last executing test programs:

14.919329437s ago: executing program 2 (id=214):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='sys_enter\x00', r1}, 0x10)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0)

14.871351128s ago: executing program 2 (id=217):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001280)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xad, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) (fail_nth: 6)

14.503296614s ago: executing program 2 (id=222):
mq_open(&(0x7f0000000100)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\x03q\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x91:\x0f\xef\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00q`\x1a_\xcd\x8ck+\x05\x11}*\xf5\r\a\x14\x97B>\x9d\xe6\x81\xf9\xcbE\xa1\xc3\xda\xb6\xfe\rh\xd5\xe3\x9d\x85\xe0;\x90W\xa4\xc1\x1eb;\xa5\x12\xc5\x936k\x18=\xe08\x17\xfc\xf1\xee\xd5\xa7\xab\xd3\x05a\x15?c\xa3\xa8\xd3$\xe8`$\x16\xb4\xd8K\x1bR4s\xab\xedM\xa1\xd4I\x91\x01', 0x6e93ebbbcc0884f2, 0x2c, 0x0)
syz_io_uring_setup(0x239, 0x0, 0x0, 0x0)
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x82, 0x3}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x100000000000000, 0x80, 0x0, 0x108)
bind$tipc(r0, 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x8c01, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
epoll_create1(0x0)

14.440885715s ago: executing program 2 (id=224):
r0 = syz_open_procfs(0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
fcntl$notify(r2, 0x402, 0x14)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x800000, 0x8, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$eJzs3MFqE18Ux/Hzb/pv0pQ2EURQUA+60c3QxgfQIC2IAaU2RV0IUzvRkDEpM0MlIjYbcetzFJfuBPUFuhE37t0VQXDThTjiTKZN2rSmbdLE9PuBck9y7o+5bdNyUuis3339pFRwjYLpyVBCZUikJhsi6T9V3X/1dSioR6RRTS6P/fhy9s69+zezudz0rOpMdu5KRlUnzr9/+vzNhY/e2PzbiXdxWUs/WP+e+bp2au30+q+5x0VXi66WK56aulCpeOaCbeli0S0Zqrdty3QtLZZdy2nqF+zK0lJVzfLieHLJsVxXzXJVS1ZVvYp6TlXNR2axrIZh6HhSjrfhNvbkV2dnzeyubT/W0ROh60ZbPek42VrrZn71CM4EAAD6zN7zfzjr7z7/5+bDtcPzvwjzf5fUmh79Zf7HQHCcrJms//w2Y/4HAAAAAAAAAAAAAAAAAAAAAOBfsOH7Kd/3U9EafcRFJCEi0eNenxPdccDv/9UeHRcd1vCPewkR+9VyfjkfrmE/W5Ci2GLJpKTkZ/B6qAvrmRu56UkNpOWDvVLPryznYxKP8pF0q/y5E1NhXpvz/0uy8foZScnJ1tfPtMyPyKWLDXlDUvLpoVTElsXgdb2VfzGlev1Wblt+NNgHAAAAAMAgMHTTjvfvQT/YkJCd/TC/j78PbHt/PSxn2rlFJQAAAAAAODS3+qxk2rblHKCIi8gh4oNaxKQvjrGtuCYifXCMoyoSIhI+oweJf9uMt5Xy29gzLCI9/7Lso+j1byYAAAAAnbY19O8j9PllF08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDx0+79wKL9O1pRY494w+ViR/4JAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH3kdwAAAP//R8IgDA==")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r4, &(0x7f0000004200)='t', 0x1)
sendfile(r4, r3, 0x0, 0x3ffff)
sendfile(r4, r3, 0x0, 0x7bfff000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000100)={0x0, 'team_slave_0\x00'}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1b)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000010140)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
read$eventfd(r7, &(0x7f0000000080), 0x8)
flistxattr(r6, &(0x7f0000000440)=""/116, 0x74)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380))
r8 = syz_clone3(&(0x7f0000000780)={0x4000200, &(0x7f0000000500)=<r9=>0xffffffffffffffff, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x58)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800)={<r10=>0x0}, &(0x7f0000000840)=0xc)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x638, 0x478, 0x478, 0x360, 0x568, 0x0, 0x568, 0x568, 0x568, 0x568, 0x568, 0x6, &(0x7f0000000580), {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, [0xffffffff, 0xff, 0x0, 0xff000000], [0x0, 0xffffffff, 0xff, 0xff000000], 'veth1_to_bond\x00', 'syzkaller0\x00', {}, {0xff}, 0x2c, 0x5, 0x1, 0x73}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x4}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @empty, [0x0, 0xff, 0xff, 0xffffffff], [0xffffffff, 0x0, 0xff000000, 0xff], 'veth1\x00', 'ipvlan1\x00', {0xff}, {}, 0x4, 0x5, 0x1, 0x8}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x18, 0x19, 0x5}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x2, 0x7], 0x8caa, 0x38, 0x1}}, @common=@mh={{0x28}, {"8e91"}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x5, 0x8}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x39}, @loopback, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'veth1_to_team\x00', 'pimreg0\x00', {0xff}, {}, 0x2e, 0x7, 0x1, 0x29}, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d6], 0x5, 0x3, 0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x8, 0x0, @ipv6=@local, 0x4e21}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0xff000000, 0xffffffff, 0x0, 0xffffffff], [0xff000000, 0xffffffff, 0xffffff00, 0xffffff00], 'dvmrp1\x00', 'syz_tun\x00', {0xff}, {}, 0x32, 0xa, 0x6, 0x29}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast2, @ipv4=@broadcast, 0x27, 0x18, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x698)
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000880)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x1c3, 0x384d}, 0x9, 0x8000, 0x4, 0xfff, r8, r10, 0x6})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r9, @ANYRES32, @ANYRESDEC=r1], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x18)

14.02911126s ago: executing program 2 (id=232):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000640)=ANY=[@ANYRES8=r1, @ANYRES8=r0, @ANYRES8=r2, @ANYRESOCT=r1], &(0x7f00000002c0)='syzkaller\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r3}, 0x10)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000040), 0x1, 0x7ba, &(0x7f00000007c0)="$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")
chdir(&(0x7f0000000100)='./file0\x00')
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000001a0000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r8, 0x20, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/4096, 0x1000}}, 0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r9, 0x8}, 0x8)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r10}, &(0x7f0000000600), &(0x7f00000005c0)}, 0x20)
r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x1})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r11, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x1, 0x1, 0x0, 0x0, 0xa}})
getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000000)={r9, 0x2, 0x10, 0x5f42, 0x1, 0x9}, &(0x7f0000000140)=0x14)
link(&(0x7f0000000440)='./file0\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0xf}, 0x7, 0x42, &(0x7f0000000500)="d2259d28833f1f92f50e0d7b360a74f81e93aca339b7ea409d25da6f215890d36b50ff0f095a410c7e74e2af7fc9f3ed0bad71b9cb6e57ab50d2ae15442935015116629d25649fa88ece7ae9c618befc866e51b5d717df780283c706a2aac173e1be8d93f49c20086513cbd95df76c287b3aa55f2d75a01b345c9470d89491c1abf8cdde51f2c50814eccee3644eb9", 0x8f, 0x3, 0x4, 0x1, 0x8, 0x1, &(0x7f00000003c0)="b2225af517c6349730da7dd4cb24aaaadb5018e8f12e52d1cf8505d322a64be6dde87b55cf2915d9d652e1e240c602e7147deeec823a153cf8fa0db4ee28aa7aa63fbe0c4e47a320a8f7af641746f35c6e1fb587477943744aff2b991bfee235a9ed783d8a98796c62"})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f00000019c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000a7e2d22d60cf0f7ae6daf7dbdf64c9c20ac13a4a8de8cf41da19dd353490ccc181cfdafd163fb93108ef73ee1609b3563e4b7e24d827eba1546fe8a1993ec73a72ff142453159b6c93d0bbabc441be5b0b217d676e31aa8a1fbe2d2298e36bd57ee366d910c5bf05d5fde26ec0d01bf733217b893000f5903652971e872d82fd4ba7", @ANYRES32=r1, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@volatile={0x7, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x61, 0x0, 0x0, 0x30, 0x0]}}, &(0x7f0000000280)=""/230, 0x2b, 0xe6, 0x1, 0x9, 0x0, @void, @value}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x80, '\x00', 0x0, 0x0, r12, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

13.792090564s ago: executing program 2 (id=236):
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140))
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073119a00000000008510000002000000b7000000000000009500c200000000009500"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
fcntl$lock(r0, 0x7, &(0x7f0000000400)={0x1, 0x1, 0x14, 0x3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0), 0x0, 0xfffffffd)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x4, 0x0, {0xa, 0x0, 0xfffffffd, @mcast1}}}, 0x32)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000000), &(0x7f0000000040)=r6}, 0x20)
creat(&(0x7f0000000040)='./bus\x00', 0x8)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
read$hiddev(r7, &(0x7f00000000c0)=""/4092, 0xffc)
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,')

13.791442724s ago: executing program 32 (id=236):
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140))
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073119a00000000008510000002000000b7000000000000009500c200000000009500"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
fcntl$lock(r0, 0x7, &(0x7f0000000400)={0x1, 0x1, 0x14, 0x3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0), 0x0, 0xfffffffd)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x4, 0x0, {0xa, 0x0, 0xfffffffd, @mcast1}}}, 0x32)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000000), &(0x7f0000000040)=r6}, 0x20)
creat(&(0x7f0000000040)='./bus\x00', 0x8)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
read$hiddev(r7, &(0x7f00000000c0)=""/4092, 0xffc)
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,')

5.427899759s ago: executing program 5 (id=377):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x8, 0x0, 0x0, 0x1, 0x9, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x11, 0x2, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="1100"/12, @ANYRES32, @ANYBLOB='D'], 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0xfff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe74)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
write$binfmt_misc(r3, &(0x7f0000000540)="7dd78a3612299240bd22b26ed47be48c0d09917ee10fa3c830ec2a640c08595973dbb66fb0fd15bc1a3343707d795b94b6021993322ae09ea2aca58c316362efdf2422a0f5678328e0aac8fcb9e336a6e1eb9b43a14c2aef76c313f03bfe9810a3bb964f0eb53c6fb4d38aff715a7b1679", 0x71)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x9, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
futimesat(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x3}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYRESHEX=r5], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='sched_kthread_work_execute_start\x00', r2}, 0x18)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18)
pipe2$9p(&(0x7f0000000140), 0x800)
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xc}, 0x1100, 0x5dd8, 0x3, 0x5, 0x0, 0x9, 0xfffb}, 0x0, 0x1, 0xffffffffffffffff, 0x8)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000000)=0x677, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000700)="e4a601e2c794f73d35acedf6c374babbf5cb2e2c061d7f794bec0086411471cd0d03010c000000282ffce6a3396d13d1a664b1ded217e35934f1bc4d5c99", 0x3e}], 0x1)

4.565883232s ago: executing program 5 (id=394):
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x804)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000480), 0xffcb)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8f7ffffb702000008000000b703000000000000a5000000eeffffff95"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x10)
stat(0x0, 0x0)
r5 = socket$igmp(0x2, 0x3, 0x2)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0x0, r4, 0x0, 0x7, &(0x7f00000003c0)='cgroup\x00', <r7=>0x0}, 0xfffffffffffffff6)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0)
openat2(0xffffffffffffffff, &(0x7f0000000300)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000380)={0x20000}, 0x18)
write$cgroup_subtree(r9, &(0x7f0000000400)=ANY=[@ANYRESHEX=r7, @ANYRES64=r5], 0xfffffffffffffccf)
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000033000000000000000000860090780000000000000000000000000000ee3f000000002b"], 0xfdef)
socket$netlink(0x10, 0x3, 0x0)
r11 = io_uring_setup(0x716, &(0x7f0000000080)={0x0, 0x2a309, 0x1000})
io_uring_register$IORING_REGISTER_BUFFERS(r11, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)

4.350302105s ago: executing program 5 (id=399):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
r1 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24)
sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r4, 0x800448d4, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0x3}, 0x18)
r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)

4.286124976s ago: executing program 5 (id=402):
r0 = syz_open_procfs(0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
fcntl$notify(r2, 0x402, 0x14)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x800000, 0x8, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$eJzs3MFqE18Ux/Hzb/pv0pQ2EURQUA+60c3QxgfQIC2IAaU2RV0IUzvRkDEpM0MlIjYbcetzFJfuBPUFuhE37t0VQXDThTjiTKZN2rSmbdLE9PuBck9y7o+5bdNyUuis3339pFRwjYLpyVBCZUikJhsi6T9V3X/1dSioR6RRTS6P/fhy9s69+zezudz0rOpMdu5KRlUnzr9/+vzNhY/e2PzbiXdxWUs/WP+e+bp2au30+q+5x0VXi66WK56aulCpeOaCbeli0S0Zqrdty3QtLZZdy2nqF+zK0lJVzfLieHLJsVxXzXJVS1ZVvYp6TlXNR2axrIZh6HhSjrfhNvbkV2dnzeyubT/W0ROh60ZbPek42VrrZn71CM4EAAD6zN7zfzjr7z7/5+bDtcPzvwjzf5fUmh79Zf7HQHCcrJms//w2Y/4HAAAAAAAAAAAAAAAAAAAAAOBfsOH7Kd/3U9EafcRFJCEi0eNenxPdccDv/9UeHRcd1vCPewkR+9VyfjkfrmE/W5Ci2GLJpKTkZ/B6qAvrmRu56UkNpOWDvVLPryznYxKP8pF0q/y5E1NhXpvz/0uy8foZScnJ1tfPtMyPyKWLDXlDUvLpoVTElsXgdb2VfzGlev1Wblt+NNgHAAAAAMAgMHTTjvfvQT/YkJCd/TC/j78PbHt/PSxn2rlFJQAAAAAAODS3+qxk2rblHKCIi8gh4oNaxKQvjrGtuCYifXCMoyoSIhI+oweJf9uMt5Xy29gzLCI9/7Lso+j1byYAAAAAnbY19O8j9PllF08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDx0+79wKL9O1pRY494w+ViR/4JAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH3kdwAAAP//R8IgDA==")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r4, &(0x7f0000004200)='t', 0x1)
sendfile(r4, r3, 0x0, 0x3ffff)
sendfile(r4, r3, 0x0, 0x7bfff000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000100)={0x0, 'team_slave_0\x00'}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1b)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000010140)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
read$eventfd(r7, &(0x7f0000000080), 0x8)
flistxattr(r6, &(0x7f0000000440)=""/116, 0x74)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380))
r8 = syz_clone3(&(0x7f0000000780)={0x4000200, &(0x7f0000000500)=<r9=>0xffffffffffffffff, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x58)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800)={<r10=>0x0}, &(0x7f0000000840)=0xc)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x638, 0x478, 0x478, 0x360, 0x568, 0x0, 0x568, 0x568, 0x568, 0x568, 0x568, 0x6, &(0x7f0000000580), {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, [0xffffffff, 0xff, 0x0, 0xff000000], [0x0, 0xffffffff, 0xff, 0xff000000], 'veth1_to_bond\x00', 'syzkaller0\x00', {}, {0xff}, 0x2c, 0x5, 0x1, 0x73}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x4}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @empty, [0x0, 0xff, 0xff, 0xffffffff], [0xffffffff, 0x0, 0xff000000, 0xff], 'veth1\x00', 'ipvlan1\x00', {0xff}, {}, 0x4, 0x5, 0x1, 0x8}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x18, 0x19, 0x5}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x2, 0x7], 0x8caa, 0x38, 0x1}}, @common=@mh={{0x28}, {"8e91"}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x5, 0x8}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x39}, @loopback, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'veth1_to_team\x00', 'pimreg0\x00', {0xff}, {}, 0x2e, 0x7, 0x1, 0x29}, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d6], 0x5, 0x3, 0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x8, 0x0, @ipv6=@local, 0x4e21}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0xff000000, 0xffffffff, 0x0, 0xffffffff], [0xff000000, 0xffffffff, 0xffffff00, 0xffffff00], 'dvmrp1\x00', 'syz_tun\x00', {0xff}, {}, 0x32, 0xa, 0x6, 0x29}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast2, @ipv4=@broadcast, 0x27, 0x18, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x698)
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000880)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x1c3, 0x384d}, 0x9, 0x8000, 0x4, 0xfff, r8, r10, 0x6})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r9, @ANYRES32, @ANYRESDEC=r1], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94)

4.090657049s ago: executing program 5 (id=404):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r3}, 0x18)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r7 = dup(r6)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, 0x0)
write$P9_RLERRORu(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7])
readahead(0xffffffffffffffff, 0x0, 0x101)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r9}, 0x18)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59e", 0x29, 0x0)
connect$qrtr(0xffffffffffffffff, 0x0, 0x0)
r10 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000200))
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000"], 0x48)

3.728032964s ago: executing program 5 (id=410):
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x804)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000480), 0xffcb)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8f7ffffb702000008000000b703000000000000a5000000eeffffff95"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x10)
stat(0x0, 0x0)
r5 = socket$igmp(0x2, 0x3, 0x2)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0x0, r4, 0x0, 0x7, &(0x7f00000003c0)='cgroup\x00', <r7=>0x0}, 0xfffffffffffffff6)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0)
openat2(0xffffffffffffffff, &(0x7f0000000300)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000380)={0x20000}, 0x18)
write$cgroup_subtree(r9, &(0x7f0000000400)=ANY=[@ANYRESHEX=r7, @ANYRES64=r5], 0xfffffffffffffccf)
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000033000000000000000000860090780000000000000000000000000000ee3f000000002b"], 0xfdef)
socket$netlink(0x10, 0x3, 0x0)
r11 = io_uring_setup(0x716, &(0x7f0000000080)={0x0, 0x2a309, 0x1000})
io_uring_register$IORING_REGISTER_BUFFERS(r11, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)

