13445] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  370.621059][T20283] loop0: detected capacity change from 0 to 512
[  370.628973][T20283] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  370.642045][T20283] EXT4-fs (loop0): orphan cleanup on readonly fs
[  370.655583][T20288] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  370.658168][T20283] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.5503: invalid indirect mapped block 256 (level 2)
[  370.681942][T20288] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  370.710990][T20288] loop5: detected capacity change from 0 to 2050
[  370.714607][T20283] EXT4-fs (loop0): 2 truncates cleaned up
[  370.729431][T20288] EXT4-fs warning (device loop5): read_mmp_block:115: Error -117 while reading MMP block 64
[  370.733904][T20283] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  370.801234][T20294] pim6reg1: entered promiscuous mode
[  370.806722][T20294] pim6reg1: entered allmulticast mode
[  370.817497][T20283] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5503'.
[  370.829029][T20283] netlink: 'syz.0.5503': attribute type 5 has an invalid length.
[  370.829046][T20283] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5503'.
[  370.852196][T17308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  370.943237][T20304] ip6gre2: entered allmulticast mode
[  371.055261][T20319] netlink: 'syz.5.5518': attribute type 1 has an invalid length.
[  371.128171][T20321] syz!: rxe_newlink: already configured on team_slave_0
[  371.169840][T20321] loop0: detected capacity change from 0 to 2049
[  371.177787][T20321] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 64
[  371.191123][T20324] loop5: detected capacity change from 0 to 2048
[  371.219684][T20324] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  371.233725][T20324] EXT4-fs error (device loop5): ext4_find_extent:938: inode #2: comm syz.5.5520: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  371.264037][T15824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  371.307553][   T29] kauditd_printk_skb: 159 callbacks suppressed
[  371.307572][   T29] audit: type=1326 audit(371.330:35001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20337 comm="syz.5.5524" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa98a9e969 code=0x0
[  371.383258][T20342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5526'.
[  371.409247][T20343] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5524'.
[  371.418284][T20343] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5524'.
[  371.536853][T20352] netlink: 'syz.4.5530': attribute type 5 has an invalid length.
[  371.607686][   T29] audit: type=1400 audit(371.630:35002): avc:  denied  { connect } for  pid=20362 comm="syz.4.5534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  371.627287][   T29] audit: type=1400 audit(371.630:35003): avc:  denied  { name_connect } for  pid=20362 comm="syz.4.5534" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1
[  371.657809][T20366] netlink: 'syz.4.5535': attribute type 5 has an invalid length.
[  371.694840][T20372] sg_write: data in/out 512/1 bytes for SCSI command 0xb7-- guessing data in;
[  371.694840][T20372]    program syz.0.5538 not setting count and/or reply_len properly
[  371.833139][   T29] audit: type=1400 audit(371.860:35004): avc:  denied  { bind } for  pid=20389 comm="syz.6.5546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  371.852231][   T29] audit: type=1400 audit(371.860:35005): avc:  denied  { name_bind } for  pid=20389 comm="syz.6.5546" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1
[  371.872639][   T29] audit: type=1400 audit(371.860:35006): avc:  denied  { node_bind } for  pid=20389 comm="syz.6.5546" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1
[  371.893362][   T29] audit: type=1400 audit(371.900:35007): avc:  denied  { listen } for  pid=20389 comm="syz.6.5546" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  371.922880][T20394] netlink: 'syz.4.5547': attribute type 5 has an invalid length.
[  371.953696][T20400] sg_write: data in/out 512/1 bytes for SCSI command 0xb7-- guessing data in;
[  371.953696][T20400]    program syz.4.5550 not setting count and/or reply_len properly
[  372.020202][T20406] batman_adv: batadv0: Removing interface: batadv_slave_0
[  372.028504][T20406] batman_adv: batadv0: Removing interface: batadv_slave_1
[  372.031707][T20409] loop6: detected capacity change from 0 to 2048
[  372.064001][T20409] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  372.088158][T20409] EXT4-fs error (device loop6): ext4_find_extent:938: inode #2: comm syz.6.5554: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  372.119286][T12236] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  372.143097][   T29] audit: type=1400 audit(372.170:35008): avc:  denied  { setopt } for  pid=20421 comm="syz.6.5557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  372.233293][T20436] sg_write: data in/out 512/1 bytes for SCSI command 0xb7-- guessing data in;
[  372.233293][T20436]    program syz.5.5564 not setting count and/or reply_len properly
[  372.334603][   T29] audit: type=1326 audit(372.360:35009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20453 comm="syz.6.5571" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f37961ee969 code=0x0
[  372.386873][T20458] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  372.399632][T20424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  372.411148][T20424] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  372.448047][T20465] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  372.527886][T20468] netlink: 'syz.4.5576': attribute type 1 has an invalid length.
[  372.566318][T20472] sg_write: data in/out 512/1 bytes for SCSI command 0xb7-- guessing data in;
[  372.566318][T20472]    program syz.4.5578 not setting count and/or reply_len properly
[  372.709161][T20482] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  372.767013][T20488] FAULT_INJECTION: forcing a failure.
