last executing test programs:

2.128433233s ago: executing program 2 (id=73):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0xa)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c80))
sendfile(r1, r0, 0x0, 0x80000000)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback=<r2=>0xffffffffffffffff, 0x2b, 0x1, 0x7ee, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], <r3=>0x0}, 0x40)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], 0x0, 0x8d, &(0x7f0000000480)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0x64, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000c00)=ANY=[@ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="2a000000050000a042e00d660ea253989f2022aafd82b9551039b9ac4328e4afff6071f9c769ce0547c536f26937b0b23486d29129e930cee1307e3689262aed51d316ea48e11236bc14c7eb9389645ea895ce42d789e71880839795c38a1c", @ANYRES32=r1, @ANYBLOB, @ANYRES32, @ANYRES64=r3], 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = accept4$vsock_stream(r2, &(0x7f0000000cc0)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x800)
connect$vsock_stream(r6, &(0x7f0000000d00)={0x28, 0x0, 0xfffffffe, @hyper}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000005c0))
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB='uni_xlate=0,shortname=win95,shortname=winnt,iocharset=macromanian,shortname=lower,shortname=lower,rodir,utf8=0,nfs=nostale_ro,uid=', @ANYRESHEX=0x0, @ANYBLOB=',rodir,shortname=win95,umask=00000000000000000000211,iocharset=ascii,uid=', @ANYRESHEX=0x0, @ANYBLOB=',utf8=1,\b'], 0x1, 0x2b0, &(0x7f0000000140)="$eJzs3T9rO3UcB/DPpWkSdUhmEbzB+Ufb1SUdWhA7KR100WJbKE0QWihUxLSTq0/ARyAIrj4HF5+B4Co4FiycXO6uaf6dVprWH329ln76ve/7vn96IUPJN5+/Mzw9TOP4+uvfotNJotGPftwk0YtGVK5iSv+7AABeZzdZFn9mhYfkkojorG5aAMAKzb3/J0l94KenmRcAsDoff/Lph9t7ezsfpWkndoffXuzn7//5z+L69nGcxCCOYiO6cRuR3Snq3SzLRs0014v3hqOL/Tw5/OyX8v7bf0SM85vRjd64aTr/wd7OZlq4lx/l83izHL+f57eiG39NjV/9g2Jnay4fEc3e9PxfRTd+/SK+jEEcjicxGf+bzTQ9+bnakTyfjC722+N+E9naE/w5AAAAAAAAAAAAAAAAAAAAAAB4IV6VZ+e0Y3x+T95Unr+zdpv/sh5ppTd9Pk+RvzstcOZ8oFEW31fn62ykaZqVHSf5ZrzdjObzrBoAAAAAAAAAAAAAAAAAAAD+X84vvzo9GAyOzh6lqE4DqD7W/1/v07/X8m4s7ZwPc9CejNUoy5o7x1rVJ4monUa+iEfalvri6vKNZXP+4ceaeGdRqvPPg67X7c/jFNXTdXqQFHuYzPRpx2QVRRGN+w9kK87Os38zVmvZpexBj19r4aXug9feemtcjGr6RFI3sfd/L7ahbElmV9Ea7+rC+HpZlPHG3NPbyVtay+Jzr5Qp+asscVoHAAAAAAAAAAAAAAAAAACs1ORDvwsuXtdGG1l7ZdMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCc1+f7/u6IRsy2zxagM1/Upi1acnT/zEgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgB/g4AAP//6w9Qcg==")
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='ext4_es_find_extent_range_enter\x00', r7}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52d, &(0x7f0000000640)="$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")
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000080)='W', 0x1}], 0x1, 0x800be6b, 0x0, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff})
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="1200000024000000040000000200000000000000", @ANYRES32, @ANYBLOB="00000000003c671c96d3614dfe8b2be1fb6e0000482eca36aace2c350000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r11}, &(0x7f0000000700), &(0x7f0000000740)=r10}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609)

1.867138485s ago: executing program 4 (id=76):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000680)='$\x00\xe1s\r\xa7\xda\x15\xe9\x0e\xb6\x80\xdb\xab\x15}\xdd\xc5\xe1\xfb\f\xd3bo\x81\xef\xad&\xf7\xd4\xf8\xb8|s\x16\xd1\xfb\xfd\xc2@\x18l\xfe(,\xb6)\x84\xc0\xc0^5e\xcc\xe0\xdf`Z;\x1a\x94\xbf\xe6\x12\x1d>\x1e\xd1+\\>\xcf\xb0\x95\xf0c\xea\xbfO#\xc6\xef\x80\fi\xb9\xb5E\x85\xb2S\xc3%Q\xb7\x1eo=\xc8;\x8a\x1a\x7f=k$]?\xe4\x91^', 0x0)
close(r2)