3.726909264s ago: executing program 33 (id=410):
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x804)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000480), 0xffcb)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8f7ffffb702000008000000b703000000000000a5000000eeffffff95"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x10)
stat(0x0, 0x0)
r5 = socket$igmp(0x2, 0x3, 0x2)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0x0, r4, 0x0, 0x7, &(0x7f00000003c0)='cgroup\x00', <r7=>0x0}, 0xfffffffffffffff6)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0)
openat2(0xffffffffffffffff, &(0x7f0000000300)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000380)={0x20000}, 0x18)
write$cgroup_subtree(r9, &(0x7f0000000400)=ANY=[@ANYRESHEX=r7, @ANYRES64=r5], 0xfffffffffffffccf)
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000033000000000000000000860090780000000000000000000000000000ee3f000000002b"], 0xfdef)
socket$netlink(0x10, 0x3, 0x0)
r11 = io_uring_setup(0x716, &(0x7f0000000080)={0x0, 0x2a309, 0x1000})
io_uring_register$IORING_REGISTER_BUFFERS(r11, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)

2.492344963s ago: executing program 4 (id=422):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
r1 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24)
sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r4, 0x800448d4, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0x3}, 0x18)
r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)

2.420047584s ago: executing program 4 (id=424):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000380)={<r2=>0x0, 0x1, 0x81, 0x7, 0x9, 0x7, 0x3, 0x8e16, {0x0, @in6={{0xa, 0x4e21, 0x9, @loopback, 0x2}}, 0x8, 0x295, 0x9, 0x3ddf0e9c, 0x2}}, &(0x7f00000000c0)=0xb0)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000540)={r2, @in6={{0xa, 0x4e21, 0xf02c, @private2, 0x8}}}, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

2.380701165s ago: executing program 4 (id=425):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f4, &(0x7f0000000900)="$eJzs3M9PE1sUwPHTn7QlUBYv7+W95IUb3ehmAtW10hhIjE0kSI0/EpMBptp0bEmnwdQY0ZVb4x/hgrBkR6L8A2zc6caNOzYmLmRhrOn8oKVMKYVKEb6fhMxhzj3tvZ2SnNt02Lrz+nEhZ2k5vSLBmJKAiMi2yIgExRNwj0E7jkqzF3Jx8NvH/2/dvXcjnclMzig1lZ69lFJKDY++e/Is7g5bH5DNkQdbX1NfNv/e/Hfr5+yjvKXyliqWKkpXc6XPFX3ONNRC3ipoSk2bhm4ZKl+0jLKTLzn5nFlaXKwqvbgwlFgsG5al9GJVFYyqqpRUpVxVoYd6vqg0TVNDCUEn2ZWZGT19yOL5Hk8Gv0m5nNZDIhLfk8mu9GVCAACgr1r7/6CoXvb/q+c2KoO314bd/n896tf/X/7kPNau/j8mIr79v/f8vv2/3l3/v7cjOluO1P/jZBiN7jkVaIT1ZDmtJ9y/X9vL+6tjdkD/DwAAAAAAAAAAAAAAAAAAAADAn2C7VkvWarWkd/R+6rmYiDT/3iIkIlePf8bopXbXf6Dz9ccp0LhxLzwsYr5ayi5lnaM7YENETDFkTJLyw34/uOqxd+eRqhuR9+ayW7+8lA3ZmXRO8nb9uCQj0lpfq01dz0yOK8fu+ogkmutTkpS//OtTvvVRuXC+qV6TpHyYl5KYsmDPo1H/fFypazczLfVxexwAAAAAAKeBpnb47t81rV3eqd/ZX7d+PhBq7K/HfPfnYfkv3N+1AwAAAABwVljVpwXdNI3yPkFcOo9xgsgBxrQG4W4GdxF4Kzxolfddhh5P42CB9+S7UjH3ZM9flkAXL0ubICiHqRqtr0YddRXex0btxsj0xPFfQTv4583b7717wCtrsQ4rPXwQ2v8NEHG//gUAAADgFGk0/d6Zif5OCAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAM+g4/jtav9cIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnBS/AgAA//9p2gTn")
r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x40047211, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4)
bind$xdp(r2, &(0x7f00000002c0)={0x2c, 0x4, r5}, 0x10)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x1b)
readv(r7, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/152, 0x98}], 0x1)
fcntl$setlease(r6, 0x400, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100c93a, @void, @value}, 0xfffffcbc)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r8 = semget$private(0x0, 0x20000000102, 0x200)
semop(r8, &(0x7f0000000240)=[{0x3, 0x0, 0x1800}, {0x0, 0xe65b}], 0x2)
semctl$SETALL(r8, 0x0, 0x11, &(0x7f0000000040))
semtimedop(r8, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00'}, 0x10)

2.167839308s ago: executing program 1 (id=427):
mq_open(&(0x7f0000000100)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\x03q\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x91:\x0f\xef\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00q`\x1a_\xcd\x8ck+\x05\x11}*\xf5\r\a\x14\x97B>\x9d\xe6\x81\xf9\xcbE\xa1\xc3\xda\xb6\xfe\rh\xd5\xe3\x9d\x85\xe0;\x90W\xa4\xc1\x1eb;\xa5\x12\xc5\x936k\x18=\xe08\x17\xfc\xf1\xee\xd5\xa7\xab\xd3\x05a\x15?c\xa3\xa8\xd3$\xe8`$\x16\xb4\xd8K\x1bR4s\xab\xedM\xa1\xd4I\x91\x01', 0x6e93ebbbcc0884f2, 0x2c, 0x0)
syz_io_uring_setup(0x239, 0x0, 0x0, 0x0)
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x82, 0x3}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x100000000000000, 0x80, 0x0, 0x108)
bind$tipc(r0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
epoll_create1(0x0)

2.145335558s ago: executing program 6 (id=411):
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0xf}]}}]}, 0x38}}, 0x0)

2.142044498s ago: executing program 1 (id=428):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x8, 0x0, 0x0, 0x1, 0x9, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x11, 0x2, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="1100"/12, @ANYRES32, @ANYBLOB='D'], 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0xfff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe74)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
write$binfmt_misc(r3, &(0x7f0000000540)="7dd78a3612299240bd22b26ed47be48c0d09917ee10fa3c830ec2a640c08595973dbb66fb0fd15bc1a3343707d795b94b6021993322ae09ea2aca58c316362efdf2422a0f5678328e0aac8fcb9e336a6e1eb9b43a14c2aef76c313f03bfe9810a3bb964f0eb53c6fb4d38aff715a7b1679", 0x71)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x9, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
futimesat(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x3}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYRESHEX=r5], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='sched_kthread_work_execute_start\x00', r2}, 0x18)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18)
pipe2$9p(&(0x7f0000000140), 0x800)
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xc}, 0x1100, 0x5dd8, 0x3, 0x5, 0x0, 0x9, 0xfffb}, 0x0, 0x1, 0xffffffffffffffff, 0x8)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000000)=0x677, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000700)="e4a601e2c794f73d35acedf6c374babbf5cb2e2c061d7f794bec0086411471cd0d03010c000000282ffce6a3396d13d1a664b1ded217e35934f1bc4d5c99", 0x3e}], 0x1)

2.120876799s ago: executing program 0 (id=429):
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0xf0, 0x3)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20008050)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x3}, 0x18)
recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0)

2.096743029s ago: executing program 6 (id=430):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r3}, 0x18)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r7 = dup(r6)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, 0x0)
write$P9_RLERRORu(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7])
readahead(0xffffffffffffffff, 0x0, 0x101)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r9}, 0x18)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59e", 0x29, 0x0)
connect$qrtr(0xffffffffffffffff, 0x0, 0x0)
r10 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000200))
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000"], 0x48)

2.053712469s ago: executing program 6 (id=431):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x20228, 0xffffffffffffffff, 0x4000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[], &(0x7f00000004c0)=""/181, 0x7a, 0xb5, 0x0, 0x1, 0x0, @void, @value}, 0x28)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="b60f000000a1a86edf34", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="00000000000000000200"/28], 0x50)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x5}, 0x10)
close(r3)
connect$pptp(r3, &(0x7f0000000180)={0x18, 0x2, {0x3, @empty}}, 0x1e)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r4}, 0x10)
setfsgid(0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r6)
sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000fbdbdf25070000000a0004007770616e3400000008000500020000000c0017000203aaaaaaaaaaaa080001000000000050e6cc6295f3dd6f2c31b5a9570fa23a227546b6d4f063656fd39b04e2c04602341d2a1566f66a0d701a8021405a9f54050aeac782d3867acf721ca8"], 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x300048c0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
setpriority(0x3, 0x0, 0xfffffffd)
msync(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x1)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x80800)
write$P9_RRENAMEAT(r8, &(0x7f0000000580)={0x7, 0x4b, 0x1}, 0x7)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r9}, 0x18)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003"], 0x58}}, 0x0)
ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

1.812848153s ago: executing program 6 (id=432):
r0 = syz_open_procfs(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x14)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x800000, 0x8, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r3, &(0x7f0000004200)='t', 0x1)
sendfile(r3, r2, 0x0, 0x3ffff)
sendfile(r3, r2, 0x0, 0x7bfff000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000100)={0x0, 'team_slave_0\x00'}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1b)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000010140)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
read$eventfd(r6, &(0x7f0000000080), 0x8)
flistxattr(r5, &(0x7f0000000440)=""/116, 0x74)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380))
r7 = syz_clone3(&(0x7f0000000780)={0x4000200, &(0x7f0000000500), 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x58)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800)={<r8=>0x0}, &(0x7f0000000840)=0xc)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x638, 0x478, 0x478, 0x360, 0x568, 0x0, 0x568, 0x568, 0x568, 0x568, 0x568, 0x6, &(0x7f0000000580), {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, [0xffffffff, 0xff, 0x0, 0xff000000], [0x0, 0xffffffff, 0xff, 0xff000000], 'veth1_to_bond\x00', 'syzkaller0\x00', {}, {0xff}, 0x2c, 0x5, 0x1, 0x73}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x4}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @empty, [0x0, 0xff, 0xff, 0xffffffff], [0xffffffff, 0x0, 0xff000000, 0xff], 'veth1\x00', 'ipvlan1\x00', {0xff}, {}, 0x4, 0x5, 0x1, 0x8}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x18, 0x19, 0x5}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x2, 0x7], 0x8caa, 0x38, 0x1}}, @common=@mh={{0x28}, {"8e91"}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x5, 0x8}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x39}, @loopback, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'veth1_to_team\x00', 'pimreg0\x00', {0xff}, {}, 0x2e, 0x7, 0x1, 0x29}, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d6], 0x5, 0x3, 0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x8, 0x0, @ipv6=@local, 0x4e21}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0xff000000, 0xffffffff, 0x0, 0xffffffff], [0xff000000, 0xffffffff, 0xffffff00, 0xffffff00], 'dvmrp1\x00', 'syz_tun\x00', {0xff}, {}, 0x32, 0xa, 0x6, 0x29}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast2, @ipv4=@broadcast, 0x27, 0x18, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x698)
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000880)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x1c3, 0x384d}, 0x9, 0x8000, 0x4, 0xfff, r7, r8, 0x6})
bpf$PROG_LOAD(0x5, 0x0, 0x0)

1.513325197s ago: executing program 4 (id=435):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002"], 0x118}}, 0x0)

1.512481297s ago: executing program 3 (id=436):
mq_open(&(0x7f0000000100)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\x03q\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x91:\x0f\xef\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00q`\x1a_\xcd\x8ck+\x05\x11}*\xf5\r\a\x14\x97B>\x9d\xe6\x81\xf9\xcbE\xa1\xc3\xda\xb6\xfe\rh\xd5\xe3\x9d\x85\xe0;\x90W\xa4\xc1\x1eb;\xa5\x12\xc5\x936k\x18=\xe08\x17\xfc\xf1\xee\xd5\xa7\xab\xd3\x05a\x15?c\xa3\xa8\xd3$\xe8`$\x16\xb4\xd8K\x1bR4s\xab\xedM\xa1\xd4I\x91\x01', 0x6e93ebbbcc0884f2, 0x2c, 0x0)
syz_io_uring_setup(0x239, 0x0, 0x0, 0x0)
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x82, 0x3}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$inet(0x2, 0x2000000080002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x100000000000000, 0x80, 0x0, 0x108)
bind$tipc(r0, 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x8c01, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r3, &(0x7f0000000c40)={0x8000203d})
epoll_pwait(r5, &(0x7f0000000140)=[{}], 0x1, 0x80000001, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004001}, 0x0)
rmdir(&(0x7f0000000000)='./file0\x00')

1.261127441s ago: executing program 0 (id=437):
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140))
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073119a00000000008510000002000000b7000000000000009500c200000000009500"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
fcntl$lock(r0, 0x7, &(0x7f0000000400)={0x1, 0x1, 0x14, 0x3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0), 0x0, 0xfffffffd)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0)

1.231055952s ago: executing program 0 (id=438):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000e0b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x8000000000000000}, 0x18)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='sys_enter\x00', r3}, 0x10)
shmctl$IPC_RMID(0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syz_tun\x00', <r5=>0x0})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000007a000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r6, r5}, 0x40)
syz_emit_ethernet(0xfdef, &(0x7f0000000380)=ANY=[], 0x0)

1.204939822s ago: executing program 0 (id=439):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x61680, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = dup(r0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcffdfff6d00000600000001", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)

1.189904562s ago: executing program 1 (id=440):
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=<r1=>0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x804)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000480), 0xffcb)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYRES64=r0, @ANYRES16=r2, @ANYRES32=r1, @ANYBLOB="48b76a72f8e072735e06cc3905a1046bfb7499caf66cd422ee7a59ad755b57c27e3c948f3f3ed141fe47261a5d55e8e122a7375f7395109ca34b49d11299bc804984319ce42a872775eee2d74627c3cab8d9464f518238ca53b884ce31418c57998b51699c6311c576fdc33969ecf328fd57c2f84db195044444481a36aa5c71738e8c5e92f489a2cd3b352073b78b2125ad872e62fac5e23f545504d289a9a71febe758885f9befc89133e6d19f5da424ad6b0f93ccbfc8cff338fbc81509", @ANYRES8=r2], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8f7ffffb702000008000000b703000000000000a5000000eeffffff95"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
stat(0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r4, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0)
openat2(0xffffffffffffffff, &(0x7f0000000300)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000380)={0x20000}, 0x18)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
socket$netlink(0x10, 0x3, 0x0)
r6 = io_uring_setup(0x716, &(0x7f0000000080)={0x0, 0x2a309, 0x1000})
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

936.636426ms ago: executing program 6 (id=441):
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff15661aaa50e7369dfbac141416e000004062079f4b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$sock(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000100007f00008000000000000000ffff0000100000160000000045e5ab611bd55cf24a21c9"], 0x48)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r3, &(0x7f0000000180)='./bus\x00', 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000380)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x166)
mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0)
mount$bind(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x20000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000140)='\x00', 0x89901)
unlinkat(r3, 0x0, 0x200)
ioctl$RTC_VL_CLR(r3, 0x7014)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000e00)=ANY=[@ANYRESDEC=r1, @ANYRESDEC=r0, @ANYRESDEC=r1, @ANYRESOCT], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x2}, 0x18)
syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000740)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c6e6f646f74732c74696d655f6f66667365743d3078303030303030303030303030303664382c646f74732c646f74732c6e6f646f74732c6e6f646f7473732c646f74632c6e6f646f74732c646f74732c646f74732c646973636172642c646f74732c73686f77657865632c6e6f646f74732c646f74732c6e6f646f74732c646f74732c00240c88de60ce773898288e87dab81b83c62bc14335093e8354f077de0020"], 0xfd, 0x1f9, &(0x7f0000000540)="$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")
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200001b, 0x4008032, 0xffffffffffffffff, 0xd069000)
mmap(&(0x7f000079d000/0x4000)=nil, 0x4000, 0x200000b, 0x4008032, 0xffffffffffffffff, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000100)={0x97, 0xb3fa, 0xff25, 0x6, 0x74, 0x22, 0x2}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

920.486256ms ago: executing program 1 (id=442):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x20228, 0xffffffffffffffff, 0x4000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[], &(0x7f00000004c0)=""/181, 0x7a, 0xb5, 0x0, 0x1, 0x0, @void, @value}, 0x28)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="b60f000000a1a86edf34", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="00000000000000000200"/28], 0x50)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x5}, 0x10)
close(r3)
connect$pptp(r3, &(0x7f0000000180)={0x18, 0x2, {0x3, @empty}}, 0x1e)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r4}, 0x10)
setfsgid(0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r6)
sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000fbdbdf25070000000a0004007770616e3400000008000500020000000c0017000203aaaaaaaaaaaa080001000000000050e6cc6295f3dd6f2c31b5a9570fa23a227546b6d4f063656fd39b04e2c04602341d2a1566f66a0d701a8021405a9f54050aeac782d3867acf721ca8"], 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x300048c0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
setpriority(0x3, 0x0, 0xfffffffd)
msync(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x1)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x80800)
write$P9_RRENAMEAT(r8, &(0x7f0000000580)={0x7, 0x4b, 0x1}, 0x7)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r9}, 0x18)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003"], 0x58}}, 0x0)
ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