[  372.767013][T20488] name failslab, interval 1, probability 0, space 0, times 0
[  372.780219][T20488] CPU: 0 UID: 0 PID: 20488 Comm: syz.4.5585 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) 
[  372.780305][T20488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  372.780317][T20488] Call Trace:
[  372.780322][T20488]  <TASK>
[  372.780329][T20488]  __dump_stack+0x1d/0x30
[  372.780349][T20488]  dump_stack_lvl+0xe8/0x140
[  372.780420][T20488]  dump_stack+0x15/0x1b
[  372.780525][T20488]  should_fail_ex+0x265/0x280
[  372.780558][T20488]  should_failslab+0x8c/0xb0
[  372.780586][T20488]  __kvmalloc_node_noprof+0x126/0x4d0
[  372.780621][T20488]  ? alloc_fdtable+0xf8/0x1b0
[  372.780647][T20488]  alloc_fdtable+0xf8/0x1b0
[  372.780670][T20488]  dup_fd+0x4c7/0x540
[  372.780771][T20488]  copy_files+0x98/0xf0
[  372.780795][T20488]  copy_process+0xc44/0x1f90
[  372.780828][T20488]  kernel_clone+0x16c/0x5b0
[  372.780856][T20488]  __x64_sys_clone+0xe6/0x120
[  372.780947][T20488]  x64_sys_call+0x2c59/0x2fb0
[  372.780967][T20488]  do_syscall_64+0xd0/0x1a0
[  372.781062][T20488]  ? clear_bhb_loop+0x40/0x90
[  372.781082][T20488]  ? clear_bhb_loop+0x40/0x90
[  372.781103][T20488]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  372.781192][T20488] RIP: 0033:0x7fe18fe9e969
[  372.781206][T20488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  372.781223][T20488] RSP: 002b:00007fe18e506fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  372.781240][T20488] RAX: ffffffffffffffda RBX: 00007fe1900c5fa0 RCX: 00007fe18fe9e969
[  372.781251][T20488] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  372.781263][T20488] RBP: 00007fe18e507090 R08: 0000000000000000 R09: 0000000000000000
[  372.781278][T20488] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002
[  372.781289][T20488] R13: 0000000000000000 R14: 00007fe1900c5fa0 R15: 00007ffdfdb8b9c8
[  372.781307][T20488]  </TASK>
[  373.014711][T20497] syzkaller1: entered promiscuous mode
[  373.020312][T20497] syzkaller1: entered allmulticast mode
[  373.097189][   T29] audit: type=1326 audit(373.120:35010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20502 comm="syz.4.5592" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe18fe9e969 code=0x0
[  373.122416][T20501] loop9: detected capacity change from 0 to 2048
[  373.134065][T20501] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  373.148067][T20501] EXT4-fs error (device loop9): ext4_find_extent:938: inode #2: comm syz.9.5591: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  373.176420][T13445] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  373.211785][T20513] loop9: detected capacity change from 0 to 128
[  373.220222][T20513] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  373.236236][T20517] netlink: 'syz.6.5596': attribute type 1 has an invalid length.
[  373.270548][T13445] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  373.283336][T20522] syz!: rxe_newlink: already configured on team_slave_0
[  373.308611][T20522] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  373.328492][T20526] xt_l2tp: invalid flags combination: 0
[  373.344758][T20527] loop6: detected capacity change from 0 to 256
[  373.357038][T20522] loop0: detected capacity change from 0 to 2050
[  373.374058][T20522] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 64
[  373.403171][T20533] __nla_validate_parse: 20 callbacks suppressed
[  373.403187][T20533] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5602'.
[  373.443148][T20536] syzkaller1: entered promiscuous mode
[  373.448675][T20536] syzkaller1: entered allmulticast mode
[  373.593457][T20542] loop6: detected capacity change from 0 to 2048
[  373.603429][T20542] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  373.616319][T20542] EXT4-fs error (device loop6): ext4_find_extent:938: inode #2: comm syz.6.5604: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  373.643023][T12236] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  373.664076][T20547] loop6: detected capacity change from 0 to 512
[  373.671523][T20547] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  373.679738][T20547] EXT4-fs (loop6): orphan cleanup on readonly fs
[  373.686612][T20547] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.5607: invalid indirect mapped block 256 (level 2)
[  373.687168][T20549] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5606'.
[  373.700650][T20547] EXT4-fs (loop6): 2 truncates cleaned up
[  373.709007][T20549] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5606'.
[  373.715321][T20547] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  373.739730][T20547] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5607'.
[  373.748927][T20547] netlink: 'syz.6.5607': attribute type 5 has an invalid length.
[  373.756848][T20547] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5607'.
[  373.776843][T12236] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  373.797941][T20551] loop6: detected capacity change from 0 to 128
[  373.806144][T20551] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  373.843637][T12236] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  373.906085][T20558] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5610'.