1.815842126s ago: executing program 4 (id=77):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000000)=0x60, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$inet6(0x10, 0x3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r5}, 0x10)
sendto$inet6(r3, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000001300), 0x80)
r6 = io_uring_setup(0x410d, &(0x7f0000000200)={0x0, 0x23cf, 0x0, 0xfffffffc})
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r7, 0x0, 0x1100000001}, 0x18)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0xfffffffffffffe3b}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x78}}, 0x0)
r9 = eventfd2(0x0, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000000000)=r9, 0x1)
io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20)
read$eventfd(r9, &(0x7f0000000040), 0x8)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20)
setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000012c0)={0x6, 0x7, 0x4, 0x34, 0x5b, 0x2, 0x5, 0x10, 0x7d, 0x40, 0xf7, 0x40, 0x0, 0x7}, 0xe)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg0\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0)
preadv(r10, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/4094, 0xffe}], 0x1, 0xf0, 0x3)

1.732835956s ago: executing program 4 (id=78):
syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x808810, &(0x7f00000002c0)=ANY=[@ANYBLOB="646f74732c6e6f646f74732c646f733178666c6f7070792c646973636172642c636865636b3d7374726963742c646f74732c756d61736b3d30303030303030303030303030303030303030303030302c005cfc62f4d02467f358b5994840ea56b0221d013e71e44b8219d56c01000100d5bfd1b1537d0559da1ee418effe196657db344d30f27f6c0609979d6c93505e2d63e489bba6c6ee52f58754c60dfcc1d4"], 0x1, 0x25a, &(0x7f0000000380)="$eJzs201rE20UxvGrb0/fnrbxrdpuPOhGN4PWhesgLYgBpTaigsKUTjUkJmVmwERcdO3Kz1FcuhPEL5Bv4S4IUjddOZJM0iZpRVtpJqX/32ZO5iLJfXNmwllkao/fv8qvjytmGpQ2tSOl6tVIfHagmQ426v/UblPXf9zefvfwydN76UxmcdlsKb1ya8HMpi9/fv32w5Uv4eSjj9OfRlVNPa99X/hana3O1X6uvMwFlgusWArNtdVSKXRXC56t5YK8Y/ag4LmBZ7li4Pkd+XqhtLFRMbe4NjWx4XtBYG6xYnmvYmHJQr9i7gs3VzTHcWxqQviT7NbysptOehU4Pq17d1HS/L40u9XzBQEAgMTF83/grLuhBge65v+m/pr/h5rfzPz/7/5+/h+otxonku+n3WfN+1caakuY/wEAAAAAAAAAAAAAAAAAAAAAOAl2omgmiqKZ1nFEajzhEzVfj0uakDQp6X9JU5KmJc1ISkk6I+mspHOSzku6IGlW0kVJlyTNtX1W0nvFfvT/dGt7cG9M+rZZzpaz8THOl+5mFm9YQ2rvXdvlcnZoN78Z59aZjzaum3q+cGA+pmtX47ye3bmf6crntXb82z/1HNt1YH8d53d5XLVdH139G9b8cM+2gSMKKm/ybqHg+RQUhy5GJfXBMo5UDHeeGUt6Pf1WJP3LhF7Ya3rSKwEAAAAAAAAAAAAAAAAAHEYv/k6Y9B4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAll8BAAD//w3ezPI=")
r0 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fchown(r1, 0x0, 0xee01)
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x4, 0x5, 0x0, 0x0, 0x40000000, 0xe0})
r2 = openat(r1, &(0x7f0000000640)='./file0\x00', 0x410002, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="2500f34a4152f2e728842e0000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='signal_generate\x00', r3}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x4, &(0x7f0000000780)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000600)='rxrpc_peer\x00', r4}, 0x18)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
unshare(0x62040200)
shutdown(r5, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={<r6=>0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0xfffffffc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, &(0x7f0000000040)=0x84)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000000140)={0x5, 0x1, 0xc, 0x2, @vifc_lcl_addr=@rand_addr=0x64010102, @broadcast}, 0x10)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b0000000000000000150000e58023d4bf5a479698a6741e960d60bbd6dc68a1df511642ff1c9f0e5f58090d125454a42b3ab91708679fdb26994c008f3492b70b8d7c84b6e87fd35ac85f393cb8b11bd6e519ff0939f3aef4f787486fcc81357595add4fc918cd2b2b7844a74babc7284669407e5c4174aa2a845c829f620c3e5006205acb53256a2db466ff39b80e0f1086f0fbcee927d481d4a5d12ada2746269c01b7c9115591bef6b9b0ce29974e16b43ec29"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000a80)='kfree\x00', r10}, 0x18)
setsockopt$MRT_FLUSH(r8, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mm_page_alloc\x00', r7}, 0x10)
creat(&(0x7f0000000080)='./bus\x00', 0x0)