896.416227ms ago: executing program 0 (id=443):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = accept(r0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x300, 0x0, 0xc000}, 0x10)
recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f00000029c0)=[{{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000900)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000480)}, {&(0x7f00000001c0)="68691a05b5f13252c8de4e955a03441384de9fcc", 0x14}, {&(0x7f0000000780)="f7501438d6fa3a1c61e02eb243b0885ca146eb67fc588c2e45e766906ca4da91cb9e1643ba019faa5f2ad729bde9b8634ab6768b50695565aea905980af047f7230ee8ce0f5614bc5323cd36afe01cd182c774b0302384a4c64dbbb1337ee75a8062c7516f95cc4ccaa4c8a87df156bff0916e3bcf25cc", 0x77}, {&(0x7f0000000800)="faaa5fd5d49bfb794ece3d5e9e5196282a9f6f97d9d54848a508caabcc4348e93202b9160d23cab56a7f01bef808136c8b95d77ee9aebed5fdc001069e91f6aff0826041ac11505bce38b9533c429512b4fbadd56deba8dbe9a0ae057c679823c52e2fc8f6c086f248a5fe987488c025853aa03ce4844ce4d1d33beb5c7270be15dcc33b544b4006404b78cf1bb2e80fc8927d10c7d1d39c", 0x98}], 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000000581f9247cf7d3d95635a0c13a4ecd0633a26b9cfc8a0493cd634d17719acaccae89ec5cafa2c204dd5a23cf6dfd1191bd42d9fa091e38ce273ea35a130bb7c8cef33c2ff5e5699d56635eafe4a0dae99c281a2a118e5c1ba7f3152901f71db22a11f4a12c95f7ee58928c2c3d23909b19cc3c4bf2e07", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001", @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32], 0x48, 0x40}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000a00)="6bf0d4b9bbcad9b1b86a62b8e32873057d6099bc847cb6e138e29a34ea0bbedc50b69e96462cbbe1955bfc6d0b39b96948bbbd264cb4e64f496c94253444bca9ad3d2ac3b779401a225aa6e110b64539be2c92425ab156a924ec74e8820cfb110564489d1dfe39c374b6192831464355c3c11be8661b3362a32ad4065521dd721fae6a0513ab71d7a0ad12c0595ba27c04c0ab942fac469c63084f2f8a805578b2d9b19838152d8f71428a6869a9bc82ffdacb6ba035b9c30f17014565c65e8268184d1c68a9965c0e8a052992b1bb15f84acc30f288cac8d8151e08496feb4c678c21740056157d922ba92d2bfbbe8b2a", 0xf1}, {&(0x7f0000000100)="4a298c0d3e6bab1e99ca3bb005bef99e59411d0c7ea29d858a56cce1a38520ec28f6ed9b9b33560533", 0x29}, {&(0x7f0000000b00)="df47aab77966914451d7f8ec160ee577edecfce8580843124b2807a244f76e286c6cd1283d5e2f56f5f8aab298f6850e2baf0253422bfb8e0cd020347b76a56c6725cd91f97791ff41df613190c4b6593936fb2b0abe41b0a8595e304c8e14d2810edcfd2056a88c06e78dddbdf4906f607c442708186560d60c5b83c16582cd801fba10ca2e1e8d646e877d827b0513fe7f28638fbca9b2d4b14aa85aca37c032286678b424427cebf1ca9ed7a73d9cf905ba52682f7c2218c4af7f49ff58243df296b69a21b225367dcbba01e7b1a3b2ae542ed2ad567bd75b4e26bd397a2fc48ac43c2a0893ba9d47e98625634ce035", 0xf1}], 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRESOCT, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000100"/20, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x90, 0x40001}}, {{&(0x7f0000001180)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002400)=[{&(0x7f0000001200)="870906be7be5edbb", 0x8}, {&(0x7f0000001240)="9fce5cb1885072d05dc162f075dd174f98fc95b4550fd657ca3f4d40986e485c0b24f9d1ee82f140d51dbac7b321747cb6c2853db87a52d4709522916e703aa90737492e08459dd3d4dbafaeb158ed160e43a36f4a9ec193c6c5f3e7175f1d14970f17c89cf16d9f06ae9a7435885b31d70e763f0df0aa59eae689a18a58bdd60459d38823212ce56b70fd407f2b8d339b113bd2e59bb92d84aa0844a68fd4ac7b5255fd234411243bc14645a5341f2add931675b348b2748bcbd953c74fd49296e88a5266e463c9db8b0d9b3f63f3300e2969cb22d2bdf2643a5c3010b4c53fded5511e210acc6b36c6710fed048034a8c28a2126db4ad802167f83b4ad", 0xfe}, {&(0x7f0000002340)}, {&(0x7f00000023c0)}], 0x4, 0x0, 0x0, 0x1}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000003c0)="d6435fc75231ac991094826b3ce5071d002126bfaa169213a30f4e99b7db5885bb6e7a0bc8dae3e7cde02c3a8a6dec800517", 0x32}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x4044}}], 0x4, 0xc004)

751.275679ms ago: executing program 1 (id=444):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000640)=ANY=[@ANYRES8=r1, @ANYRES8=r0, @ANYRES8=r2, @ANYRESOCT=r1], &(0x7f00000002c0)='syzkaller\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r3}, 0x10)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000040), 0x1, 0x7ba, &(0x7f00000007c0)="$eJzs3c9rG9kdAPDvyPKPOGnsQqFNT4ZCawiRa9dNWig0pYdSaCDQnpMIWTGpZStYcoiNIQml0EsPLT0UmkvOTZvecu2Pa3vp39BDScjuOmGz7GHxMtIolm3JcRJLyuLPB8Z+783I733nzbx51gxSAMfWVPojF3EmYjhNTmTlSWQFkY+42Nzu5dZmKV2S2N7++YdJY5sXW5ulaHtN6mSW+VpE/PPXEWdz++utrW8sFSuV8mqWn6kv35yprW+cu7FcXCwvllfOz87Pz1347oXz6dpHp48i1o//s3Hq6e9+8q2/Xvz0V1999Nt/JXExTmXr2uM4KlMxle2T4XQX7vLjo65swJJBN4C3kp6aQ82zPM7ERAwd0JM/7GvLAIBeuRMR2wDAMZO4/gPAMdN6H+DF1maptUTzfs7dgb4x0SfPfhQRY834W/c3m2vyzXt2/x1r3Acdf5E07pG0JBExeQT1T0XE/cdXHqZL9Og+JEAnd+9FxLXJqb3jfzrC7X1m4U19+xDbTO3JG/+gf/6ezn++t3/+F5HLzv+xxs+985/RDufu23j9+Z97sis7fASVtknnfz9oe7btZVv8mcmhLPelxpxvOLl+o1JOx7bTETEdw6NpfvaAOqaff/a827r2+d9Hv//ln9P60987W+Se5Ed3v2ahWC++S8ztnt2L+Hq+U/zJq/5Pusx/Lx+yjp9+/zd/6rYujT+Nt7Xsj7+3th9EfLNj/+88B5Uc+HziTONwmGkdFB387X9/HO9Wf3v/33+c1rRZav0v0A9p/48fHP9k0v68Zu3N6/j3g4l/dFu3O/4rD9P6d8ff+fgfSX7RSI9kZbeL9frqbMRI8rP95XM7r71drOdjbmf7NP7pb3Q+/w86/tNh6FqW3n7Nw4/5px/85e3j7600/oW0/5MsiNf2/5snHr1cGupW/+H6f76Rms5K9o9/+X1/97ANfKedBwAAAAAAAAAAAAAAAAAAAAAAAACHlIuIU5HkCq/SuVyh0PwO76/EeK5SrdXPXq+urSxE47uyJ2M41/qoy4m2z0OdzT4Pv5Wf25P/TkR8OSL+MHqikS+UqpWFQQcPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJmTXb7/P/X/0UG3DgDombFBNwAA6DvXfwA4frpc/0c6F5/oaVsAgP5oXP+T/KCbAQD0kff/AeD4cf0HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgxy5fupQu259sbZbS/MKt9bWl6q1zC+XaUmF5rVQoVVdvFhar1cVKuVCqLnf9Q3ebvyrV6s35WFm7PVMv1+oztfWNq8vVtZX61RvLxcXy1fJw3yIDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMOrrW8stdJLxUqlvJqWSOxL3HkvmnEv66pB7w2J9yIxGhG9qqJ9lDjR93EJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Ivi8wAAAP//rBIcPQ==")
chdir(&(0x7f0000000100)='./file0\x00')
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet_sctp(0x2, 0x5, 0x84)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03000000040000000400"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000001a0000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r7, 0x20, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/4096, 0x1000}}, 0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r9}, &(0x7f0000000600), &(0x7f00000005c0)}, 0x20)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x101000)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000000)={r8, 0x2, 0x10, 0x5f42, 0x1, 0x9}, &(0x7f0000000140)=0x14)
link(&(0x7f0000000440)='./file0\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

671.51261ms ago: executing program 1 (id=445):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f4, &(0x7f0000000900)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x40047211, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4)
bind$xdp(r2, &(0x7f00000002c0)={0x2c, 0x4, r5}, 0x10)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x1b)
readv(r7, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/152, 0x98}], 0x1)
fcntl$setlease(r6, 0x400, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100c93a, @void, @value}, 0xfffffcbc)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r8 = semget$private(0x0, 0x20000000102, 0x200)
semop(r8, &(0x7f0000000240)=[{0x3, 0x0, 0x1800}, {0x0, 0xe65b}], 0x2)
semctl$SETALL(r8, 0x0, 0x11, &(0x7f0000000040))
semtimedop(r8, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00'}, 0x10)

669.88632ms ago: executing program 4 (id=446):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0)

639.43158ms ago: executing program 3 (id=447):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
socket(0x26, 0x4, 0x10)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0x100000001)
setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10)
close(r2)

638.8345ms ago: executing program 4 (id=448):
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0xf0, 0x3)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20008050)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x3}, 0x18)
recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0)

592.261861ms ago: executing program 3 (id=449):
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140))
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073119a00000000008510000002000000b7000000000000009500c200000000009500"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
fcntl$lock(r0, 0x7, &(0x7f0000000400)={0x1, 0x1, 0x14, 0x3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0), 0x0, 0xfffffffd)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00'}, 0x18)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0)

571.747881ms ago: executing program 3 (id=450):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000e0b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x8000000000000000}, 0x18)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='sys_enter\x00', r3}, 0x10)
shmctl$IPC_RMID(0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syz_tun\x00', <r5=>0x0})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000007a000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r6, r5}, 0x40)
syz_emit_ethernet(0xfdef, &(0x7f0000000380)=ANY=[], 0x0)

548.123762ms ago: executing program 3 (id=451):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@abort}]}, 0xff, 0x258, &(0x7f0000000780)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40)
writev(r0, &(0x7f0000000cc0)=[{&(0x7f0000000600)="c7c5", 0x2}], 0x1)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000001c0)={0x97, 0x8000000003ff, 0x4, 0x100})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='xen_mmu_set_p4d\x00', r0, 0x0, 0x101}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50)
r1 = socket$kcm(0xa, 0x5, 0x0)
r2 = socket$kcm(0x2, 0x5, 0x84)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r3}, 0x18)
sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000000580)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x8031)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./mnt\x00'}, 0x18)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5, 0x0, 0x100}, 0x18)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
open_tree(r0, &(0x7f0000000380)='./file1\x00', 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c0012802c0001800a0001006c696d69740000001c0002800c00024000000000000010000c00014000000000000000010c0001800800010064757000080003400000011014"], 0xc8}}, 0x20050800)
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
setsockopt$sock_attach_bpf(r7, 0x84, 0x1e, &(0x7f0000000140)=r3, 0x4)
r8 = socket$kcm(0xa, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r9}, 0x10)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808980200000000000000334d83239d0c2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cae2ed4b4390af9a9ceefd07e002cab5ebfcaad34732181feb215139f15eafddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a58090000000000000094f22cdf550ef091a78098534f0d973058594000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca3905689a1f3db9c24db65c1e0001581d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86c0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8dd4fc7ea0000af3904ea0f3698cd9492794b8212a350d726bff873339c4cad4ead1348474250eda2c8067ab730c1d82a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c3fc74c00000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860e44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cd32941a815e3f3ceafe3065b9594fdcb24ebb6eddb9e87c9ecec7a42c0000abe1c6ea55887dfa18d0aea1b6eca5a883702b0bf3aefcb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3c0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5b0300000026d3c27e7945b29996e5cefbc9f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac2bc3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa1784d927aca9b8540534c5c49a0300cfbc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984ae4e679107a14bbb24851f6199eaf9a1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a55594616020f72f1c55ee3d325c7496a7c2f10cfeae16ae436751227378f0b1ee78bd33c50206700dd90b96a330f92bff736c83ca53e7f02b734d1a9292337e2be3896f7e7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cde00995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb6961c07b47521973cf0bb6f5530f6216b047b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d420e7b2a9e2f87f7b44949fe14c00000000000f47030c09f62d444b4981db81799776eeb4448278de519705fa8b56779bc8cc927b308c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dedc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982ebddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bffc30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c20024032e9b3bba7d6ceca38d3e96db049b92fc32ee34fe7b8419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab61213bf50000000000e1000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba3759fa55249b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be5732f29eed98d5b3688d80f7c66f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bb850f8035040ad9e57abe58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc053e64bfcfd057980136d6e9faca03b24fa300ef90bfe4ad364256937796f941c2fead94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808d409b5e36fc7fdd40080361427b6b9c118e5c9a0a1d5ca24886eb8a78796540635ac3530b9025d8bad0533a7f81b2188ec75a5fc9302e3815bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124bad23e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3018c7d48c4b6c2f6910975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df745ae7a4e446ca16d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf378ca2e577e206a758a3d46e45e7949c5b5069103009693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000b84b11308b6636b735b3c654cbc0000000000000019a4e9a9c2cbc906f97fd6eb00b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea02023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6085100d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac4bf5c06c6398c1b28bdd3f4c2353c330d8457cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a99d747d38ef5042053299b8e95decc637a022a49664742606cfdb2a3258498a6a0a82369d70177433e52b851ac396163ca09e6c22ad796a565cf23d87ae9be7235553aa6b8ab74842d3d4ba738b3fa997f079d225335f2af55644478e514aed8ba202805ad458d9ae6ab8d156f11f3cfe7def690f2bbbb463063664625223d23386540e0db96d8eb1755ad49ae817683de97a6dd32d584391302e65594b12bb2e6630217401031c8a1b964ca32f735421bbf64c9f1f9329e5cfda139ea79619e1d00a9a3ab49993362f30d191aa3387101feaa3e326190804eae2114437f8f4b27480900dd6511844a643886588fbdee7f8863a8dfdd75a9e128c6c15166a5f92d3c2d4952e5d07c59bfce0724a02600094c3369be3024edf451ff76a59855fd90353a0de907834bb77a059c56e92eed2f1415b3d8178453c7aecd8fbd161e2ffd66bcf2be175e45184f06bafd1c1c4fd7006a6c90d8afd126f1c51ee0f724ffbbed25a286c95d17c8b4297f8bba8efd565ecb157f0be244fb9657f737354b20e3a5012abb36052eec7a4fe9bc5b5283581b208d90d28d78f1c5422c3bcad67278e8bb88d7e6ccf72dd61319b44aa617d667000000000000a5edbd3e8605225681090853fc66a20e30fb9938e5886ae748236f5e071278763e070b2b75ce0a9e6870033d25dd19733152b01b507d812216e0f7fc89bbe200806f079e9515dd886a781a46ebe3da4c8307885b535109bb1678d08eeef3717bea30f64282ee844b6d64ec51b1221d175b59c1537089dfa803275ab6dcd40b1fe4e851597c1993a477c225201087b7b0977be62a71927bb01b705267aabe967add451795dfd5114726193415cc3e0784a37db8ab8b97a171bc4ad9593f7c750ad440a26b93d24ee8f080de0f2a16cbd5cd1f370bc1235d88d5cbd25acf91daa392731dab4c9c15015de2fded6332b6ebccf6e1588f3f1a5a3e853587a6843ee1a3f3c270e3ab4462bcff01c70b03e8f8c9d816d7d69e4040155e9f999ce4e366a816c6e7224f41df7eead6d6d214ed98708e1d269f4b469af2e2a2559258439758f4fded2780e736568c7eea209c5ed54a1beaf06013bb4b330d39518528a46d68b277faf926672650cad335ae285aeb0b0130a9c7016580a857722b9c51a5a37a856ccb9b6673f58ebfa66f1db4d041741e104cdd91efa4b3248ebecff3568f31b547b19a939708c3b4b45f46377b4a345248489ddef4bc87426717971de1c0049006d2fb99c311fa91c364749917ee81ea8fd51365449d568eadbad6aead6101b7e6582e793670492d814d58e4a9faa8a4a3027b230e8f5b2349fb3ff3c4365df6bd85aa7f76c388ef94f0155c81b04863624fb4708f83ebf93a51d1438d7761d4b1b929d9aa8faef691676834a2591b75205ede2e4a709c3a9899d06c5cb5a571159402e429c5cf839f49957aed76dc7db43f9fdc754e40d7c662ad7939a09bfdbc31deb0d327895afae1eca61820e09abc2c0ed5ce083aceb89c8e24ad45483d3128f0547869970dc84c8787a06046bf79f28a7678b03baeff239ce600d91a07236e255ff7ea441ff0602bb38d7aaa1c414a94c4e143ea2cca9d14a01bb70ff93057a03288bd71c45b025731765ca5250b162f08be1a29460a53f213bfb88a8e80e4c46dbfa5936894a95d27c4e90c151748f8ee457c29cb7e21deb805a9c5c6abf373a4bad5e1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r10, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r8})