[  373.934036][T20562] pim6reg1: entered promiscuous mode
[  373.939414][T20562] pim6reg1: entered allmulticast mode
[  374.019029][T20572] syzkaller1: entered promiscuous mode
[  374.024667][T20572] syzkaller1: entered allmulticast mode
[  374.032641][T20574] loop6: detected capacity change from 0 to 2048
[  374.043355][T20574] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  374.056289][T20574] EXT4-fs error (device loop6): ext4_find_extent:938: inode #2: comm syz.6.5617: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  374.082910][T12236] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  374.105660][T20578] loop6: detected capacity change from 0 to 512
[  374.123888][T20578] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  374.132216][T20578] EXT4-fs (loop6): orphan cleanup on readonly fs
[  374.138911][T20578] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.5618: invalid indirect mapped block 256 (level 2)
[  374.153637][T20578] EXT4-fs (loop6): 2 truncates cleaned up
[  374.159939][T20578] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  374.174670][T20578] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5618'.
[  374.183969][T20578] netlink: 'syz.6.5618': attribute type 5 has an invalid length.
[  374.191771][T20578] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5618'.
[  374.221140][T20588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5621'.
[  374.235201][T12236] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  374.263340][T20594] loop6: detected capacity change from 0 to 2048
[  374.284385][T20594] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  374.298931][T20594] EXT4-fs error (device loop6): ext4_find_extent:938: inode #2: comm syz.6.5622: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  374.325214][T12236] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  374.350625][T20603] FAULT_INJECTION: forcing a failure.
[  374.350625][T20603] name failslab, interval 1, probability 0, space 0, times 0
[  374.363402][T20603] CPU: 0 UID: 0 PID: 20603 Comm: syz.4.5625 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) 
[  374.363489][T20603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  374.363506][T20603] Call Trace:
[  374.363514][T20603]  <TASK>
[  374.363524][T20603]  __dump_stack+0x1d/0x30
[  374.363552][T20603]  dump_stack_lvl+0xe8/0x140
[  374.363578][T20603]  dump_stack+0x15/0x1b
[  374.363620][T20603]  should_fail_ex+0x265/0x280
[  374.363670][T20603]  should_failslab+0x8c/0xb0
[  374.363758][T20603]  kmem_cache_alloc_noprof+0x50/0x310
[  374.363785][T20603]  ? __anon_vma_prepare+0xcd/0x2f0
[  374.363825][T20603]  __anon_vma_prepare+0xcd/0x2f0
[  374.363939][T20603]  do_wp_page+0x17fa/0x23e0
[  374.363974][T20603]  ? __lruvec_stat_mod_folio+0xd6/0x120
[  374.364030][T20603]  ? __rcu_read_lock+0x37/0x50
[  374.364119][T20603]  handle_mm_fault+0x6dc/0x2ae0
[  374.364190][T20603]  ? mas_walk+0xf2/0x120
[  374.364217][T20603]  do_user_addr_fault+0x636/0x1090
[  374.364351][T20603]  ? fpregs_assert_state_consistent+0x84/0xa0
[  374.364385][T20603]  exc_page_fault+0x54/0xc0
[  374.364411][T20603]  asm_exc_page_fault+0x26/0x30
[  374.364512][T20603] RIP: 0033:0x7fe18fd60cc3
[  374.364527][T20603] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c
[  374.364558][T20603] RSP: 002b:00007fe18e4e54a0 EFLAGS: 00010202
[  374.364584][T20603] RAX: 0000000000000400 RBX: 00007fe18e4e5540 RCX: 00007fe1860c6000
[  374.364596][T20603] RDX: 00007fe18e4e56e0 RSI: 0000000000000001 RDI: 00007fe18e4e55e0
[  374.364608][T20603] RBP: 00000000000000f9 R08: 000000000000000a R09: 00000000000003d8
[  374.364619][T20603] R10: 00000000000003da R11: 00007fe18e4e5540 R12: 0000000000000001
[  374.364656][T20603] R13: 00007fe18ff3bfc0 R14: 0000000000000020 R15: 00007fe18e4e55e0
[  374.364674][T20603]  </TASK>
[  374.364693][T20603] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  374.590949][T20611] syzkaller1: entered promiscuous mode
[  374.596557][T20611] syzkaller1: entered allmulticast mode
[  374.619770][T20613] loop6: detected capacity change from 0 to 128
[  374.627848][T20613] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  374.665137][T12236] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  374.744325][T20624] loop5: detected capacity change from 0 to 512
[  374.753034][T20624] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  374.761180][T20624] EXT4-fs (loop5): orphan cleanup on readonly fs
[  374.768160][T20624] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.5633: invalid indirect mapped block 256 (level 2)
[  374.783107][T20624] EXT4-fs (loop5): 2 truncates cleaned up
[  374.789453][T20624] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  374.790809][T20627] sg_write: data in/out 512/1 bytes for SCSI command 0xb7-- guessing data in;
[  374.790809][T20627]    program syz.6.5634 not setting count and/or reply_len properly
[  374.805711][T20624] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5633'.
[  374.828442][T20624] netlink: 'syz.5.5633': attribute type 5 has an invalid length.