1.580908238s ago: executing program 1 (id=84):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10)
mq_notify(0xffffffffffffffff, 0x0)

1.541311738s ago: executing program 1 (id=85):
r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x400, 0x0)
readv(r0, &(0x7f0000000c40)=[{&(0x7f0000000a40)=""/89, 0x59}], 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
rmdir(&(0x7f0000000080)='./file0\x00')
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg1\x00'})
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r3}, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0)
pwritev2(r2, &(0x7f0000000180)=[{&(0x7f0000000400)="ba", 0x1}], 0x1, 0xe7b, 0x5, 0x1)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1d7)
sendfile(r4, r4, 0x0, 0xfffe80)

1.32300674s ago: executing program 0 (id=88):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000000)=0x60, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$inet6(0x10, 0x3, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.swap.events\x00', 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000001300), 0x80)
r6 = io_uring_setup(0x410d, &(0x7f0000000200)={0x0, 0x23cf, 0x0, 0xfffffffc})
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r7, 0x0, 0x1100000001}, 0x18)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0xfffffffffffffe3b}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x78}}, 0x0)
r9 = eventfd2(0x0, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000000000)=r9, 0x1)
io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20)
read$eventfd(r9, &(0x7f0000000040), 0x8)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20)
setsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000012c0)={0x6, 0x7, 0x4, 0x34, 0x5b, 0x2, 0x5, 0x10, 0x7d, 0x40, 0xf7, 0x40, 0x0, 0x7}, 0xe)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg0\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0)
preadv(r10, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/4094, 0xffe}], 0x1, 0xf0, 0x3)

1.25301802s ago: executing program 3 (id=89):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r0}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)

1.25028532s ago: executing program 2 (id=90):
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004006, &(0x7f00000010c0)={[{@jqfmt_vfsold}, {@nouid32}, {@nobh}, {@stripe={'stripe', 0x3d, 0xffff}}, {@block_validity}, {@grpjquota, 0x22}], [], 0x2}, 0xc4, 0x48b, &(0x7f0000001e00)="$eJzs3EtvG0UcAPD/2k36Ig9KefQBNRRERCFp0qcQFxBIvSAhwQGOIQ1VqNuiJki0qmhAqBwRnwA4IvEJOMEFAScQV7gjpAr1QuGAjHa92zqxExy7Ttr695Mcz3h3PfPf3bHHM7sJoG9V0j9JRC0ifo2IkXp26QqV+tP1a5dm/r52aSaJWu3VP5Nsvb+uXZopVi22255nxkoRpY+S2NOi3PkLF09PV6uz5/P8xMKZdybmL1x8Zu7M9KnZU7Nnp44fPxxx7OjUkVsS51Ba193vn9u768Qbn748U4s3f/gqre89+fLGOOpGuy6zEpWl+zIzmP19out3v70MNaSTTRtYEdakHBHp4RrI2v9IlOPmwRuJlz7c0MoBPVWr1Wqbm14tF4nFGnAXS7LPgNpgwwfCctvWu07Aeii+6NPfv8Vjnboet4Wrz9d/AKVxX88f9SWbopQ+ban/Yh/qUfmViHh98Z/P0ke0HIdobUuP6gMA3P2+Sfs/T7fq/w0nDzSsN5zPDY1GxIGI2BER90XEzoi4PyLSdR+MiIfWWH5lWb65//Pz1o4Ca1Pa/3sun9ta2v8rFauMlvPcUBb/QPLWXHX2YL5PxmJgc5qfXKWMb1/85ZOVljX2/9JHWn7RF8zr8cemZQN0J6cXpruJudGzc/Xn5viTG0MBSUTsiojdHbx/us/mnvpyb5oe3t68/P/jX8UtmGeqfRHxZD3+xVgWfyGpl9Q8P3lo8tjRqSMTW6I6e3CiOCua/fjTlVca8wMN6XbjX+w+1JaufhCxbYXjnymaQTFfO7/2Mq789vGKv2k6Pf8Hk9eydDFs9d70wsL5yYjB/IUlr0/d3LbIF+un8Y/tbxX/cLIj4t/P8+32RER6Ej8cEY9ExL687o9GxGMRsX+V+L9/4fG3V99DHZ7/t0Aa/8nVjn/EaNI4X99Bonz6u69XKr+94384S43lr7Tz+dduBbvZdwAAAHCnKGXXwCel8RvpUml8vH4N/87YVqqem184UIl3z56sXys/GgOlYqRrpGE8dDIfGy7yU2m6GLmdq84eioh7sxHFrdny8Zlz1V7NqQPt2b5C+0/9Xt7o2gE9t6Z5tOY72oA7mPs1oX9p/9C/tH/oX9o/9K9W7f9yxPUNqAqwznz/Q//S/qF/af/Qv7R/6EvNt8QXF+13cqf/zcSOE11t3keJco/eORr/aUcPElHa8F3XeaJ0O1RjX57YHBHtbnW5p8d0+fkDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABw5/svAAD//2+S3vE=")
lchown(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18)