466.167453ms ago: executing program 3 (id=452):
r0 = syz_open_procfs(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x14)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x800000, 0x8, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r3, &(0x7f0000004200)='t', 0x1)
sendfile(r3, r2, 0x0, 0x3ffff)
sendfile(r3, r2, 0x0, 0x7bfff000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000100)={0x0, 'team_slave_0\x00'}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1b)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000010140)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
read$eventfd(r6, &(0x7f0000000080), 0x8)
flistxattr(r5, &(0x7f0000000440)=""/116, 0x74)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380))
r7 = syz_clone3(&(0x7f0000000780)={0x4000200, &(0x7f0000000500), 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x58)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800)={<r8=>0x0}, &(0x7f0000000840)=0xc)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x638, 0x478, 0x478, 0x360, 0x568, 0x0, 0x568, 0x568, 0x568, 0x568, 0x568, 0x6, &(0x7f0000000580), {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, [0xffffffff, 0xff, 0x0, 0xff000000], [0x0, 0xffffffff, 0xff, 0xff000000], 'veth1_to_bond\x00', 'syzkaller0\x00', {}, {0xff}, 0x2c, 0x5, 0x1, 0x73}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x4}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @empty, [0x0, 0xff, 0xff, 0xffffffff], [0xffffffff, 0x0, 0xff000000, 0xff], 'veth1\x00', 'ipvlan1\x00', {0xff}, {}, 0x4, 0x5, 0x1, 0x8}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x18, 0x19, 0x5}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x2, 0x7], 0x8caa, 0x38, 0x1}}, @common=@mh={{0x28}, {"8e91"}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x5, 0x8}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x39}, @loopback, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'veth1_to_team\x00', 'pimreg0\x00', {0xff}, {}, 0x2e, 0x7, 0x1, 0x29}, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d6], 0x5, 0x3, 0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x8, 0x0, @ipv6=@local, 0x4e21}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0xff000000, 0xffffffff, 0x0, 0xffffffff], [0xff000000, 0xffffffff, 0xffffff00, 0xffffff00], 'dvmrp1\x00', 'syz_tun\x00', {0xff}, {}, 0x32, 0xa, 0x6, 0x29}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast2, @ipv4=@broadcast, 0x27, 0x18, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x698)
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000880)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x1c3, 0x384d}, 0x9, 0x8000, 0x4, 0xfff, r7, r8, 0x6})

59.955449ms ago: executing program 6 (id=453):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f4, &(0x7f0000000900)="$eJzs3M9PE1sUwPHTn7QlUBYv7+W95IUb3ehmAtW10hhIjE0kSI0/EpMBptp0bEmnwdQY0ZVb4x/hgrBkR6L8A2zc6caNOzYmLmRhrOn8oKVMKYVKEb6fhMxhzj3tvZ2SnNt02Lrz+nEhZ2k5vSLBmJKAiMi2yIgExRNwj0E7jkqzF3Jx8NvH/2/dvXcjnclMzig1lZ69lFJKDY++e/Is7g5bH5DNkQdbX1NfNv/e/Hfr5+yjvKXyliqWKkpXc6XPFX3ONNRC3ipoSk2bhm4ZKl+0jLKTLzn5nFlaXKwqvbgwlFgsG5al9GJVFYyqqpRUpVxVoYd6vqg0TVNDCUEn2ZWZGT19yOL5Hk8Gv0m5nNZDIhLfk8mu9GVCAACgr1r7/6CoXvb/q+c2KoO314bd/n896tf/X/7kPNau/j8mIr79v/f8vv2/3l3/v7cjOluO1P/jZBiN7jkVaIT1ZDmtJ9y/X9vL+6tjdkD/DwAAAAAAAAAAAAAAAAAAAADAn2C7VkvWarWkd/R+6rmYiDT/3iIkIlePf8bopXbXf6Dz9ccp0LhxLzwsYr5ayi5lnaM7YENETDFkTJLyw34/uOqxd+eRqhuR9+ayW7+8lA3ZmXRO8nb9uCQj0lpfq01dz0yOK8fu+ogkmutTkpS//OtTvvVRuXC+qV6TpHyYl5KYsmDPo1H/fFypazczLfVxexwAAAAAAKeBpnb47t81rV3eqd/ZX7d+PhBq7K/HfPfnYfkv3N+1AwAAAABwVljVpwXdNI3yPkFcOo9xgsgBxrQG4W4GdxF4Kzxolfddhh5P42CB9+S7UjH3ZM9flkAXL0ubICiHqRqtr0YddRXex0btxsj0xPFfQTv4583b7717wCtrsQ4rPXwQ2v8NEHG//gUAAADgFGk0/d6Zif5OCAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAM+g4/jtav9cIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnBS/AgAA//9p2gTn")
r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x40047211, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4)
bind$xdp(r2, &(0x7f00000002c0)={0x2c, 0x4, r5}, 0x10)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x1b)
readv(r7, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/152, 0x98}], 0x1)
fcntl$setlease(r6, 0x400, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100c93a, @void, @value}, 0xfffffcbc)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r8 = semget$private(0x0, 0x20000000102, 0x200)
semop(r8, &(0x7f0000000240)=[{0x3, 0x0, 0x1800}, {0x0, 0xe65b}], 0x2)
semctl$SETALL(r8, 0x0, 0x11, &(0x7f0000000040))
semtimedop(r8, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00'}, 0x10)