[  374.850048][T15824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  374.927649][T20633] lo speed is unknown, defaulting to 1000
[  374.953670][T20636] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  375.161421][T20645] pim6reg1: entered promiscuous mode
[  375.166883][T20645] pim6reg1: entered allmulticast mode
[  375.312298][ T3389] usb usb8-port2: attempt power cycle
[  375.505578][T20673] loop0: detected capacity change from 0 to 512
[  375.513295][T20673] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  375.522996][T20673] EXT4-fs (loop0): orphan cleanup on readonly fs
[  375.530000][T20673] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5650: bg 0: block 248: padding at end of block bitmap is not set
[  375.545334][T20673] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.5650: Failed to acquire dquot type 1
[  375.557812][T20673] EXT4-fs (loop0): 1 truncate cleaned up
[  375.565132][T20673] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  375.579455][T20673] Cannot find set identified by id 2 to match
[  375.597050][T20682] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  375.608567][T20682] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  375.694087][T20684] netlink: 'syz.4.5655': attribute type 1 has an invalid length.
[  375.741267][T20686] sch_tbf: burst 0 is lower than device lo mtu (18) !
[  375.897212][T20694] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  375.911696][T20694] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  375.924311][T20698] loop6: detected capacity change from 0 to 2048
[  375.934076][T20698] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  375.946446][T20694] loop5: detected capacity change from 0 to 2050
[  375.948091][T20698] EXT4-fs error (device loop6): ext4_find_extent:938: inode #2: comm syz.6.5661: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  375.970525][T20694] EXT4-fs warning (device loop5): read_mmp_block:115: Error -117 while reading MMP block 64
[  375.995015][T12236] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.162842][T20713] loop5: detected capacity change from 0 to 512
[  376.176003][T20713] EXT4-fs (loop5): 1 orphan inode deleted
[  376.182622][T20713] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  376.195756][ T5695] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:44: Failed to release dquot type 1
[  376.226656][T15824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.312857][T17308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.376326][T20736] netlink: 'syz.5.5673': attribute type 1 has an invalid length.
[  376.400180][T20736] loop5: detected capacity change from 0 to 2048
[  376.410227][   T29] kauditd_printk_skb: 37 callbacks suppressed
[  376.410245][   T29] audit: type=1326 audit(376.440:35045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20729 comm="syz.0.5670" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1441b0e969 code=0x0
[  376.429722][T20736] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  376.507474][T20745] ext4: Unknown parameter 'xœìÝ?‹#eðßd³“Q‹¤°á¼Âêp¯›'
[  376.580011][T15824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.603085][T20752] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  376.704386][T20772] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  376.717067][T20772] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  376.737326][T20772] loop5: detected capacity change from 0 to 2050
[  376.745070][T20772] EXT4-fs warning (device loop5): read_mmp_block:115: Error -117 while reading MMP block 64
[  376.969912][T20817] netlink: 'syz.5.5686': attribute type 1 has an invalid length.
[  376.995535][T20817] loop5: detected capacity change from 0 to 2048
[  377.034460][T20817] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  377.117236][T20840] ext4: Unknown parameter 'xœìÝ?‹#eðßd³“Q‹¤°á¼Âêp¯›'
[  377.132177][ T3389] usb usb8-port2: unable to enumerate USB device
[  377.186983][T20849] loop9: detected capacity change from 0 to 512
[  377.195461][T20849] EXT4-fs (loop9): revision level too high, forcing read-only mode
[  377.205265][T20849] EXT4-fs (loop9): orphan cleanup on readonly fs
[  377.212212][T20849] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.5690: invalid indirect mapped block 256 (level 2)
[  377.227223][T20849] EXT4-fs (loop9): 2 truncates cleaned up
[  377.233543][T20849] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  377.268415][T20856] loop6: detected capacity change from 0 to 512
[  377.277044][T20849] netlink: 'syz.9.5690': attribute type 5 has an invalid length.
[  377.286259][T20856] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  377.328523][T20856] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  377.339104][T20856] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0
[  377.348559][T20856] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.5691: Failed to acquire dquot type 0
[  377.366309][T13445] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  377.380360][   T55] bridge_slave_1: left allmulticast mode
[  377.386332][   T55] bridge_slave_1: left promiscuous mode
[  377.392026][   T55] bridge0: port 2(bridge_slave_1) entered disabled state
[  377.406070][T15824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  377.422622][T20856] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  377.437653][   T55] bridge_slave_0: left allmulticast mode
[  377.443406][   T55] bridge_slave_0: left promiscuous mode
[  377.449144][   T55] bridge0: port 1(bridge_slave_0) entered disabled state
[  377.458418][T20856] EXT4-fs (loop6): 1 truncate cleaned up
[  377.467717][T20856] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  377.525280][   T29] audit: type=1400 audit(377.540:35046): avc:  denied  { read write } for  pid=20854 comm="syz.6.5691" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  377.548562][   T29] audit: type=1400 audit(377.540:35047): avc:  denied  { open } for  pid=20854 comm="syz.6.5691" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  377.586736][T12236] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  377.615571][T20882] loop0: detected capacity change from 0 to 1024
[  377.622517][T20882] EXT4-fs: Ignoring removed orlov option
[  377.628263][T20882] EXT4-fs: Ignoring removed nomblk_io_submit option
[  377.644024][T20882] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  377.661356][   T29] audit: type=1400 audit(377.690:35048): avc:  denied  { remove_name } for  pid=20880 comm="syz.0.5699" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  377.694908][   T29] audit: type=1400 audit(377.690:35049): avc:  denied  { rename } for  pid=20880 comm="syz.0.5699" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  377.716939][   T29] audit: type=1400 audit(377.690:35050): avc:  denied  { unlink } for  pid=20880 comm="syz.0.5699" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  377.740148][T17308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  377.761528][T20893] syz!: rxe_newlink: already configured on team_slave_0
[  377.874630][   T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  377.884608][   T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  377.893826][   T55] bond0 (unregistering): Released all slaves
[  377.901360][T20896] loop0: detected capacity change from 0 to 2049
[  377.910526][T20896] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 64
[  377.952103][   T55] IPVS: stopping backup sync thread 11582 ...