1.24935877s ago: executing program 3 (id=91):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10)
mq_notify(0xffffffffffffffff, 0x0)

1.23290428s ago: executing program 3 (id=92):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000680)='$\x00\xe1s\r\xa7\xda\x15\xe9\x0e\xb6\x80\xdb\xab\x15}\xdd\xc5\xe1\xfb\f\xd3bo\x81\xef\xad&\xf7\xd4\xf8\xb8|s\x16\xd1\xfb\xfd\xc2@\x18l\xfe(,\xb6)\x84\xc0\xc0^5e\xcc\xe0\xdf`Z;\x1a\x94\xbf\xe6\x12\x1d>\x1e\xd1+\\>\xcf\xb0\x95\xf0c\xea\xbfO#\xc6\xef\x80\fi\xb9\xb5E\x85\xb2S\xc3%Q\xb7\x1eo=\xc8;\x8a\x1a\x7f=k$]?\xe4\x91^', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r1)
close(r1)

1.22868181s ago: executing program 0 (id=93):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYRES16=r0], 0x0, 0x10001, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x393, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x2)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x2)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000006a00)={&(0x7f0000006580)='tcp_probe\x00', r1, 0x0, 0x9}, 0x18)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'pimreg1\x00', <r3=>0x0})
clock_gettime(0x0, &(0x7f0000006980)={<r4=>0x0, <r5=>0x0})
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006840)=[{{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000180)=[{0xfffffffffffffffc}], 0x1, &(0x7f00000001c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000000280), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000480)=""/150, 0x96}, {&(0x7f0000000200)=""/45, 0x2d}, {&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000000580)=""/163, 0xa3}, {&(0x7f0000000640)=""/155, 0x9b}, {&(0x7f0000000700)=""/188, 0xbc}, {&(0x7f00000007c0)=""/229, 0xe5}], 0x7, &(0x7f00000008c0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000000940)=@abs, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000001f80)=""/4096, 0x1000}, {&(0x7f00000009c0)=""/145, 0x91}, {&(0x7f0000000a80)=""/85, 0x55}, {&(0x7f0000002f80)=""/4096, 0x1000}], 0x4, &(0x7f0000000b40)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000000bc0)=@abs, 0x6e, &(0x7f0000005280)=[{&(0x7f0000000c40)=""/96, 0x60}, {&(0x7f0000000cc0)=""/129, 0x81}, {&(0x7f0000000d80)=""/1, 0x1}, {&(0x7f0000000dc0)=""/213, 0xd5}, {&(0x7f0000003f80)=""/75, 0x4b}, {&(0x7f0000004000)=""/102, 0x66}, {&(0x7f0000004080)=""/220, 0xdc}, {&(0x7f0000004180)=""/212, 0xd4}, {&(0x7f0000004280)=""/4096, 0x1000}, {&(0x7f0000000ec0)=""/38, 0x26}], 0xa, &(0x7f0000005340)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f00000053c0)=@abs, 0x6e, &(0x7f0000006780)=[{&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/7, 0x7}, {&(0x7f0000006540)=""/26, 0x1a}, {&(0x7f0000006580)}, {&(0x7f00000065c0)=""/50, 0x32}, {&(0x7f0000006600)=""/27, 0x1b}, {&(0x7f0000006640)=""/56, 0x38}, {&(0x7f0000006680)=""/200, 0xc8}], 0x9}}], 0x5, 0x40, &(0x7f00000069c0)={r4, r5+60000000})
socket$unix(0x1, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRESOCT, @ANYRESHEX=r2, @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0)

1.150309431s ago: executing program 3 (id=94):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xab1}, 0x18)
mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380), 0xd, 0x5ed, &(0x7f0000001600)="$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")
symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') (fail_nth: 1)