0s ago: executing program 0 (id=454):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000640)=ANY=[@ANYRES8=r1, @ANYRES8=r0, @ANYRES8=r2, @ANYRESOCT=r1], &(0x7f00000002c0)='syzkaller\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r3}, 0x10)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000040), 0x1, 0x7ba, &(0x7f00000007c0)="$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")
chdir(&(0x7f0000000100)='./file0\x00')
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000001a0000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r8, 0x20, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/4096, 0x1000}}, 0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r9, 0x8}, 0x8)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r10}, &(0x7f0000000600), &(0x7f00000005c0)}, 0x20)
r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x1})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r11, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x1, 0x1, 0x0, 0x0, 0xa}})
getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000000)={r9, 0x2, 0x10, 0x5f42, 0x1, 0x9}, &(0x7f0000000140)=0x14)
link(&(0x7f0000000440)='./file0\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0xf}, 0x7, 0x42, &(0x7f0000000500)="d2259d28833f1f92f50e0d7b360a74f81e93aca339b7ea409d25da6f215890d36b50ff0f095a410c7e74e2af7fc9f3ed0bad71b9cb6e57ab50d2ae15442935015116629d25649fa88ece7ae9c618befc866e51b5d717df780283c706a2aac173e1be8d93f49c20086513cbd95df76c287b3aa55f2d75a01b345c9470d89491c1abf8cdde51f2c50814eccee3644eb9", 0x8f, 0x3, 0x4, 0x1, 0x8, 0x1, &(0x7f00000003c0)="b2225af517c6349730da7dd4cb24aaaadb5018e8f12e52d1cf8505d322a64be6dde87b55cf2915d9d652e1e240c602e7147deeec823a153cf8fa0db4ee28aa7aa63fbe0c4e47a320a8f7af641746f35c6e1fb587477943744aff2b991bfee235a9ed783d8a98796c62"})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f00000019c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000a7e2d22d60cf0f7ae6daf7dbdf64c9c20ac13a4a8de8cf41da19dd353490ccc181cfdafd163fb93108ef73ee1609b3563e4b7e24d827eba1546fe8a1993ec73a72ff142453159b6c93d0bbabc441be5b0b217d676e31aa8a1fbe2d2298e36bd57ee366d910c5bf05d5fde26ec0d01bf733217b893000f5903652971e872d82fd4ba7", @ANYRES32=r1, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@volatile={0x7, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x61, 0x0, 0x0, 0x30, 0x0]}}, &(0x7f0000000280)=""/230, 0x2b, 0xe6, 0x1, 0x9, 0x0, @void, @value}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0xfffffffffffffff5, 0x0, 0x40f00, 0x80, '\x00', 0x0, 0x0, r12, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.13' (ED25519) to the list of known hosts.
[   32.770226][   T29] audit: type=1400 audit(1749873441.049:62): avc:  denied  { mounton } for  pid=3297 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   32.771430][ T3297] cgroup: Unknown subsys name 'net'
[   32.793267][   T29] audit: type=1400 audit(1749873441.049:63): avc:  denied  { mount } for  pid=3297 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   32.820663][   T29] audit: type=1400 audit(1749873441.079:64): avc:  denied  { unmount } for  pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   33.016659][ T3297] cgroup: Unknown subsys name 'cpuset'
[   33.022943][ T3297] cgroup: Unknown subsys name 'rlimit'
[   33.194648][   T29] audit: type=1400 audit(1749873441.469:65): avc:  denied  { setattr } for  pid=3297 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   33.218234][   T29] audit: type=1400 audit(1749873441.469:66): avc:  denied  { create } for  pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   33.238826][   T29] audit: type=1400 audit(1749873441.469:67): avc:  denied  { write } for  pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   33.259300][   T29] audit: type=1400 audit(1749873441.469:68): avc:  denied  { read } for  pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   33.267801][ T3301] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   33.279851][   T29] audit: type=1400 audit(1749873441.499:69): avc:  denied  { mounton } for  pid=3297 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   33.313007][   T29] audit: type=1400 audit(1749873441.499:70): avc:  denied  { mount } for  pid=3297 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   33.331046][ T3297] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   33.336425][   T29] audit: type=1400 audit(1749873441.569:71): avc:  denied  { relabelto } for  pid=3301 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   35.331802][ T3307] chnl_net:caif_netlink_parms(): no params data found
[   35.362046][ T3311] chnl_net:caif_netlink_parms(): no params data found
[   35.414969][ T3312] chnl_net:caif_netlink_parms(): no params data found
[   35.455934][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.463357][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.470705][ T3307] bridge_slave_0: entered allmulticast mode
[   35.477486][ T3307] bridge_slave_0: entered promiscuous mode
[   35.487279][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.494406][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.501826][ T3307] bridge_slave_1: entered allmulticast mode
[   35.508436][ T3307] bridge_slave_1: entered promiscuous mode
[   35.519477][ T3308] chnl_net:caif_netlink_parms(): no params data found
[   35.553538][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.560781][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.568179][ T3311] bridge_slave_0: entered allmulticast mode
[   35.574870][ T3311] bridge_slave_0: entered promiscuous mode
[   35.583484][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.590710][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.597959][ T3311] bridge_slave_1: entered allmulticast mode
[   35.604503][ T3311] bridge_slave_1: entered promiscuous mode
[   35.623040][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   35.632347][ T3317] chnl_net:caif_netlink_parms(): no params data found
[   35.657516][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   35.673113][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   35.701411][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   35.724317][ T3307] team0: Port device team_slave_0 added
[   35.747670][ T3307] team0: Port device team_slave_1 added
[   35.765491][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.772808][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.780095][ T3312] bridge_slave_0: entered allmulticast mode
[   35.786527][ T3312] bridge_slave_0: entered promiscuous mode
[   35.793194][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.800431][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.807672][ T3312] bridge_slave_1: entered allmulticast mode
[   35.814130][ T3312] bridge_slave_1: entered promiscuous mode
[   35.835609][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.842799][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.850362][ T3308] bridge_slave_0: entered allmulticast mode
[   35.857249][ T3308] bridge_slave_0: entered promiscuous mode
[   35.864319][ T3311] team0: Port device team_slave_0 added
[   35.871170][ T3311] team0: Port device team_slave_1 added
[   35.891998][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0
[   35.899063][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   35.925052][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   35.935946][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.943025][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.950334][ T3317] bridge_slave_0: entered allmulticast mode
[   35.956917][ T3317] bridge_slave_0: entered promiscuous mode
[   35.963798][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.971056][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.978281][ T3308] bridge_slave_1: entered allmulticast mode
[   35.984845][ T3308] bridge_slave_1: entered promiscuous mode
[   35.998450][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.008064][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.015120][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.041170][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.054558][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.061744][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.069154][ T3317] bridge_slave_1: entered allmulticast mode
[   36.075836][ T3317] bridge_slave_1: entered promiscuous mode
[   36.094769][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.124848][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.131975][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.157924][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.169729][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.176742][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.202759][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.214514][ T3312] team0: Port device team_slave_0 added
[   36.226887][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.237326][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.254350][ T3312] team0: Port device team_slave_1 added
[   36.261186][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.271484][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.289757][ T3307] hsr_slave_0: entered promiscuous mode
[   36.295890][ T3307] hsr_slave_1: entered promiscuous mode
[   36.329834][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.336914][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.363028][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.380030][ T3308] team0: Port device team_slave_0 added
[   36.391457][ T3317] team0: Port device team_slave_0 added
[   36.403090][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.410185][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.436381][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.452974][ T3308] team0: Port device team_slave_1 added
[   36.465250][ T3317] team0: Port device team_slave_1 added
[   36.480686][ T3311] hsr_slave_0: entered promiscuous mode
[   36.486908][ T3311] hsr_slave_1: entered promiscuous mode
[   36.492707][ T3311] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   36.500315][ T3311] Cannot create hsr debugfs directory
[   36.531464][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.538488][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.564564][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.575689][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.582665][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.608643][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.619959][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.627148][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.653593][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.675984][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.683016][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.709063][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.736498][ T3312] hsr_slave_0: entered promiscuous mode
[   36.742652][ T3312] hsr_slave_1: entered promiscuous mode
[   36.748829][ T3312] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   36.756471][ T3312] Cannot create hsr debugfs directory
[   36.830738][ T3308] hsr_slave_0: entered promiscuous mode
[   36.836820][ T3308] hsr_slave_1: entered promiscuous mode
[   36.842745][ T3308] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   36.850360][ T3308] Cannot create hsr debugfs directory
[   36.862177][ T3317] hsr_slave_0: entered promiscuous mode
[   36.868428][ T3317] hsr_slave_1: entered promiscuous mode
[   36.874463][ T3317] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   36.882216][ T3317] Cannot create hsr debugfs directory
[   36.957467][ T3307] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   36.981377][ T3307] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   37.003141][ T3307] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   37.014859][ T3307] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   37.078267][ T3311] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   37.094259][ T3311] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   37.111124][ T3311] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   37.120392][ T3311] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   37.147890][ T3312] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   37.162856][ T3312] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   37.172178][ T3312] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   37.181928][ T3312] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   37.211188][ T3317] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   37.229651][ T3317] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   37.239125][ T3317] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   37.256744][ T3317] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   37.290985][ T3308] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   37.301863][ T3308] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   37.311018][ T3308] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   37.320463][ T3308] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   37.346522][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.381185][ T3307] 8021q: adding VLAN 0 to HW filter on device team0
[   37.395722][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.412614][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.420915][  T178] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.428065][  T178] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.450096][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.457271][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.467412][ T3312] 8021q: adding VLAN 0 to HW filter on device team0
[   37.481024][  T178] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.488198][  T178] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.504699][  T178] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.511883][  T178] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.523212][ T3311] 8021q: adding VLAN 0 to HW filter on device team0
[   37.538016][  T178] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.545146][  T178] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.565653][  T178] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.572771][  T178] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.614622][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.644082][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.663110][ T3308] 8021q: adding VLAN 0 to HW filter on device team0
[   37.680906][ T3317] 8021q: adding VLAN 0 to HW filter on device team0
[   37.704907][  T175] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.712120][  T175] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.729942][  T178] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.737197][  T178] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.763696][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.773968][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.781164][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.790707][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.797876][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.815826][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.858665][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.994330][ T3312] veth0_vlan: entered promiscuous mode
[   38.025397][ T3312] veth1_vlan: entered promiscuous mode
[   38.044440][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.057045][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.072481][ T3312] veth0_macvtap: entered promiscuous mode
[   38.094475][ T3312] veth1_macvtap: entered promiscuous mode
[   38.105476][ T3307] veth0_vlan: entered promiscuous mode
[   38.126296][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.136360][ T3307] veth1_vlan: entered promiscuous mode
[   38.154337][ T3311] veth0_vlan: entered promiscuous mode
[   38.169464][ T3311] veth1_vlan: entered promiscuous mode
[   38.182693][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.195184][ T3307] veth0_macvtap: entered promiscuous mode
[   38.206743][ T3312] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.215658][ T3312] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.224384][ T3312] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.233272][ T3312] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.250654][ T3307] veth1_macvtap: entered promiscuous mode
[   38.264875][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.288189][   T29] kauditd_printk_skb: 9 callbacks suppressed
[   38.288203][   T29] audit: type=1400 audit(1749873446.569:81): avc:  denied  { mounton } for  pid=3312 comm="syz-executor" path="/root/syzkaller.EAFW0n/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   38.294221][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.312186][   T29] audit: type=1400 audit(1749873446.569:82): avc:  denied  { mount } for  pid=3312 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   38.335738][ T3307] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.347902][   T29] audit: type=1400 audit(1749873446.569:83): avc:  denied  { mounton } for  pid=3312 comm="syz-executor" path="/root/syzkaller.EAFW0n/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   38.356995][ T3307] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.382746][   T29] audit: type=1400 audit(1749873446.569:84): avc:  denied  { mount } for  pid=3312 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   38.391542][ T3307] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.413254][   T29] audit: type=1400 audit(1749873446.569:85): avc:  denied  { mounton } for  pid=3312 comm="syz-executor" path="/root/syzkaller.EAFW0n/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   38.421922][ T3307] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.448410][   T29] audit: type=1400 audit(1749873446.569:86): avc:  denied  { mounton } for  pid=3312 comm="syz-executor" path="/root/syzkaller.EAFW0n/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   38.477373][ T3311] veth0_macvtap: entered promiscuous mode
[   38.484552][   T29] audit: type=1400 audit(1749873446.569:87): avc:  denied  { unmount } for  pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   38.502388][ T3308] veth0_vlan: entered promiscuous mode
[   38.522547][ T3308] veth1_vlan: entered promiscuous mode
[   38.528433][   T29] audit: type=1400 audit(1749873446.739:88): avc:  denied  { mounton } for  pid=3312 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   38.538917][ T3311] veth1_macvtap: entered promiscuous mode
[   38.551325][   T29] audit: type=1400 audit(1749873446.739:89): avc:  denied  { mount } for  pid=3312 comm="syz-executor" name="/" dev="gadgetfs" ino=4622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   38.593642][ T3312] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   38.595808][ T3317] veth0_vlan: entered promiscuous mode
[   38.635688][   T29] audit: type=1400 audit(1749873446.909:90): avc:  denied  { read write } for  pid=3312 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   38.645306][ T3317] veth1_vlan: entered promiscuous mode
[   38.689001][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.697917][ T3308] veth0_macvtap: entered promiscuous mode
[   38.705384][ T3308] veth1_macvtap: entered promiscuous mode
[   38.735395][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.739900][ T3480] loop2: detected capacity change from 0 to 128
[   38.748508][ T3317] veth0_macvtap: entered promiscuous mode
[   38.752527][ T3480] EXT4-fs: Ignoring removed nobh option
[   38.760612][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.772561][ T3311] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.781379][ T3311] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.790214][ T3311] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.799052][ T3311] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.814864][ T3317] veth1_macvtap: entered promiscuous mode
[   38.814852][ T3480] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   38.815248][ T3480] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   38.824176][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.863088][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.880677][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.891031][ T3308] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.899869][ T3308] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.908776][ T3308] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.917961][ T3308] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.971511][ T3317] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.980673][ T3317] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.989649][ T3317] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.998832][ T3317] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.076606][ T3491] netlink: 'syz.4.5': attribute type 15 has an invalid length.
[   39.090322][    C0] hrtimer: interrupt took 37798 ns
[   39.104340][ T3312] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   39.223081][ T3496] loop0: detected capacity change from 0 to 2048
[   39.318548][ T3496] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.351113][ T3500] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   39.389413][ T3504] bridge0: entered promiscuous mode
[   39.412403][ T3504] macvlan2: entered promiscuous mode
[   39.418326][ T3496] ALSA: seq fatal error: cannot create timer (-19)
[   39.421066][ T3504] bridge0: port 3(macvlan2) entered blocking state
[   39.431703][ T3504] bridge0: port 3(macvlan2) entered disabled state
[   39.434928][ T3496] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   39.441055][ T3504] macvlan2: entered allmulticast mode
[   39.458448][ T3504] bridge0: entered allmulticast mode
[   39.474511][ T3504] macvlan2: left allmulticast mode
[   39.479780][ T3504] bridge0: left allmulticast mode
[   39.492794][ T3504] bridge0: left promiscuous mode
[   39.515121][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.613673][ T3509] Illegal XDP return value 943453437 on prog  (id 12) dev syz_tun, expect packet loss!
[   39.641364][ T3511] loop1: detected capacity change from 0 to 2048
[   39.661151][ T3511] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.791497][ T3511] ALSA: seq fatal error: cannot create timer (-19)
[   39.814281][ T3511] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   39.875156][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.052507][ T3526] netlink: 'syz.4.15': attribute type 39 has an invalid length.
[   40.081431][ T3524] netlink: 96 bytes leftover after parsing attributes in process `syz.1.14'.
[   40.289596][ T3530] loop1: detected capacity change from 0 to 2048
[   40.313645][ T3530] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.353472][ T3530] ALSA: seq fatal error: cannot create timer (-19)
[   40.361564][ T3530] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   40.401345][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.436178][ T3536] loop1: detected capacity change from 0 to 128
[   40.445908][ T3536] EXT4-fs: Ignoring removed nobh option
[   40.452996][ T3500] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   40.480899][ T3536] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   40.497852][ T3536] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   40.610434][ T3544] loop3: detected capacity change from 0 to 512
[   40.619674][ T3308] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   40.632031][ T3544] netlink: 'syz.3.19': attribute type 13 has an invalid length.
[   40.684709][ T3548] loop1: detected capacity change from 0 to 2048
[   40.707593][ T3544] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.715018][ T3544] bridge0: port 1(bridge_slave_0) entered disabled state
[   40.718382][ T3548] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.761362][ T3548] ALSA: seq fatal error: cannot create timer (-19)
[   40.768567][ T3548] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   40.780877][ T3544] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   40.796012][ T3544] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   40.805224][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.848809][ T3544] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   40.858186][ T3544] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   40.867489][ T3544] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   40.876657][ T3544] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   40.907029][ T3554] bridge0: entered promiscuous mode
[   40.917627][ T3554] macvlan2: entered promiscuous mode