[  377.961540][T20895] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  377.977442][   T29] audit: type=1326 audit(377.990:35051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20897 comm="syz.5.5703" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa98a9e969 code=0x0
[  378.023748][T20904] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  378.065411][T20904] loop6: detected capacity change from 0 to 2049
[  378.075297][   T55] hsr_slave_0: left promiscuous mode
[  378.081982][   T55] hsr_slave_1: left promiscuous mode
[  378.090117][T20904] EXT4-fs warning (device loop6): read_mmp_block:115: Error -117 while reading MMP block 64
[  378.106758][   T55] batman_adv: batadv0: Removing interface: dummy0
[  378.124644][   T55] batman_adv: batadv0: Removing interface: batadv_slave_0
[  378.138392][   T29] audit: type=1400 audit(378.160:35052): avc:  denied  { validate_trans } for  pid=20912 comm="syz.9.5709" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  378.159086][   T55] batman_adv: batadv0: Removing interface: batadv_slave_1
[  378.232683][   T55] team0 (unregistering): Port device team_slave_1 removed
[  378.242711][   T55] team0 (unregistering): Port device team_slave_0 removed
[  378.380779][T20925] sch_tbf: burst 0 is lower than device lo mtu (18) !
[  378.396499][T20923] FAULT_INJECTION: forcing a failure.
[  378.396499][T20923] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  378.409694][T20923] CPU: 1 UID: 0 PID: 20923 Comm: syz.0.5712 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) 
[  378.409728][T20923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  378.409744][T20923] Call Trace:
[  378.409777][T20923]  <TASK>
[  378.409787][T20923]  __dump_stack+0x1d/0x30
[  378.409814][T20923]  dump_stack_lvl+0xe8/0x140
[  378.409837][T20923]  dump_stack+0x15/0x1b
[  378.409859][T20923]  should_fail_ex+0x265/0x280
[  378.409904][T20923]  should_fail+0xb/0x20
[  378.410016][T20923]  should_fail_usercopy+0x1a/0x20
[  378.410039][T20923]  _copy_from_user+0x1c/0xb0
[  378.410068][T20923]  ___sys_recvmsg+0xaa/0x370
[  378.410179][T20923]  do_recvmmsg+0x1ef/0x540
[  378.410212][T20923]  ? fput+0x8f/0xc0
[  378.410238][T20923]  __x64_sys_recvmmsg+0xe5/0x170
[  378.410271][T20923]  x64_sys_call+0x1c6a/0x2fb0
[  378.410299][T20923]  do_syscall_64+0xd0/0x1a0
[  378.410447][T20923]  ? clear_bhb_loop+0x40/0x90
[  378.410476][T20923]  ? clear_bhb_loop+0x40/0x90
[  378.410505][T20923]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  378.410599][T20923] RIP: 0033:0x7f1441b0e969
[  378.410617][T20923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  378.410640][T20923] RSP: 002b:00007f1440177038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  378.410664][T20923] RAX: ffffffffffffffda RBX: 00007f1441d35fa0 RCX: 00007f1441b0e969
[  378.410681][T20923] RDX: 0000000000000002 RSI: 0000200000003d40 RDI: 0000000000000003
[  378.410698][T20923] RBP: 00007f1440177090 R08: 0000000000000000 R09: 0000000000000000
[  378.410721][T20923] R10: 000000000000002b R11: 0000000000000246 R12: 0000000000000001
[  378.410738][T20923] R13: 0000000000000000 R14: 00007f1441d35fa0 R15: 00007ffe1d09a5a8
[  378.410763][T20923]  </TASK>
[  378.608292][T20927] __nla_validate_parse: 17 callbacks suppressed
[  378.608308][T20927] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5714'.
[  378.655227][T20935] FAULT_INJECTION: forcing a failure.
[  378.655227][T20935] name failslab, interval 1, probability 0, space 0, times 0
[  378.667988][T20935] CPU: 1 UID: 0 PID: 20935 Comm: syz.0.5718 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) 
[  378.668027][T20935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  378.668107][T20935] Call Trace:
[  378.668114][T20935]  <TASK>
[  378.668122][T20935]  __dump_stack+0x1d/0x30
[  378.668144][T20935]  dump_stack_lvl+0xe8/0x140
[  378.668169][T20935]  dump_stack+0x15/0x1b
[  378.668193][T20935]  should_fail_ex+0x265/0x280
[  378.668264][T20935]  should_failslab+0x8c/0xb0
[  378.668338][T20935]  kmem_cache_alloc_node_noprof+0x57/0x320
[  378.668365][T20935]  ? __alloc_skb+0x101/0x320
[  378.668403][T20935]  ? __rtnl_unlock+0x95/0xb0
[  378.668479][T20935]  __alloc_skb+0x101/0x320
[  378.668520][T20935]  netlink_ack+0xfd/0x500
[  378.668677][T20935]  netlink_rcv_skb+0x192/0x220
[  378.668710][T20935]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  378.668751][T20935]  rtnetlink_rcv+0x1c/0x30
[  378.668785][T20935]  netlink_unicast+0x5a1/0x670
[  378.668826][T20935]  netlink_sendmsg+0x58b/0x6b0
[  378.668850][T20935]  ? __pfx_netlink_sendmsg+0x10/0x10
[  378.668870][T20935]  __sock_sendmsg+0x145/0x180
[  378.668914][T20935]  ____sys_sendmsg+0x31e/0x4e0
[  378.669012][T20935]  ___sys_sendmsg+0x17b/0x1d0
[  378.669059][T20935]  __x64_sys_sendmsg+0xd4/0x160
[  378.669092][T20935]  x64_sys_call+0x2999/0x2fb0
[  378.669155][T20935]  do_syscall_64+0xd0/0x1a0
[  378.669187][T20935]  ? clear_bhb_loop+0x40/0x90
[  378.669217][T20935]  ? clear_bhb_loop+0x40/0x90
[  378.669248][T20935]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  378.669283][T20935] RIP: 0033:0x7f1441b0e969
[  378.669298][T20935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  378.669370][T20935] RSP: 002b:00007f1440177038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  378.669396][T20935] RAX: ffffffffffffffda RBX: 00007f1441d35fa0 RCX: 00007f1441b0e969
[  378.669414][T20935] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000008
[  378.669430][T20935] RBP: 00007f1440177090 R08: 0000000000000000 R09: 0000000000000000
[  378.669447][T20935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  378.669464][T20935] R13: 0000000000000000 R14: 00007f1441d35fa0 R15: 00007ffe1d09a5a8
[  378.669490][T20935]  </TASK>
[  378.946786][T20945] syz!: rxe_newlink: already configured on team_slave_0
[  378.957166][T20948] sg_write: data in/out 512/1 bytes for SCSI command 0xb7-- guessing data in;
[  378.957166][T20948]    program syz.5.5720 not setting count and/or reply_len properly
[  379.010787][T20945] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  379.033355][T20933] xt_TPROXY: Can be used only with -p tcp or -p udp
[  379.049897][T20945] loop0: detected capacity change from 0 to 2050
[  379.083554][T20945] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 64
[  379.095919][T20902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5705'.
[  379.105465][T20954] FAULT_INJECTION: forcing a failure.
[  379.105465][T20954] name failslab, interval 1, probability 0, space 0, times 0
[  379.112116][T20902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5705'.
[  379.118183][T20954] CPU: 1 UID: 0 PID: 20954 Comm: syz.9.5723 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) 
[  379.118227][T20954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  379.118246][T20954] Call Trace:
[  379.118255][T20954]  <TASK>
[  379.118267][T20954]  __dump_stack+0x1d/0x30
[  379.118295][T20954]  dump_stack_lvl+0xe8/0x140
[  379.118315][T20954]  dump_stack+0x15/0x1b
[  379.118405][T20954]  should_fail_ex+0x265/0x280
[  379.118454][T20954]  should_failslab+0x8c/0xb0
[  379.118498][T20954]  kmem_cache_alloc_noprof+0x50/0x310
[  379.118526][T20954]  ? __anon_vma_prepare+0x70/0x2f0
[  379.118590][T20954]  __anon_vma_prepare+0x70/0x2f0
[  379.118629][T20954]  do_wp_page+0x17fa/0x23e0
[  379.118671][T20954]  ? __lruvec_stat_mod_folio+0xd6/0x120
[  379.118780][T20954]  ? __rcu_read_lock+0x37/0x50
[  379.118812][T20954]  handle_mm_fault+0x6dc/0x2ae0
[  379.118856][T20954]  ? mas_walk+0xf2/0x120
[  379.118919][T20954]  do_user_addr_fault+0x636/0x1090
[  379.118965][T20954]  ? fpregs_assert_state_consistent+0x84/0xa0
[  379.119025][T20954]  exc_page_fault+0x54/0xc0
[  379.119053][T20954]  asm_exc_page_fault+0x26/0x30
[  379.119082][T20954] RIP: 0033:0x7ff0e4400cc3
[  379.119103][T20954] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c
[  379.119129][T20954] RSP: 002b:00007ff0e2ba64a0 EFLAGS: 00010202
[  379.119150][T20954] RAX: 0000000000000400 RBX: 00007ff0e2ba6540 RCX: 00007ff0da787000
[  379.119207][T20954] RDX: 00007ff0e2ba66e0 RSI: 0000000000000009 RDI: 00007ff0e2ba65e0
[  379.119225][T20954] RBP: 00000000000000f9 R08: 0000000000000008 R09: 00000000000000a5
[  379.119242][T20954] R10: 00000000000000be R11: 00007ff0e2ba6540 R12: 0000000000000001
[  379.119259][T20954] R13: 00007ff0e45dbfc0 R14: 0000000000000020 R15: 00007ff0e2ba65e0
[  379.119347][T20954]  </TASK>
[  379.119362][T20954] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  379.336095][T20954] loop9: detected capacity change from 0 to 1024
[  379.346726][T20954] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  379.356574][T20954] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  379.370464][T20954] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  379.380454][T20954] EXT4-fs (loop9): external journal device major/minor numbers have changed
[  379.389293][T20954] EXT4-fs (loop9): filesystem has both journal inode and journal device!