[   40.924785][ T3554] bridge0: port 3(macvlan2) entered blocking state
[   40.931588][ T3554] bridge0: port 3(macvlan2) entered disabled state
[   40.939184][ T3554] macvlan2: entered allmulticast mode
[   40.944609][ T3554] bridge0: entered allmulticast mode
[   40.950431][ T3554] macvlan2: left allmulticast mode
[   40.956349][ T3554] bridge0: left allmulticast mode
[   40.962168][ T3554] bridge0: left promiscuous mode
[   41.003089][ T3561] loop1: detected capacity change from 0 to 2048
[   41.024619][ T3561] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.056673][ T3561] ALSA: seq fatal error: cannot create timer (-19)
[   41.063471][ T3565] loop0: detected capacity change from 0 to 2048
[   41.064297][ T3561] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   41.104115][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.104447][ T3565] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.152926][ T3565] ALSA: seq fatal error: cannot create timer (-19)
[   41.160611][ T3565] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   41.188865][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.267853][ T3576] netlink: 96 bytes leftover after parsing attributes in process `syz.4.27'.
[   41.330754][ T3584] netlink: 'syz.0.39': attribute type 39 has an invalid length.
[   41.370355][ T3589] loop4: detected capacity change from 0 to 128
[   41.379531][ T3589] EXT4-fs: Ignoring removed nobh option
[   41.389795][ T3589] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   41.402847][ T3589] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   41.439023][ T3544] syz.3.19 (3544) used greatest stack depth: 10824 bytes left
[   41.504509][ T3311] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   41.545114][ T3600] loop4: detected capacity change from 0 to 2048
[   41.602057][ T3600] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.664572][ T3605] macvlan2: entered promiscuous mode
[   41.670011][ T3605] bridge0: entered promiscuous mode
[   41.689073][ T3605] bridge0: port 3(macvlan2) entered blocking state
[   41.695853][ T3605] bridge0: port 3(macvlan2) entered disabled state
[   41.705337][ T3605] macvlan2: entered allmulticast mode
[   41.710820][ T3605] bridge0: entered allmulticast mode
[   41.718906][ T3600] ALSA: seq fatal error: cannot create timer (-19)
[   41.726380][ T3600] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   41.766189][ T3605] macvlan2: left allmulticast mode
[   41.771557][ T3605] bridge0: left allmulticast mode
[   41.778023][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.787560][ T3605] bridge0: left promiscuous mode
[   41.859556][ T3500] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   41.924075][ T3500] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   41.953406][ T3615] netlink: 'syz.3.38': attribute type 15 has an invalid length.
[   42.012685][ T3500] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   42.056462][ T3500] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   42.078703][ T3620] netlink: 28 bytes leftover after parsing attributes in process `syz.4.41'.
[   42.089345][ T3620] loop8: detected capacity change from 0 to 16384
[   42.092445][ T3500] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   42.111185][ T3622] loop3: detected capacity change from 0 to 2048
[   42.136536][ T3500] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   42.182214][ T3622] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.218856][ T3622] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   42.242217][ T3630] netlink: 3 bytes leftover after parsing attributes in process `syz.4.41'.
[   42.270476][ T3630] 0�X���: renamed from caif0
[   42.277868][ T3630] 0�X���: entered allmulticast mode
[   42.283153][ T3630] A link change request failed with some changes committed already. Interface 
60�X��� may have been left with an inconsistent configuration, please check.
[   42.311794][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.335181][ T3634] loop1: detected capacity change from 0 to 2048
[   42.335731][ T3624] loop8: detected capacity change from 16384 to 0
[   42.360833][    C0] I/O error, dev loop8, sector 12800 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0
[   42.403574][ T3634] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.449753][ T3647] loop3: detected capacity change from 0 to 2048
[   42.454341][ T3649] bridge0: entered promiscuous mode
[   42.461795][ T3649] macvlan2: entered promiscuous mode
[   42.468870][ T3649] bridge0: port 3(macvlan2) entered blocking state
[   42.475473][ T3649] bridge0: port 3(macvlan2) entered disabled state
[   42.487582][ T3649] macvlan2: entered allmulticast mode
[   42.493023][ T3649] bridge0: entered allmulticast mode
[   42.513524][ T3647] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.526269][ T3634] ALSA: seq fatal error: cannot create timer (-19)
[   42.533328][ T3649] macvlan2: left allmulticast mode
[   42.538618][ T3649] bridge0: left allmulticast mode
[   42.546735][ T3634] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   42.586670][ T3649] bridge0: left promiscuous mode
[   42.608351][ T3647] ALSA: seq fatal error: cannot create timer (-19)
[   42.620549][ T3647] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   42.673905][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.694587][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.720300][ T3658] netlink: 'syz.2.51': attribute type 15 has an invalid length.
[   42.810539][ T3668] loop1: detected capacity change from 0 to 2048
[   42.847540][ T3670] loop2: detected capacity change from 0 to 2048
[   42.848361][ T3668] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.874831][ T3666] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.889271][ T3678] loop3: detected capacity change from 0 to 256
[   42.937813][ T3668] ALSA: seq fatal error: cannot create timer (-19)
[   42.946928][ T3670] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.957816][ T3671] netlink: 28 bytes leftover after parsing attributes in process `syz.4.53'.
[   42.971454][ T3685] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[   42.992574][ T3668] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   43.012918][ T3670] ALSA: seq fatal error: cannot create timer (-19)
[   43.030970][ T3670] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   43.141551][ T3666] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.160661][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.171822][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.272468][ T3691] syz_tun: entered allmulticast mode
[   43.283696][ T3691] syz.4.59 uses obsolete (PF_INET,SOCK_PACKET)
[   43.296994][   T29] kauditd_printk_skb: 250 callbacks suppressed
[   43.297010][   T29] audit: type=1326 audit(1749873451.579:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3688 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d57c6e929 code=0x7ffc0000
[   43.334454][   T29] audit: type=1326 audit(1749873451.589:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3688 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d57c6e929 code=0x7ffc0000
[   43.358091][   T29] audit: type=1326 audit(1749873451.589:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3688 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d57c6e929 code=0x7ffc0000
[   43.365152][ T3698] netlink: 28 bytes leftover after parsing attributes in process `syz.1.60'.
[   43.381413][   T29] audit: type=1326 audit(1749873451.589:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3688 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f2d57c6e929 code=0x7ffc0000
[   43.413619][   T29] audit: type=1326 audit(1749873451.589:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3688 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d57c6e929 code=0x7ffc0000
[   43.437021][   T29] audit: type=1326 audit(1749873451.589:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3688 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d57c6e929 code=0x7ffc0000
[   43.460641][   T29] audit: type=1326 audit(1749873451.589:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3688 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2d57c6e929 code=0x7ffc0000
[   43.477594][ T3701] netlink: 3 bytes leftover after parsing attributes in process `syz.1.60'.
[   43.483773][   T29] audit: type=1326 audit(1749873451.589:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3688 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d57c6e929 code=0x7ffc0000
[   43.515711][   T29] audit: type=1326 audit(1749873451.589:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3688 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d57c6e929 code=0x7ffc0000
[   43.538868][   T29] audit: type=1326 audit(1749873451.589:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3688 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2d57c6d290 code=0x7ffc0000
[   43.566746][ T3702] syz_tun: entered allmulticast mode
[   43.572249][ T3701] 0�X���: renamed from caif0
[   43.580362][ T3701] 0�X���: entered allmulticast mode
[   43.586661][ T3701] A link change request failed with some changes committed already. Interface 
60�X��� may have been left with an inconsistent configuration, please check.
[   43.687602][ T3666] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.711814][ T3708] loop3: detected capacity change from 0 to 2048
[   43.730334][ T3708] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.770949][ T3666] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.783093][ T3708] ALSA: seq fatal error: cannot create timer (-19)
[   43.790515][ T3708] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   43.838208][ T3716] bridge0: entered promiscuous mode
[   43.843577][ T3716] macvlan2: entered promiscuous mode
[   43.859664][ T3716] bridge0: port 3(macvlan2) entered blocking state
[   43.866352][ T3716] bridge0: port 3(macvlan2) entered disabled state
[   43.873268][ T3716] macvlan2: entered allmulticast mode
[   43.878875][ T3716] bridge0: entered allmulticast mode
[   43.900872][ T3716] macvlan2: left allmulticast mode
[   43.906176][ T3716] bridge0: left allmulticast mode
[   43.914483][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.950164][ T3716] bridge0: left promiscuous mode
[   43.964714][ T3723] syz_tun: entered allmulticast mode
[   44.045958][ T3666] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   44.060635][ T3734] loop2: detected capacity change from 0 to 2048
[   44.072000][ T3666] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   44.082502][ T3734] EXT4-fs: Ignoring removed i_version option
[   44.107025][ T3734] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.123615][ T3666] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   44.137551][ T3734] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   44.151484][ T3666] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   44.212692][ T3734] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.71: bg 0: block 345: padding at end of block bitmap is not set
[   44.234470][ T3666] syz.0.54 (3666) used greatest stack depth: 10664 bytes left
[   44.250353][ T3734] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117
[   44.262961][ T3734] EXT4-fs (loop2): This should not happen!! Data will be lost
[   44.262961][ T3734] 
[   44.402534][ T3761] loop1: detected capacity change from 0 to 256
[   44.409250][ T3760] loop4: detected capacity change from 0 to 2048
[   44.451931][ T3760] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.516324][ T3760] ALSA: seq fatal error: cannot create timer (-19)
[   44.538230][ T3760] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   44.582495][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.624479][ T3771] loop4: detected capacity change from 0 to 2048
[   44.650832][ T3771] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.677607][ T3771] ALSA: seq fatal error: cannot create timer (-19)
[   44.685071][ T3771] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   44.714670][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.723938][ T3777] loop0: detected capacity change from 0 to 2048
[   44.731445][ T3777] EXT4-fs: Ignoring removed i_version option
[   44.748863][ T3777] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.764264][ T3777] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   44.780211][ T3777] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.82: bg 0: block 345: padding at end of block bitmap is not set
[   44.799291][ T3777] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117
[   44.811882][ T3777] EXT4-fs (loop0): This should not happen!! Data will be lost
[   44.811882][ T3777] 
[   44.974023][ T3734] syz.2.71 (3734) used greatest stack depth: 9920 bytes left
[   44.977486][ T3789] loop3: detected capacity change from 0 to 128
[   44.988888][ T3789] EXT4-fs: Ignoring removed nobh option
[   44.994193][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.019055][ T3789] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   45.040268][ T3790] netlink: 28 bytes leftover after parsing attributes in process `syz.4.84'.
[   45.045779][ T3789] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   45.147228][ T3793] loop1: detected capacity change from 0 to 2048
[   45.202813][ T3793] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.230091][ T3793] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   45.248703][ T3804] loop2: detected capacity change from 0 to 2048
[   45.272808][ T3806] loop4: detected capacity change from 0 to 2048
[   45.276823][ T3804] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.280122][ T3806] EXT4-fs: Ignoring removed i_version option
[   45.315697][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.326290][ T3806] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.339471][ T3806] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   45.350566][ T3804] ALSA: seq fatal error: cannot create timer (-19)
[   45.363709][ T3804] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   45.390168][ T3806] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.89: bg 0: block 345: padding at end of block bitmap is not set
[   45.404860][ T3806] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117
[   45.417955][ T3806] EXT4-fs (loop4): This should not happen!! Data will be lost
[   45.417955][ T3806] 
[   45.429391][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.475364][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.539640][ T3817] loop2: detected capacity change from 0 to 2048
[   45.565711][ T3817] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.616617][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.626548][ T3823] loop4: detected capacity change from 0 to 512
[   45.633652][ T3823] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   45.643727][ T3817] ALSA: seq fatal error: cannot create timer (-19)
[   45.646947][ T3823] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   45.665749][ T3817] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   45.681314][ T3823] EXT4-fs (loop4): 1 truncate cleaned up
[   45.688065][ T3823] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.719073][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.777640][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.840427][ T3307] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   45.940353][ T3839] loop2: detected capacity change from 0 to 2048
[   45.951252][ T3835] netlink: 24 bytes leftover after parsing attributes in process `syz.3.97'.
[   45.996581][ T3844] loop0: detected capacity change from 0 to 2048
[   46.024743][ T3839] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.038043][ T3844] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.079350][ T3839] ALSA: seq fatal error: cannot create timer (-19)
[   46.087937][ T3839] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   46.113741][ T3844] ALSA: seq fatal error: cannot create timer (-19)
[   46.121360][ T3844] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   46.156243][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.167473][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.254165][ T3861] loop0: detected capacity change from 0 to 2048
[   46.293789][ T3861] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.308960][ T3861] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   46.338623][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.410391][ T3869] loop0: detected capacity change from 0 to 128
[   46.430884][ T3869] EXT4-fs: Ignoring removed nobh option
[   46.449706][ T3869] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   46.482948][ T3869] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   46.653120][ T3317] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   46.769604][ T3897] loop1: detected capacity change from 0 to 2048
[   46.785365][ T3893] loop2: detected capacity change from 0 to 2048
[   46.792564][ T3891] loop0: detected capacity change from 0 to 2048
[   46.802403][ T3897] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.827805][ T3891] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.829017][ T3897] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   46.879484][ T3893] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.883307][ T3891] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   46.929330][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.950329][ T3893] ALSA: seq fatal error: cannot create timer (-19)
[   46.958459][ T3893] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   47.023595][ T3908] loop1: detected capacity change from 0 to 2048
[   47.058660][ T3908] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   47.108058][ T3911] loop2: detected capacity change from 0 to 128
[   47.163391][ T3918] loop0: detected capacity change from 0 to 2048
[   47.198451][ T3920] loop1: detected capacity change from 0 to 128
[   47.228752][ T3928] loop3: detected capacity change from 0 to 128
[   47.239611][ T3918] ALSA: seq fatal error: cannot create timer (-19)
[   47.248091][ T3928] EXT4-fs: Ignoring removed nobh option
[   47.248620][ T3918] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   47.278366][ T3928] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   47.323682][ T3933] syz_tun: entered allmulticast mode
[   47.474839][ T3949] bridge0: entered promiscuous mode
[   47.493715][ T3949] macvlan2: entered promiscuous mode
[   47.504710][ T3949] bridge0: port 3(macvlan2) entered blocking state
[   47.511364][ T3949] bridge0: port 3(macvlan2) entered disabled state
[   47.519357][ T3949] macvlan2: entered allmulticast mode
[   47.524803][ T3949] bridge0: entered allmulticast mode
[   47.531550][ T3949] macvlan2: left allmulticast mode
[   47.536769][ T3949] bridge0: left allmulticast mode
[   47.536901][ T3951] loop0: detected capacity change from 0 to 512
[   47.542576][ T3949] bridge0: left promiscuous mode
[   47.555697][ T3951] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   47.568161][ T3951] EXT4-fs (loop0): 1 truncate cleaned up
[   47.693422][ T3958] loop0: detected capacity change from 0 to 2048
[   47.738341][ T3958] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   48.006268][ T3982] netlink: 28 bytes leftover after parsing attributes in process `syz.2.142'.
[   48.026794][ T3984] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[   48.246048][ T3989] bridge0: entered promiscuous mode
[   48.256962][ T3992] loop2: detected capacity change from 0 to 2048
[   48.259585][ T3989] macvlan2: entered promiscuous mode
[   48.282970][ T3989] bridge0: port 3(macvlan2) entered blocking state
[   48.289695][ T3989] bridge0: port 3(macvlan2) entered disabled state
[   48.301931][ T3992] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   48.314025][ T3989] macvlan2: entered allmulticast mode
[   48.322219][ T3989] bridge0: entered allmulticast mode
[   48.337234][   T29] kauditd_printk_skb: 526 callbacks suppressed
[   48.337254][   T29] audit: type=1400 audit(1749873456.619:877): avc:  denied  { name_bind } for  pid=3995 comm="syz.3.146" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   48.369580][ T3989] macvlan2: left allmulticast mode
[   48.374821][ T3989] bridge0: left allmulticast mode
[   48.394159][ T3989] bridge0: left promiscuous mode
[   48.407630][   T29] audit: type=1326 audit(1749873456.689:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3997 comm="syz.2.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d57c6e929 code=0x7ffc0000
[   48.438451][   T29] audit: type=1326 audit(1749873456.689:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3997 comm="syz.2.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d57c6e929 code=0x7ffc0000
[   48.461764][   T29] audit: type=1326 audit(1749873456.689:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3997 comm="syz.2.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d57c6e929 code=0x7ffc0000
[   48.485920][   T29] audit: type=1326 audit(1749873456.689:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3997 comm="syz.2.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d57c6e929 code=0x7ffc0000
[   48.509266][   T29] audit: type=1326 audit(1749873456.689:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3997 comm="syz.2.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d57c6e929 code=0x7ffc0000
[   48.532859][   T29] audit: type=1326 audit(1749873456.689:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3997 comm="syz.2.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d57c6e929 code=0x7ffc0000
[   48.556403][   T29] audit: type=1326 audit(1749873456.689:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3997 comm="syz.2.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d57c6e929 code=0x7ffc0000
[   48.579686][   T29] audit: type=1326 audit(1749873456.689:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3997 comm="syz.2.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d57c6e929 code=0x7ffc0000
[   48.603644][   T29] audit: type=1326 audit(1749873456.809:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3995 comm="syz.3.146" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa2a0c7e929 code=0x0
[   48.817935][ T4009] mmap: syz.2.151 (4009) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   48.867739][ T4013] loop0: detected capacity change from 0 to 2048
[   48.889430][ T4019] loop2: detected capacity change from 0 to 128
[   48.894567][ T4013] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   48.901783][ T4019] EXT4-fs: Ignoring removed nobh option
[   48.918799][ T4019] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   49.004867][ T4026] 9pnet_fd: Insufficient options for proto=fd
[   49.020970][ T4026] netlink: 24 bytes leftover after parsing attributes in process `syz.0.156'.
[   49.049869][ T4028] loop2: detected capacity change from 0 to 2048
[   49.069861][ T4028] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   49.144988][ T4030] netlink: 'syz.4.158': attribute type 13 has an invalid length.
[   49.221569][ T4042] netlink: 'syz.3.162': attribute type 13 has an invalid length.
[   49.235022][ T4030] A link change request failed with some changes committed already. Interface 
60�X��� may have been left with an inconsistent configuration, please check.
[   49.277228][ T4045] FAULT_INJECTION: forcing a failure.
[   49.277228][ T4045] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   49.290456][ T4045] CPU: 1 UID: 0 PID: 4045 Comm: syz.3.162 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(voluntary) 
[   49.290493][ T4045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   49.290513][ T4045] Call Trace:
[   49.290555][ T4045]  <TASK>
[   49.290564][ T4045]  __dump_stack+0x1d/0x30
[   49.290588][ T4045]  dump_stack_lvl+0xe8/0x140
[   49.290661][ T4045]  dump_stack+0x15/0x1b
[   49.290677][ T4045]  should_fail_ex+0x265/0x280
[   49.290768][ T4045]  should_fail+0xb/0x20
[   49.290808][ T4045]  should_fail_usercopy+0x1a/0x20
[   49.290834][ T4045]  _copy_to_user+0x20/0xa0
[   49.290865][ T4045]  simple_read_from_buffer+0xb5/0x130
[   49.290984][ T4045]  proc_fail_nth_read+0x100/0x140
[   49.291071][ T4045]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   49.291095][ T4045]  vfs_read+0x19d/0x6f0
[   49.291115][ T4045]  ? __rcu_read_unlock+0x4f/0x70
[   49.291143][ T4045]  ? __fget_files+0x184/0x1c0
[   49.291170][ T4045]  ksys_read+0xda/0x1a0
[   49.291267][ T4045]  __x64_sys_read+0x40/0x50
[   49.291286][ T4045]  x64_sys_call+0x2d77/0x2fb0
[   49.291350][ T4045]  do_syscall_64+0xd2/0x200
[   49.291375][ T4045]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   49.291459][ T4045]  ? clear_bhb_loop+0x40/0x90
[   49.291486][ T4045]  ? clear_bhb_loop+0x40/0x90