[  379.683585][T20976] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  379.712762][T20976] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  379.925716][T20967] lo speed is unknown, defaulting to 1000
[  379.965315][T20989] loop0: detected capacity change from 0 to 1024
[  380.055840][T20967] chnl_net:caif_netlink_parms(): no params data found
[  380.083801][T20989] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  380.143864][T20989] lo: entered allmulticast mode
[  380.213581][T21008] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  380.260659][T21023] netlink: 'syz.9.5743': attribute type 1 has an invalid length.
[  380.268488][T21023] netlink: 224 bytes leftover after parsing attributes in process `syz.9.5743'.
[  380.281577][T20967] bridge0: port 1(bridge_slave_0) entered blocking state
[  380.288745][T20967] bridge0: port 1(bridge_slave_0) entered disabled state
[  380.306028][T21023] loop9: detected capacity change from 0 to 2048
[  380.308647][T20967] bridge_slave_0: entered allmulticast mode
[  380.319812][T20967] bridge_slave_0: entered promiscuous mode
[  380.327231][T20988] lo: left allmulticast mode
[  380.343212][T21023] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  380.357090][T20967] bridge0: port 2(bridge_slave_1) entered blocking state
[  380.364420][T20967] bridge0: port 2(bridge_slave_1) entered disabled state
[  380.371991][T17308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  380.381644][T20967] bridge_slave_1: entered allmulticast mode
[  380.389111][T20967] bridge_slave_1: entered promiscuous mode
[  380.401243][T21023] ==================================================================
[  380.409370][T21023] BUG: KCSAN: data-race in __mark_inode_dirty / move_expired_inodes
[  380.417399][T21023] 
[  380.419731][T21023] read-write to 0xffff888100631d38 of 4 bytes by task 5659 on cpu 0:
[  380.427822][T21023]  move_expired_inodes+0x17a/0x400
[  380.432966][T21023]  queue_io+0xd9/0x2c0
[  380.437053][T21023]  wb_writeback+0x226/0x5c0
[  380.441577][T21023]  wb_workfn+0x4c9/0x910
[  380.445863][T21023]  process_scheduled_works+0x4cb/0x9d0
[  380.451358][T21023]  worker_thread+0x582/0x770
[  380.455980][T21023]  kthread+0x486/0x510
[  380.460075][T21023]  ret_from_fork+0x4b/0x60
[  380.464520][T21023]  ret_from_fork_asm+0x1a/0x30
[  380.469494][T21023] 
[  380.471826][T21023] read to 0xffff888100631d38 of 4 bytes by task 21023 on cpu 1:
[  380.479565][T21023]  __mark_inode_dirty+0x18e/0x760
[  380.484628][T21023]  mark_buffer_dirty+0x133/0x210
[  380.489595][T21023]  __ext4_handle_dirty_metadata+0x200/0x470
[  380.495499][T21023]  ext4_mb_mark_context+0x86f/0x920
[  380.500726][T21023]  ext4_mb_mark_diskspace_used+0x1eb/0x3c0
[  380.506571][T21023]  ext4_mb_new_blocks+0xa62/0x2050
[  380.511713][T21023]  ext4_ext_map_blocks+0xfe6/0x3620
[  380.516952][T21023]  ext4_map_blocks+0x5ab/0xd00
[  380.521755][T21023]  _ext4_get_block+0x10a/0x350
[  380.526546][T21023]  ext4_get_block_unwritten+0x2a/0xb0
[  380.532045][T21023]  ext4_block_write_begin+0x303/0x970
[  380.537466][T21023]  ext4_write_begin+0x43c/0xc30
[  380.542334][T21023]  ext4_da_write_begin+0x1e8/0x580
[  380.547465][T21023]  generic_perform_write+0x181/0x490
[  380.552894][T21023]  ext4_buffered_write_iter+0x1ee/0x3c0
[  380.558491][T21023]  ext4_file_write_iter+0x383/0xf00
[  380.563719][T21023]  vfs_write+0x4a0/0x8d0
[  380.567996][T21023]  ksys_write+0xda/0x1a0
[  380.572267][T21023]  __x64_sys_write+0x40/0x50
[  380.577062][T21023]  x64_sys_call+0x2cdd/0x2fb0
[  380.581845][T21023]  do_syscall_64+0xd0/0x1a0
[  380.586370][T21023]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  380.592276][T21023] 
[  380.594609][T21023] value changed: 0x00000020 -> 0x00010022
[  380.600333][T21023] 
[  380.602662][T21023] Reported by Kernel Concurrency Sanitizer on:
[  380.608821][T21023] CPU: 1 UID: 0 PID: 21023 Comm: syz.9.5743 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) 
[  380.621354][T21023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  380.631418][T21023] ==================================================================
[  380.708681][T20967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  380.724478][T20967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  380.739336][T21033] ext4: Unknown parameter 'xœìÝ?‹#eðßd³“Q‹¤°á¼Âêp¯›'
[  380.759483][T21035] loop0: detected capacity change from 0 to 512
[  380.773440][T20967] team0: Port device team_slave_0 added
[  380.781840][T21035] EXT4-fs error (device loop0): ext4_iget_extra_inode:4693: inode #15: comm syz.0.5745: corrupted in-inode xattr: invalid ea_ino
[  380.791179][T20967] team0: Port device team_slave_1 added