[   49.291509][ T4045]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   49.291531][ T4045] RIP: 0033:0x7fa2a0c7d33c
[   49.291558][ T4045] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   49.291581][ T4045] RSP: 002b:00007fa29f2c6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   49.291604][ T4045] RAX: ffffffffffffffda RBX: 00007fa2a0ea6080 RCX: 00007fa2a0c7d33c
[   49.291617][ T4045] RDX: 000000000000000f RSI: 00007fa29f2c60a0 RDI: 000000000000000b
[   49.291631][ T4045] RBP: 00007fa29f2c6090 R08: 0000000000000000 R09: 0000000000000000
[   49.291646][ T4045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   49.291761][ T4045] R13: 0000000000000000 R14: 00007fa2a0ea6080 R15: 00007fffb4c05348
[   49.291785][ T4045]  </TASK>
[   49.295416][ T4042] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.344700][ T4049] netlink: 'syz.0.164': attribute type 13 has an invalid length.
[   49.352060][ T4042] 8021q: adding VLAN 0 to HW filter on device team0
[   49.546389][ T4042] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   49.578154][ T4049] gretap0: refused to change device tx_queue_len
[   49.591396][ T4049] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   49.613045][ T4056] loop3: detected capacity change from 0 to 128
[   49.629077][ T4056] EXT4-fs: Ignoring removed nobh option
[   49.647828][ T4056] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   49.870474][ T4064] ieee802154 phy0 wpan0: encryption failed: -22
[   50.256751][ T4072] loop3: detected capacity change from 0 to 2048
[   50.316925][ T4072] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   50.489147][ T4089] FAULT_INJECTION: forcing a failure.
[   50.489147][ T4089] name failslab, interval 1, probability 0, space 0, times 0
[   50.501929][ T4089] CPU: 1 UID: 0 PID: 4089 Comm: syz.3.176 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(voluntary) 
[   50.501964][ T4089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   50.501979][ T4089] Call Trace:
[   50.501987][ T4089]  <TASK>
[   50.502011][ T4089]  __dump_stack+0x1d/0x30
[   50.502037][ T4089]  dump_stack_lvl+0xe8/0x140
[   50.502058][ T4089]  dump_stack+0x15/0x1b
[   50.502111][ T4089]  should_fail_ex+0x265/0x280
[   50.502191][ T4089]  should_failslab+0x8c/0xb0
[   50.502214][ T4089]  kmem_cache_alloc_node_noprof+0x57/0x320
[   50.502294][ T4089]  ? __alloc_skb+0x101/0x320
[   50.502327][ T4089]  __alloc_skb+0x101/0x320
[   50.502371][ T4089]  netlink_dump+0x148/0x7f0
[   50.502389][ T4089]  ? nlmon_xmit+0x4f/0x60
[   50.502426][ T4089]  ? consume_skb+0x49/0x150
[   50.502467][ T4089]  __netlink_dump_start+0x43e/0x520
[   50.502494][ T4089]  ? __pfx_tc_dump_action+0x10/0x10
[   50.502526][ T4089]  rtnetlink_rcv_msg+0x552/0x6d0
[   50.502616][ T4089]  ? __pfx_tc_dump_action+0x10/0x10
[   50.502651][ T4089]  ? __pfx_rtnl_dumpit+0x10/0x10
[   50.502680][ T4089]  ? __pfx_tc_dump_action+0x10/0x10
[   50.502719][ T4089]  netlink_rcv_skb+0x123/0x220
[   50.502823][ T4089]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   50.502864][ T4089]  rtnetlink_rcv+0x1c/0x30
[   50.502886][ T4089]  netlink_unicast+0x5a1/0x670
[   50.502965][ T4089]  netlink_sendmsg+0x58b/0x6b0
[   50.502994][ T4089]  ? __pfx_netlink_sendmsg+0x10/0x10
[   50.503131][ T4089]  __sock_sendmsg+0x145/0x180
[   50.503168][ T4089]  ____sys_sendmsg+0x31e/0x4e0
[   50.503240][ T4089]  ___sys_sendmsg+0x17b/0x1d0
[   50.503285][ T4089]  __x64_sys_sendmsg+0xd4/0x160
[   50.503348][ T4089]  x64_sys_call+0x2999/0x2fb0
[   50.503373][ T4089]  do_syscall_64+0xd2/0x200
[   50.503399][ T4089]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   50.503433][ T4089]  ? clear_bhb_loop+0x40/0x90
[   50.503495][ T4089]  ? clear_bhb_loop+0x40/0x90
[   50.503525][ T4089]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.503552][ T4089] RIP: 0033:0x7fa2a0c7e929
[   50.503571][ T4089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   50.503651][ T4089] RSP: 002b:00007fa29f2e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   50.503674][ T4089] RAX: ffffffffffffffda RBX: 00007fa2a0ea5fa0 RCX: 00007fa2a0c7e929
[   50.503754][ T4089] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[   50.503770][ T4089] RBP: 00007fa29f2e7090 R08: 0000000000000000 R09: 0000000000000000
[   50.503786][ T4089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   50.503801][ T4089] R13: 0000000000000000 R14: 00007fa2a0ea5fa0 R15: 00007fffb4c05348
[   50.503827][ T4089]  </TASK>
[   50.818987][ T4091] capability: warning: `syz.3.177' uses 32-bit capabilities (legacy support in use)
[   51.174783][ T4094] netlink: 'syz.1.178': attribute type 12 has an invalid length.
[   51.189469][ T4096] loop3: detected capacity change from 0 to 128
[   51.208874][ T4096] EXT4-fs: Ignoring removed nobh option
[   51.239918][ T4096] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   51.416652][ T4107] netlink: 96 bytes leftover after parsing attributes in process `syz.3.181'.
[   51.473565][ T4111] loop3: detected capacity change from 0 to 2048
[   51.498619][ T4111] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   51.535080][ T4121] FAULT_INJECTION: forcing a failure.
[   51.535080][ T4121] name failslab, interval 1, probability 0, space 0, times 0
[   51.547803][ T4121] CPU: 1 UID: 0 PID: 4121 Comm: syz.1.189 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(voluntary) 
[   51.547837][ T4121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   51.547950][ T4121] Call Trace:
[   51.547957][ T4121]  <TASK>
[   51.547964][ T4121]  __dump_stack+0x1d/0x30
[   51.547990][ T4121]  dump_stack_lvl+0xe8/0x140
[   51.548093][ T4121]  dump_stack+0x15/0x1b
[   51.548175][ T4121]  should_fail_ex+0x265/0x280
[   51.548219][ T4121]  should_failslab+0x8c/0xb0
[   51.548292][ T4121]  kmem_cache_alloc_noprof+0x50/0x310
[   51.548387][ T4121]  ? skb_ext_add+0xd4/0x380
[   51.548409][ T4121]  ? ip_rcv+0x62/0x140
[   51.548434][ T4121]  skb_ext_add+0xd4/0x380
[   51.548450][ T4121]  ? x64_sys_call+0x2cdd/0x2fb0
[   51.548500][ T4121]  ? percpu_counter_add_batch+0xb6/0x130
[   51.548545][ T4121]  xfrm_input+0x4d2/0x3a80
[   51.548589][ T4121]  ? ipt_do_table+0x9fb/0xab0
[   51.548637][ T4121]  vti_input+0x386/0x410
[   51.548676][ T4121]  vti_rcv_proto+0x77/0x90
[   51.548732][ T4121]  ? __pfx_xfrm4_ipcomp_rcv+0x10/0x10
[   51.548757][ T4121]  xfrm4_ipcomp_rcv+0x4b/0xd0
[   51.548777][ T4121]  ? __pfx_xfrm4_ipcomp_rcv+0x10/0x10
[   51.548794][ T4121]  ip_protocol_deliver_rcu+0x423/0x780
[   51.548851][ T4121]  ip_local_deliver_finish+0x184/0x220
[   51.548879][ T4121]  ip_local_deliver+0xe8/0x1c0
[   51.548984][ T4121]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[   51.549015][ T4121]  ? __pfx_ip_local_deliver+0x10/0x10
[   51.549042][ T4121]  ip_rcv_finish+0x188/0x1a0
[   51.549068][ T4121]  ip_rcv+0x62/0x140
[   51.549169][ T4121]  ? __pfx_ip_rcv_finish+0x10/0x10
[   51.549224][ T4121]  ? __pfx_ip_rcv+0x10/0x10
[   51.549248][ T4121]  __netif_receive_skb+0xff/0x270
[   51.549282][ T4121]  ? tun_rx_batched+0xc7/0x430
[   51.549378][ T4121]  netif_receive_skb+0x4b/0x2e0
[   51.549409][ T4121]  ? tun_rx_batched+0xc7/0x430
[   51.549484][ T4121]  tun_rx_batched+0xfc/0x430
[   51.549524][ T4121]  tun_get_user+0x1e5a/0x2500
[   51.549565][ T4121]  ? ref_tracker_alloc+0x1f2/0x2f0
[   51.549638][ T4121]  tun_chr_write_iter+0x15e/0x210
[   51.549671][ T4121]  ? __pfx_tun_chr_write_iter+0x10/0x10
[   51.549734][ T4121]  vfs_write+0x49d/0x8e0
[   51.549761][ T4121]  ksys_write+0xda/0x1a0
[   51.549843][ T4121]  __x64_sys_write+0x40/0x50
[   51.549906][ T4121]  x64_sys_call+0x2cdd/0x2fb0
[   51.549926][ T4121]  do_syscall_64+0xd2/0x200
[   51.549950][ T4121]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   51.549981][ T4121]  ? clear_bhb_loop+0x40/0x90
[   51.550005][ T4121]  ? clear_bhb_loop+0x40/0x90
[   51.550158][ T4121]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   51.550183][ T4121] RIP: 0033:0x7f59526fd3df
[   51.550199][ T4121] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[   51.550216][ T4121] RSP: 002b:00007f5950d67000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[   51.550234][ T4121] RAX: ffffffffffffffda RBX: 00007f5952925fa0 RCX: 00007f59526fd3df
[   51.550246][ T4121] RDX: 0000000000000066 RSI: 0000200000000800 RDI: 00000000000000c8
[   51.550259][ T4121] RBP: 00007f5950d67090 R08: 0000000000000000 R09: 0000000000000000
[   51.550273][ T4121] R10: 0000000000000066 R11: 0000000000000293 R12: 0000000000000001
[   51.550327][ T4121] R13: 0000000000000000 R14: 00007f5952925fa0 R15: 00007ffe116d0938
[   51.550402][ T4121]  </TASK>
[   51.897855][ T4125] FAULT_INJECTION: forcing a failure.
[   51.897855][ T4125] name failslab, interval 1, probability 0, space 0, times 0
[   51.910570][ T4125] CPU: 0 UID: 0 PID: 4125 Comm: syz.2.190 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(voluntary) 
[   51.910615][ T4125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   51.910631][ T4125] Call Trace:
[   51.910639][ T4125]  <TASK>
[   51.910710][ T4125]  __dump_stack+0x1d/0x30
[   51.910736][ T4125]  dump_stack_lvl+0xe8/0x140
[   51.910761][ T4125]  dump_stack+0x15/0x1b
[   51.910782][ T4125]  should_fail_ex+0x265/0x280
[   51.910830][ T4125]  should_failslab+0x8c/0xb0
[   51.910860][ T4125]  __kmalloc_noprof+0xa5/0x3e0
[   51.910951][ T4125]  ? security_prepare_creds+0x52/0x120
[   51.910988][ T4125]  security_prepare_creds+0x52/0x120
[   51.911022][ T4125]  prepare_creds+0x34a/0x4c0
[   51.911096][ T4125]  copy_creds+0x8f/0x3f0
[   51.911123][ T4125]  copy_process+0x658/0x1fe0
[   51.911154][ T4125]  ? kstrtouint+0x76/0xc0
[   51.911197][ T4125]  ? __rcu_read_unlock+0x4f/0x70
[   51.911234][ T4125]  kernel_clone+0x16c/0x5b0
[   51.911311][ T4125]  ? vfs_write+0x75e/0x8e0
[   51.911338][ T4125]  __x64_sys_clone+0xe6/0x120
[   51.911432][ T4125]  x64_sys_call+0x2c59/0x2fb0
[   51.911498][ T4125]  do_syscall_64+0xd2/0x200
[   51.911525][ T4125]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   51.911592][ T4125]  ? clear_bhb_loop+0x40/0x90
[   51.911620][ T4125]  ? clear_bhb_loop+0x40/0x90
[   51.911648][ T4125]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   51.911695][ T4125] RIP: 0033:0x7f2d57c6e929
[   51.911714][ T4125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   51.911737][ T4125] RSP: 002b:00007f2d562d6fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[   51.911865][ T4125] RAX: ffffffffffffffda RBX: 00007f2d57e95fa0 RCX: 00007f2d57c6e929
[   51.911882][ T4125] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000006200
[   51.911904][ T4125] RBP: 00007f2d562d7090 R08: 0000000000000000 R09: 0000000000000000
[   51.911920][ T4125] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[   51.912011][ T4125] R13: 0000000000000000 R14: 00007f2d57e95fa0 R15: 00007ffea2dfc5c8
[   51.912032][ T4125]  </TASK>
[   52.131828][ T4127] tmpfs: Unknown parameter '��&]I���W�Rla�7�����}���J#��ڨ��������*�'�� I7�٠����2��R\�KvT@�J�)���݁�p)'
[   52.166671][ T4132] loop1: detected capacity change from 0 to 128
[   52.173409][ T4132] EXT4-fs: Ignoring removed nobh option
[   52.185915][ T4132] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   52.253861][ T4139] loop4: detected capacity change from 0 to 128
[   52.264974][ T4139] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   52.398014][ T4155] loop2: detected capacity change from 0 to 2048
[   52.425354][ T4155] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   52.590329][ T4174] bridge0: entered promiscuous mode
[   52.597402][ T4174] macvlan2: entered promiscuous mode
[   52.604319][ T4174] bridge0: port 3(macvlan2) entered blocking state
[   52.611252][ T4174] bridge0: port 3(macvlan2) entered disabled state
[   52.619262][ T4174] macvlan2: entered allmulticast mode
[   52.624738][ T4174] bridge0: entered allmulticast mode
[   52.635318][ T4174] macvlan2: left allmulticast mode
[   52.640571][ T4174] bridge0: left allmulticast mode
[   52.657053][ T4174] bridge0: left promiscuous mode
[   52.776394][ T4190] loop3: detected capacity change from 0 to 2048
[   52.806387][ T4190] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   52.809550][ T4196] FAULT_INJECTION: forcing a failure.
[   52.809550][ T4196] name failslab, interval 1, probability 0, space 0, times 0
[   52.833989][ T4196] CPU: 1 UID: 0 PID: 4196 Comm: syz.2.217 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(voluntary) 
[   52.834095][ T4196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   52.834108][ T4196] Call Trace:
[   52.834115][ T4196]  <TASK>
[   52.834124][ T4196]  __dump_stack+0x1d/0x30
[   52.834152][ T4196]  dump_stack_lvl+0xe8/0x140
[   52.834177][ T4196]  dump_stack+0x15/0x1b
[   52.834197][ T4196]  should_fail_ex+0x265/0x280
[   52.834242][ T4196]  ? tcf_action_init_1+0x11e/0x4a0
[   52.834277][ T4196]  should_failslab+0x8c/0xb0
[   52.834309][ T4196]  __kmalloc_cache_noprof+0x4c/0x320
[   52.834345][ T4196]  tcf_action_init_1+0x11e/0x4a0
[   52.834469][ T4196]  tcf_action_init+0x267/0x6d0
[   52.834513][ T4196]  ? is_bpf_text_address+0x141/0x160
[   52.834560][ T4196]  ? kernel_text_address+0x94/0xb0
[   52.834588][ T4196]  ? __kernel_text_address+0xd/0x40
[   52.834638][ T4196]  tc_ctl_action+0x291/0x830
[   52.834696][ T4196]  ? __pfx_tc_ctl_action+0x10/0x10
[   52.834739][ T4196]  rtnetlink_rcv_msg+0x65a/0x6d0
[   52.834780][ T4196]  netlink_rcv_skb+0x123/0x220
[   52.834800][ T4196]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   52.834895][ T4196]  rtnetlink_rcv+0x1c/0x30
[   52.834958][ T4196]  netlink_unicast+0x5a1/0x670
[   52.835066][ T4196]  netlink_sendmsg+0x58b/0x6b0
[   52.835092][ T4196]  ? __pfx_netlink_sendmsg+0x10/0x10
[   52.835118][ T4196]  __sock_sendmsg+0x145/0x180
[   52.835149][ T4196]  ____sys_sendmsg+0x31e/0x4e0
[   52.835174][ T4196]  ___sys_sendmsg+0x17b/0x1d0
[   52.835294][ T4196]  __x64_sys_sendmsg+0xd4/0x160
[   52.835322][ T4196]  x64_sys_call+0x2999/0x2fb0
[   52.835344][ T4196]  do_syscall_64+0xd2/0x200
[   52.835443][ T4196]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   52.835531][ T4196]  ? clear_bhb_loop+0x40/0x90
[   52.835559][ T4196]  ? clear_bhb_loop+0x40/0x90
[   52.835582][ T4196]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   52.835604][ T4196] RIP: 0033:0x7f2d57c6e929
[   52.835632][ T4196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   52.835651][ T4196] RSP: 002b:00007f2d562d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   52.835671][ T4196] RAX: ffffffffffffffda RBX: 00007f2d57e95fa0 RCX: 00007f2d57c6e929
[   52.835683][ T4196] RDX: 0000000000000000 RSI: 00002000000037c0 RDI: 0000000000000005
[   52.835695][ T4196] RBP: 00007f2d562d7090 R08: 0000000000000000 R09: 0000000000000000
[   52.835707][ T4196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   52.835719][ T4196] R13: 0000000000000000 R14: 00007f2d57e95fa0 R15: 00007ffea2dfc5c8
[   52.835740][ T4196]  </TASK>
[   53.208991][ T4207] netlink: 28 bytes leftover after parsing attributes in process `syz.0.221'.
[   53.273222][ T4214] loop2: detected capacity change from 0 to 128
[   53.286082][ T4214] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   53.312928][ T4219] loop3: detected capacity change from 0 to 2048
[   53.315651][ T4213] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[   53.320220][ T4219] EXT4-fs: Ignoring removed i_version option
[   53.336606][ T4214] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   53.348328][   T29] kauditd_printk_skb: 2409 callbacks suppressed
[   53.348420][   T29] audit: type=1400 audit(1749873461.629:3294): avc:  denied  { create } for  pid=4220 comm="syz.1.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   53.375894][   T29] audit: type=1400 audit(1749873461.649:3295): avc:  denied  { connect } for  pid=4220 comm="syz.1.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   53.395560][   T29] audit: type=1400 audit(1749873461.659:3296): avc:  denied  { write } for  pid=4220 comm="syz.1.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   53.420578][   T29] audit: type=1400 audit(1749873461.699:3297): avc:  denied  { mount } for  pid=4210 comm="syz.2.224" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   53.421585][ T4219] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   53.442549][   T29] audit: type=1400 audit(1749873461.699:3298): avc:  denied  { create } for  pid=4220 comm="syz.1.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   53.472961][   T29] audit: type=1400 audit(1749873461.699:3299): avc:  denied  { ioctl } for  pid=4220 comm="syz.1.229" path="socket:[5986]" dev="sockfs" ino=5986 ioctlcmd=0x48d4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   53.522384][   T29] audit: type=1400 audit(1749873461.799:3300): avc:  denied  { name_bind } for  pid=4227 comm="syz.4.228" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   53.544260][   T29] audit: type=1400 audit(1749873461.799:3301): avc:  denied  { node_bind } for  pid=4227 comm="syz.4.228" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[   53.578894][ T4230] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   53.594039][   T29] audit: type=1400 audit(1749873461.859:3302): avc:  denied  { create } for  pid=4218 comm="syz.3.227" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   53.615062][   T29] audit: type=1400 audit(1749873461.869:3303): avc:  denied  { ioctl } for  pid=4229 comm="syz.1.230" path="socket:[6813]" dev="sockfs" ino=6813 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   53.643120][ T3312] FAT-fs (loop2): error, corrupted directory (invalid entries)
[   53.650951][ T3312] FAT-fs (loop2): Filesystem has been set read-only
[   53.659318][ T3312] FAT-fs (loop2): error, corrupted directory (invalid entries)
[   53.687120][ T4231] syz_tun (unregistering): left allmulticast mode
[   53.771364][ T4241] syz_tun: entered allmulticast mode
[   53.816646][ T4231] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   53.826210][ T4245] loop3: detected capacity change from 0 to 2048
[   53.834901][   T51] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.860286][ T4245] ALSA: seq fatal error: cannot create timer (-19)
[   53.867670][ T4245] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   53.899702][   T51] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.948325][   T51] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.059447][   T51] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.077516][ T4261] bridge0: entered promiscuous mode
[   54.082994][ T4261] macvlan2: entered promiscuous mode
[   54.093730][ T4261] bridge0: port 3(macvlan2) entered blocking state
[   54.100415][ T4261] bridge0: port 3(macvlan2) entered disabled state
[   54.108555][ T4261] macvlan2: entered allmulticast mode
[   54.114070][ T4261] bridge0: entered allmulticast mode
[   54.121998][ T4261] macvlan2: left allmulticast mode
[   54.127395][ T4261] bridge0: left allmulticast mode
[   54.133938][ T4261] bridge0: left promiscuous mode
[   54.167499][   T51] bridge_slave_1: left allmulticast mode
[   54.173429][   T51] bridge_slave_1: left promiscuous mode
[   54.179193][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.187507][   T51] bridge_slave_0: left allmulticast mode
[   54.193284][   T51] bridge_slave_0: left promiscuous mode
[   54.199137][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.288499][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   54.298680][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   54.308267][   T51] bond0 (unregistering): Released all slaves
[   54.369839][   T51] IPVS: stopping backup sync thread 3984 ...
[   54.392017][   T51] hsr_slave_0: left promiscuous mode
[   54.398329][   T51] hsr_slave_1: left promiscuous mode
[   54.404264][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   54.411890][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[   54.436417][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   54.443971][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[   54.497104][   T51] veth1_macvtap: left promiscuous mode
[   54.502680][   T51] veth0_macvtap: left promiscuous mode
[   54.548883][   T51] veth1_vlan: left promiscuous mode
[   54.563516][   T51] veth0_vlan: left promiscuous mode
[   54.576418][ T4282] loop4: detected capacity change from 0 to 128
[   54.650297][   T51] team0 (unregistering): Port device team_slave_1 removed
[   54.660196][   T51] team0 (unregistering): Port device team_slave_0 removed
[   54.734710][ T4252] chnl_net:caif_netlink_parms(): no params data found
[   54.748534][ T4292] tipc: Enabling of bearer <eth:s> rejected, failed to enable media
[   54.784000][ T4252] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.791229][ T4252] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.798570][ T4252] bridge_slave_0: entered allmulticast mode
[   54.805294][ T4252] bridge_slave_0: entered promiscuous mode
[   54.812424][ T4252] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.819795][ T4252] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.827074][ T4252] bridge_slave_1: entered allmulticast mode
[   54.833735][ T4252] bridge_slave_1: entered promiscuous mode
[   54.851372][ T4252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.861831][ T4252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.881733][ T4252] team0: Port device team_slave_0 added
[   54.888799][ T4252] team0: Port device team_slave_1 added
[   54.904858][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.911973][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.938822][ T4252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.950081][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.957181][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.983290][ T4252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.011393][ T4252] hsr_slave_0: entered promiscuous mode
[   55.017768][ T4252] hsr_slave_1: entered promiscuous mode
[   55.023744][ T4252] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.031456][ T4252] Cannot create hsr debugfs directory
[   55.105442][ T4252] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   55.114762][ T4252] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   55.123752][ T4252] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   55.132612][ T4252] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   55.148755][ T4252] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.155921][ T4252] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.163270][ T4252] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.170398][ T4252] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.198512][ T4252] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.210453][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.219107][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.230352][ T4252] 8021q: adding VLAN 0 to HW filter on device team0
[   55.240698][  T160] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.247978][  T160] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.258385][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.265564][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.336953][ T4252] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.458660][ T4318] loop4: detected capacity change from 0 to 2048
[   55.490882][ T4318] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   55.518141][ T4252] veth0_vlan: entered promiscuous mode
[   55.527463][ T4252] veth1_vlan: entered promiscuous mode
[   55.543784][ T4252] veth0_macvtap: entered promiscuous mode
[   55.551248][ T4252] veth1_macvtap: entered promiscuous mode
[   55.562422][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.574517][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.586136][ T4252] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.594953][ T4252] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.604240][ T4252] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.613036][ T4252] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.623733][ T4335] netlink: 'syz.3.254': attribute type 15 has an invalid length.
[   55.668968][ T4339] loop3: detected capacity change from 0 to 128
[   55.717924][ T4346] syz_tun: entered allmulticast mode
[   56.419399][ T4356] loop4: detected capacity change from 0 to 2048
[   56.426322][ T4356] EXT4-fs: Ignoring removed i_version option
[   56.437287][ T4356] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   56.450514][ T4356] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.261: bg 0: block 345: padding at end of block bitmap is not set
[   56.465607][ T4356] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117
[   56.478221][ T4356] EXT4-fs (loop4): This should not happen!! Data will be lost
[   56.478221][ T4356] 
[   56.526449][ T4364] loop1: detected capacity change from 0 to 256
[   56.889953][ T4370] ALSA: seq fatal error: cannot create timer (-19)
[   56.969123][ T4374] netlink: 28 bytes leftover after parsing attributes in process `syz.0.265'.
[   57.091395][ T4378] tipc: Enabling of bearer <eth:s> rejected, failed to enable media
[   57.630354][ T4400] loop5: detected capacity change from 0 to 2048
[   57.650818][ T4400] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   57.689867][ T4404] loop5: detected capacity change from 0 to 128
[   57.696710][ T4404] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   57.708806][ T4404] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   58.002835][ T4407] netlink: 28 bytes leftover after parsing attributes in process `syz.0.277'.
[   58.295608][   T51] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   58.335830][ T4430] tipc: Enabling of bearer <eth:s> rejected, failed to enable media
[   58.381269][   T29] kauditd_printk_skb: 1024 callbacks suppressed
[   58.381329][   T29] audit: type=1326 audit(1749873466.659:4328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4429 comm="syz.1.287" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f59526fe929 code=0x0
[   58.430444][ T4439] loop4: detected capacity change from 0 to 2048
[   58.438573][ T4438] netlink: 28 bytes leftover after parsing attributes in process `syz.3.288'.
[   58.450413][ T4436] ALSA: seq fatal error: cannot create timer (-19)
[   58.463266][ T4444] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[   58.488818][   T29] audit: type=1326 audit(1749873466.769:4329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4446 comm="syz.0.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b636e929 code=0x7ffc0000
[   58.494160][ T4439] ALSA: seq fatal error: cannot create timer (-19)
[   58.513224][   T29] audit: type=1326 audit(1749873466.789:4330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4446 comm="syz.0.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fb6b636e929 code=0x7ffc0000
[   58.542363][   T29] audit: type=1326 audit(1749873466.789:4331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4446 comm="syz.0.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b636e929 code=0x7ffc0000
[   58.565990][   T29] audit: type=1326 audit(1749873466.789:4332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4446 comm="syz.0.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fb6b636e929 code=0x7ffc0000
[   58.576712][ T4448] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, 
[   58.589479][   T29] audit: type=1326 audit(1749873466.789:4333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4446 comm="syz.0.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b636e929 code=0x7ffc0000
[   58.597944][ T4448] block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   58.630002][   T29] audit: type=1326 audit(1749873466.789:4334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4446 comm="syz.0.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fb6b636e929 code=0x7ffc0000
[   58.653496][   T29] audit: type=1326 audit(1749873466.789:4335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4446 comm="syz.0.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b636e929 code=0x7ffc0000
[   58.677070][   T29] audit: type=1326 audit(1749873466.789:4336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4446 comm="syz.0.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7fb6b636e929 code=0x7ffc0000
[   58.701189][   T29] audit: type=1326 audit(1749873466.959:4337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4450 comm="syz.5.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8097bae929 code=0x7ffc0000
[   58.818901][ T4463] loop5: detected capacity change from 0 to 128
[   58.823739][ T4461] loop3: detected capacity change from 0 to 2048
[   58.825988][ T4463] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   58.845162][ T4463] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   58.862134][ T4461] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   58.991483][   T51] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   59.034473][ T4477] netlink: 'syz.3.302': attribute type 15 has an invalid length.
[   59.052176][ T4479] loop5: detected capacity change from 0 to 128
[   59.059784][ T4479] EXT4-fs: Ignoring removed nobh option
[   59.068230][ T4479] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   59.143033][ T4488] loop5: detected capacity change from 0 to 2048
[   59.168828][ T4488] ALSA: seq fatal error: cannot create timer (-19)
[   59.179936][ T4488] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   59.290703][ T4501] loop1: detected capacity change from 0 to 2048
[   59.311772][ T4501] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   59.379066][ T4514] netlink: 'syz.1.314': attribute type 15 has an invalid length.
[   59.425248][ T4518] loop1: detected capacity change from 0 to 128
[   59.449317][ T4520] tipc: Enabling of bearer <eth:s> rejected, failed to enable media
[   59.473559][ T4522] loop5: detected capacity change from 0 to 2048
[   59.498162][ T4522] ALSA: seq fatal error: cannot create timer (-19)
[   59.526551][ T4529] loop5: detected capacity change from 0 to 128
[   59.533258][ T4529] EXT4-fs: Ignoring removed nobh option
[   59.541491][ T4529] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   59.679654][ T4543] loop5: detected capacity change from 0 to 2048
[   59.701141][ T4543] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   59.742153][ T4553] netlink: 'syz.5.327': attribute type 15 has an invalid length.
[   59.781522][ T4557] loop4: detected capacity change from 0 to 2048
[   59.811331][ T4557] ALSA: seq fatal error: cannot create timer (-19)
[   59.950984][ T4570] loop3: detected capacity change from 0 to 128
[   59.957956][ T4570] EXT4-fs: Ignoring removed nobh option
[   59.968039][ T4570] ext4 filesystem being mounted at /70/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   60.330366][ T4591] netlink: 'syz.0.339': attribute type 15 has an invalid length.
[   60.346230][ T4589] loop3: detected capacity change from 0 to 2048
[   60.404829][ T4599] loop1: detected capacity change from 0 to 2048
[   60.413861][ T4589] ALSA: seq fatal error: cannot create timer (-19)
[   60.461720][ T4599] ALSA: seq fatal error: cannot create timer (-19)
[   60.471214][ T4599] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   60.592638][ T4615] bridge0: entered promiscuous mode
[   60.610536][ T4614] loop3: detected capacity change from 0 to 128
[   60.624408][ T4615] macvlan2: entered promiscuous mode
[   60.632790][ T4615] bridge0: port 3(macvlan2) entered blocking state
[   60.639497][ T4615] bridge0: port 3(macvlan2) entered disabled state
[   60.647623][ T4615] macvlan2: entered allmulticast mode
[   60.653036][ T4615] bridge0: entered allmulticast mode
[   60.659568][ T4615] macvlan2: left allmulticast mode
[   60.664726][ T4615] bridge0: left allmulticast mode
[   60.680580][ T4615] bridge0: left promiscuous mode
[   60.767311][ T4626] loop1: detected capacity change from 0 to 128
[   60.773924][ T4624] loop4: detected capacity change from 0 to 2048
[   60.774057][ T4626] EXT4-fs: Ignoring removed nobh option
[   60.781694][ T4624] EXT4-fs: Ignoring removed i_version option
[   60.791109][ T4626] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   60.819662][ T4629] netlink: 'syz.5.352': attribute type 15 has an invalid length.
[   60.830009][ T4624] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   60.845095][ T4624] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.350: bg 0: block 345: padding at end of block bitmap is not set
[   60.865482][ T4624] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117
[   60.878291][ T4624] EXT4-fs (loop4): This should not happen!! Data will be lost
[   60.878291][ T4624] 
[   60.933538][ T4642] loop5: detected capacity change from 0 to 2048
[   60.960418][ T4642] ALSA: seq fatal error: cannot create timer (-19)
[   61.001238][ T4647] loop5: detected capacity change from 0 to 2048
[   61.030568][ T4647] ALSA: seq fatal error: cannot create timer (-19)
[   61.038145][ T4647] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   61.708709][ T4676] loop1: detected capacity change from 0 to 2048
[   61.733072][ T4678] loop4: detected capacity change from 0 to 2048
[   61.754702][ T4676] ALSA: seq fatal error: cannot create timer (-19)
[   61.772422][ T4678] ALSA: seq fatal error: cannot create timer (-19)
[   61.788205][ T4678] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   61.854111][ T4686] loop1: detected capacity change from 0 to 2048
[   61.892218][ T4686] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   62.038466][ T4699] loop4: detected capacity change from 0 to 128
[   62.055833][ T4702] netlink: 'syz.5.373': attribute type 15 has an invalid length.
[   62.082179][ T4704] loop5: detected capacity change from 0 to 128
[   62.095072][ T4704] EXT4-fs: Ignoring removed nobh option
[   62.106592][ T4704] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   62.189285][ T4713] netlink: 28 bytes leftover after parsing attributes in process `syz.0.375'.
[   62.252400][ T4719] tipc: Enabling of bearer <eth:s> rejected, failed to enable media
[   62.303056][ T4721] loop3: detected capacity change from 0 to 2048
[   62.333347][ T4721] ALSA: seq fatal error: cannot create timer (-19)
[   62.372679][ T4727] bridge0: entered promiscuous mode
[   62.378933][ T4727] macvlan2: entered promiscuous mode
[   62.389626][ T4727] bridge0: port 3(macvlan2) entered blocking state
[   62.398695][ T4727] bridge0: port 3(macvlan2) entered disabled state
[   62.406599][ T4727] macvlan2: entered allmulticast mode
[   62.412497][ T4727] bridge0: entered allmulticast mode
[   62.420948][ T4727] macvlan2: left allmulticast mode
[   62.427007][ T4727] bridge0: left allmulticast mode
[   62.434148][ T4727] bridge0: left promiscuous mode
[   62.598333][ T4739] netlink: 'syz.0.385': attribute type 15 has an invalid length.
[   63.082414][ T4758] ALSA: seq fatal error: cannot create timer (-19)
[   63.131748][ T4762] bridge0: entered promiscuous mode
[   63.138096][ T4762] macvlan2: entered promiscuous mode
[   63.149176][ T4762] bridge0: port 3(macvlan2) entered blocking state
[   63.156637][ T4762] bridge0: port 3(macvlan2) entered disabled state
[   63.164076][ T4762] macvlan2: entered allmulticast mode
[   63.170074][ T4762] bridge0: entered allmulticast mode
[   63.180847][ T4762] macvlan2: left allmulticast mode
[   63.188498][ T4762] bridge0: left allmulticast mode
[   63.197457][ T4762] bridge0: left promiscuous mode
[   63.297490][ T4772] netlink: 'syz.0.397': attribute type 15 has an invalid length.
[   63.327136][ T4774] loop4: detected capacity change from 0 to 128
[   63.387159][ T4784] loop5: detected capacity change from 0 to 128
[   63.390179][   T29] kauditd_printk_skb: 701 callbacks suppressed
[   63.390205][   T29] audit: type=1326 audit(1749873471.669:5039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4785 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b636e929 code=0x7ffc0000
[   63.394274][ T4784] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   63.423294][   T29] audit: type=1326 audit(1749873471.679:5040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4785 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b636e929 code=0x7ffc0000
[   63.458704][   T29] audit: type=1326 audit(1749873471.679:5041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4785 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6b636e929 code=0x7ffc0000
[   63.471715][ T4784] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   63.482160][   T29] audit: type=1326 audit(1749873471.679:5042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4785 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b636e929 code=0x7ffc0000
[   63.514763][   T29] audit: type=1326 audit(1749873471.679:5043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4785 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b636e929 code=0x7ffc0000
[   63.531690][ T4252] FAT-fs (loop5): error, corrupted directory (invalid entries)
[   63.538124][   T29] audit: type=1326 audit(1749873471.679:5044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4785 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fb6b636e929 code=0x7ffc0000
[   63.545780][ T4252] FAT-fs (loop5): Filesystem has been set read-only
[   63.568960][   T29] audit: type=1326 audit(1749873471.679:5045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4785 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b636e929 code=0x7ffc0000
[   63.578788][ T4252] FAT-fs (loop5): error, corrupted directory (invalid entries)
[   63.598933][   T29] audit: type=1326 audit(1749873471.679:5046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4785 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fb6b636e929 code=0x7ffc0000
[   63.598975][   T29] audit: type=1326 audit(1749873471.679:5047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4785 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b636e929 code=0x7ffc0000
[   63.599039][   T29] audit: type=1326 audit(1749873471.679:5048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4785 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb6b636e929 code=0x7ffc0000
[   63.711691][ T4788] syz_tun (unregistering): left allmulticast mode
[   63.723859][ T4791] tipc: Enabling of bearer <eth:s> rejected, failed to enable media
[   63.786470][ T4793] bridge0: entered promiscuous mode
[   63.789623][ T4799] loop1: detected capacity change from 0 to 128
[   63.794385][ T4793] macvlan2: entered promiscuous mode
[   63.799318][ T4799] EXT4-fs: Ignoring removed nobh option
[   63.806431][ T4799] ext4 filesystem being mounted at /76/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   63.823598][ T4793] bridge0: port 3(macvlan2) entered blocking state
[   63.833347][ T4793] bridge0: port 3(macvlan2) entered disabled state
[   63.841295][ T4793] macvlan2: entered allmulticast mode
[   63.847203][ T4793] bridge0: entered allmulticast mode
[   63.854406][ T4793] macvlan2: left allmulticast mode
[   63.860629][ T4793] bridge0: left allmulticast mode
[   63.868241][ T4793] bridge0: left promiscuous mode
[   63.876605][ T4788] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   63.921043][  T160] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.970464][  T160] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.009854][  T160] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.051219][  T160] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.168527][ T4829] loop3: detected capacity change from 0 to 128
[   64.175479][ T4829] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   64.187806][  T160] bridge_slave_1: left allmulticast mode
[   64.193497][  T160] bridge_slave_1: left promiscuous mode
[   64.199372][  T160] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.208540][ T4829] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   64.218875][  T160] bridge_slave_0: left allmulticast mode
[   64.224547][  T160] bridge_slave_0: left promiscuous mode
[   64.230334][  T160] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.330572][  T160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   64.341585][  T160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   64.353312][  T160] bond0 (unregistering): Released all slaves
[   64.392036][ T4812] chnl_net:caif_netlink_parms(): no params data found
[   64.437921][ T4812] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.445074][ T4812] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.452538][ T4812] bridge_slave_0: entered allmulticast mode
[   64.459484][ T4812] bridge_slave_0: entered promiscuous mode
[   64.466875][ T4812] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.473961][ T4812] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.481246][ T4812] bridge_slave_1: entered allmulticast mode
[   64.488001][ T4812] bridge_slave_1: entered promiscuous mode
[   64.509819][  T160] hsr_slave_0: left promiscuous mode
[   64.517552][  T160] hsr_slave_1: left promiscuous mode
[   64.523660][  T160] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   64.531160][  T160] batman_adv: batadv0: Removing interface: batadv_slave_0
[   64.539539][  T160] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   64.546990][  T160] batman_adv: batadv0: Removing interface: batadv_slave_1
[   64.579899][  T160] veth1_macvtap: left promiscuous mode
[   64.585920][  T160] veth0_macvtap: left promiscuous mode
[   64.591498][  T160] veth1_vlan: left promiscuous mode
[   64.597001][  T160] veth0_vlan: left promiscuous mode
[   64.683923][  T160] team0 (unregistering): Port device team_slave_1 removed
[   64.694440][  T160] team0 (unregistering): Port device team_slave_0 removed
[   64.740171][ T4812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.752810][ T4812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.777745][ T4812] team0: Port device team_slave_0 added
[   64.785230][ T4812] team0: Port device team_slave_1 added
[   64.804384][ T4812] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.811508][ T4812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.837632][ T4812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.849690][ T4812] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.856783][ T4812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.882837][ T4812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.914505][ T4812] hsr_slave_0: entered promiscuous mode
[   64.921140][ T4812] hsr_slave_1: entered promiscuous mode
[   64.927430][ T4812] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.935159][ T4812] Cannot create hsr debugfs directory
[   65.035254][ T4812] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   65.044009][   T12] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   65.045077][ T4812] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   65.062269][ T4812] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   65.072091][ T4812] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   65.109407][ T4812] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.126331][ T4812] 8021q: adding VLAN 0 to HW filter on device team0
[   65.138207][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.145347][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.158285][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.165435][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.197484][ T4812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.250798][ T4812] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.306562][ T4877] loop4: detected capacity change from 0 to 128
[   65.367072][ T4812] veth0_vlan: entered promiscuous mode
[   65.377543][ T4812] veth1_vlan: entered promiscuous mode
[   65.393603][ T4812] veth0_macvtap: entered promiscuous mode
[   65.401109][ T4812] veth1_macvtap: entered promiscuous mode
[   65.413499][ T4812] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.425347][ T4812] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.436865][ T4812] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.445848][ T4812] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.455668][ T4812] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.464421][ T4812] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.537694][ T4894] netlink: 'syz.6.411': attribute type 15 has an invalid length.
[   65.549214][ T4896] tipc: Enabling of bearer <eth:s> rejected, failed to enable media
[   65.563013][ T4898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.429'.
[   65.572913][ T4898] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   65.586433][ T4898] batman_adv: batadv0: Removing interface: batadv_slave_0
[   65.754121][ T4905] netlink: 28 bytes leftover after parsing attributes in process `syz.6.431'.
[   65.763462][ T4906] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[   65.865455][ T4908] loop6: detected capacity change from 0 to 128
[   65.872705][ T4908] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   65.884847][ T4908] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   66.056930][ T4915] loop3: detected capacity change from 0 to 128
[   66.063643][ T4915] EXT4-fs: Ignoring removed nobh option
[   66.072081][ T4915] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   66.537533][ T4932] bridge0: entered promiscuous mode
[   66.544212][ T4932] macvlan2: entered promiscuous mode
[   66.567583][ T4932] bridge0: port 3(macvlan2) entered blocking state
[   66.575560][ T4932] bridge0: port 3(macvlan2) entered disabled state
[   66.585222][ T4932] macvlan2: entered allmulticast mode
[   66.592621][ T4932] bridge0: entered allmulticast mode
[   66.623424][ T4932] macvlan2: left allmulticast mode
[   66.630923][ T4932] bridge0: left allmulticast mode
[   66.644032][ T4932] bridge0: left promiscuous mode
[   66.731454][  T178] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   66.816842][ T4946] netlink: 28 bytes leftover after parsing attributes in process `syz.1.442'.
[   66.827604][ T4947] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[   66.910588][ T4951] loop6: detected capacity change from 0 to 256
[   66.937995][ T4953] loop1: detected capacity change from 0 to 2048
[   66.971006][ T4953] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   67.042800][ T4959] loop1: detected capacity change from 0 to 128
[   67.059776][ T4964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.448'.
[   67.069553][ T4964] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.083260][ T4964] batman_adv: batadv0: Removing interface: batadv_slave_0
[   67.127050][ T4972] loop3: detected capacity change from 0 to 128
[   67.133586][ T4972] EXT4-fs: Ignoring removed nobh option
[   67.141246][ T4972] ext4 filesystem being mounted at /98/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   67.214094][ T4978] loop3: detected capacity change from 0 to 128
[   67.221175][ T4978] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   67.234680][ T4978] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   67.634747][ T4979] ==================================================================
[   67.642944][ T4979] BUG: KCSAN: data-race in vfs_fsync_range / writeback_single_inode
[   67.650978][ T4979] 
[   67.653325][ T4979] write to 0xffff888106eaae28 of 4 bytes by task 4978 on cpu 0:
[   67.660999][ T4979]  writeback_single_inode+0x14a/0x3e0
[   67.666467][ T4979]  sync_inode_metadata+0x5b/0x90
[   67.671452][ T4979]  __generic_file_fsync+0xf8/0x140
[   67.676610][ T4979]  fat_file_fsync+0x49/0x100
[   67.681258][ T4979]  vfs_fsync_range+0x10d/0x130
[   67.686049][ T4979]  generic_file_write_iter+0x1b8/0x2f0
[   67.691539][ T4979]  iter_file_splice_write+0x5f2/0x970
[   67.696970][ T4979]  direct_splice_actor+0x153/0x2a0
[   67.702145][ T4979]  splice_direct_to_actor+0x30f/0x680
[   67.707567][ T4979]  do_splice_direct+0xda/0x150
[   67.712384][ T4979]  do_sendfile+0x380/0x650
[   67.716844][ T4979]  __x64_sys_sendfile64+0x105/0x150
[   67.722089][ T4979]  x64_sys_call+0xb39/0x2fb0
[   67.726732][ T4979]  do_syscall_64+0xd2/0x200
[   67.731276][ T4979]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.737214][ T4979] 
[   67.739572][ T4979] read to 0xffff888106eaae28 of 4 bytes by task 4979 on cpu 1:
[   67.747163][ T4979]  vfs_fsync_range+0x9b/0x130
[   67.751869][ T4979]  generic_file_write_iter+0x1b8/0x2f0
[   67.757368][ T4979]  iter_file_splice_write+0x5f2/0x970
[   67.762796][ T4979]  direct_splice_actor+0x153/0x2a0
[   67.767970][ T4979]  splice_direct_to_actor+0x30f/0x680
[   67.773488][ T4979]  do_splice_direct+0xda/0x150
[   67.778315][ T4979]  do_sendfile+0x380/0x650
[   67.782798][ T4979]  __x64_sys_sendfile64+0x105/0x150
[   67.788560][ T4979]  x64_sys_call+0xb39/0x2fb0
[   67.793197][ T4979]  do_syscall_64+0xd2/0x200
[   67.797735][ T4979]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.803669][ T4979] 
[   67.806020][ T4979] value changed: 0x00000038 -> 0x00000022
[   67.811780][ T4979] 
[   67.814134][ T4979] Reported by Kernel Concurrency Sanitizer on:
[   67.820328][ T4979] CPU: 1 UID: 0 PID: 4979 Comm: syz.3.452 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(voluntary) 
[   67.832690][ T4979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   67.842790][ T4979] ==================================================================
[   67.886450][ T4983] loop6: detected capacity change from 0 to 128
[   67.976398][ T4985] ALSA: seq fatal error: cannot create timer (-19)
[   68.067271][   T12] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)