[  380.795719][T21035] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.5745: couldn't read orphan inode 15 (err -117)
[  380.822366][T21035] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  380.852903][T21035] EXT4-fs error (device loop0): ext4_add_entry:2419: inode #2: comm syz.0.5745: Directory hole found for htree leaf block 0
[  380.871588][T21035] EXT4-fs error (device loop0): ext4_add_entry:2419: inode #2: comm syz.0.5745: Directory hole found for htree leaf block 0
[  380.877425][T20967] batman_adv: batadv0: Adding interface: batadv_slave_0
[  380.891570][T20967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  380.917636][T20967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  380.931663][   T55] bridge_slave_0: left promiscuous mode
[  380.937414][   T55] bridge0: port 1(bridge_slave_0) entered disabled state
[  380.992561][T17308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  381.009053][T13445] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  381.284125][   T55] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface
[  381.294296][   T55] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface
[  381.303485][   T55] $Hÿ (unregistering): Released all slaves
[  381.312834][T20967] batman_adv: batadv0: Adding interface: batadv_slave_1
[  381.319824][T20967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  381.345844][T20967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  381.359492][   T55] tipc: Left network mode
[  381.379127][T20967] hsr_slave_0: entered promiscuous mode
[  381.386053][T20967] hsr_slave_1: entered promiscuous mode
[  381.392174][T20967] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  381.399802][T20967] Cannot create hsr debugfs directory
[  381.419220][   T55] hsr_slave_0: left promiscuous mode
[  381.425835][   T55] hsr_slave_1: left promiscuous mode
[  381.458327][   T55] team0 (unregistering): Port device team_slave_1 removed
[  381.727448][T20967] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  381.736753][T20967] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  381.745578][T20967] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  381.755443][T20967] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  381.793101][   T55] IPVS: stop unused estimator thread 0...
[  381.794074][T20967] 8021q: adding VLAN 0 to HW filter on device bond0
[  381.811018][T20967] 8021q: adding VLAN 0 to HW filter on device team0
[  381.821463][ T5722] bridge0: port 1(bridge_slave_0) entered blocking state
[  381.828616][ T5722] bridge0: port 1(bridge_slave_0) entered forwarding state
[  381.839718][ T5695] bridge0: port 2(bridge_slave_1) entered blocking state
[  381.846815][ T5695] bridge0: port 2(bridge_slave_1) entered forwarding state
[  381.909424][T20967] 8021q: adding VLAN 0 to HW filter on device batadv0
[  382.012595][T20967] veth0_vlan: entered promiscuous mode
[  382.020517][T20967] veth1_vlan: entered promiscuous mode
[  382.035132][T20967] veth0_macvtap: entered promiscuous mode
[  382.043105][T20967] veth1_macvtap: entered promiscuous mode
[  382.054535][T20967] batman_adv: batadv0: Interface activated: batadv_slave_0
[  382.066211][T20967] batman_adv: batadv0: Interface activated: batadv_slave_1
[  382.076121][T20967] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  382.084886][T20967] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  382.093723][T20967] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  382.102454][T20967] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  382.121271][   T29] kauditd_printk_skb: 101 callbacks suppressed
[  382.121287][   T29] audit: type=1400 audit(382.140:35154): avc:  denied  { mounton } for  pid=20967 comm="syz-executor" path="/root/syzkaller.z2Ve0u/syz-tmp" dev="sda1" ino=2070 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[  382.151699][   T29] audit: type=1400 audit(382.150:35155): avc:  denied  { mounton } for  pid=20967 comm="syz-executor" path="/root/syzkaller.z2Ve0u/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  382.178196][   T29] audit: type=1400 audit(382.150:35156): avc:  denied  { mounton } for  pid=20967 comm="syz-executor" path="/root/syzkaller.z2Ve0u/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=65944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  382.205943][   T29] audit: type=1400 audit(382.170:35157): avc:  denied  { mounton } for  pid=20967 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  382.228569][   T29] audit: type=1400 audit(382.170:35158): avc:  denied  { mount } for  pid=20967 comm="syz-executor" name="/" dev="gadgetfs" ino=3779 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1