1.149553321s ago: executing program 0 (id=95):
bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe04)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x3000002, 0x6031, 0xffffffffffffffff, 0x0)
r0 = open(0x0, 0x145142, 0x11c)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff)
close(r2)
execveat$binfmt(0xffffffffffffff9c, r1, 0x0, &(0x7f0000000880)={[], 0xf000}, 0x0)
sendfile(r0, r0, 0x0, 0x800000009)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0xc, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
clock_settime(0x7, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x4, 0x1088f109, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)

678.859465ms ago: executing program 3 (id=96):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x8000, 0x2, 0x4, 0x3}, {0x2, 0x1, 0x0, 0x80}, {0x4d9d, 0xb8, 0x0, 0x642}, {0x6, 0xf9, 0x5b, 0x5}, {0x8, 0xf4, 0x0, 0x7}, {0xfffb, 0x8, 0x9, 0xffff}, {0x80, 0x8, 0x2, 0xf}, {0x200, 0x4, 0x3, 0x7}]})
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
shutdown(r4, 0x1)
splice(r4, 0x0, r3, 0x0, 0x406f413, 0x0)
ioctl$IOC_PR_PREEMPT_ABORT(r3, 0x401870cc, &(0x7f0000000000)={0x7fffffff, 0x5, 0x13cc, 0xf})
ioctl$int_in(r0, 0x5421, &(0x7f0000000800)=0x100000001)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10)
close(r0)
fsync(r1)

637.962875ms ago: executing program 4 (id=97):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000680)='$\x00\xe1s\r\xa7\xda\x15\xe9\x0e\xb6\x80\xdb\xab\x15}\xdd\xc5\xe1\xfb\f\xd3bo\x81\xef\xad&\xf7\xd4\xf8\xb8|s\x16\xd1\xfb\xfd\xc2@\x18l\xfe(,\xb6)\x84\xc0\xc0^5e\xcc\xe0\xdf`Z;\x1a\x94\xbf\xe6\x12\x1d>\x1e\xd1+\\>\xcf\xb0\x95\xf0c\xea\xbfO#\xc6\xef\x80\fi\xb9\xb5E\x85\xb2S\xc3%Q\xb7\x1eo=\xc8;\x8a\x1a\x7f=k$]?\xe4\x91^', 0x0)
close(r2)

601.334655ms ago: executing program 4 (id=98):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
openat(0xffffffffffffffff, 0x0, 0x515401, 0x408)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x0, 0x1}, 0x23)
accept(r1, &(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000000)=0x80)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f00000000c0)='.\x00', 0x4000000e)
close(0xffffffffffffffff)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0)
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,')

575.659946ms ago: executing program 3 (id=99):
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet(0x2, 0x2, 0xfffffffc)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r2}, 0x10)
r3 = socket$key(0xf, 0x3, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00'}, 0x10)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x4e24, 0x0, 0xffff, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x1, 0x0, 0x2, 0x0, 0x0, 0x3, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0x2}, 0xfffffffe}}, 0xb8}}, 0x4004)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}}}, 0xb8}}, 0x0)
io_setup(0x5, &(0x7f0000000040))
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000740)={<r6=>0x0, @in={{0x2, 0x4e23, @remote}}}, &(0x7f0000000680)=0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000900)={r6, 0xdc, &(0x7f0000000800)=[@in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e22, @private=0xa010100}, @in6={0xa, 0x4e23, 0x1, @mcast2, 0xc}, @in6={0xa, 0x4e21, 0x4, @private1, 0x81}, @in={0x2, 0x4e20, @private=0xa010101}, @in6={0xa, 0x4e22, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, @in6={0xa, 0x4e24, 0x5, @private0, 0xa}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8001}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}]}, &(0x7f0000000940)=0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0)
sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x38, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x80)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000000)=""/7, 0x2}, 0x20)
bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000400), 0x20000000}, 0x20)
fstat(r2, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, <r9=>0x0}, &(0x7f0000000280)=0x5)
setreuid(0x0, r9)
mount$nfs(&(0x7f0000000980)='%^)+@^)*\xee],#\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x20c001, &(0x7f0000000ac0)={[{'\\'}, {'\x00'}, {'sys_exit\x00'}, {'\xb2*{$'}, {'CT\x00'}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'GPL\x00'}}, {@uid_lt={'uid<', r7}}, {@uid_eq={'uid', 0x3d, r9}}, {@obj_type={'obj_type', 0x3d, '.'}}, {@dont_hash}, {@hash}, {@permit_directio}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@subj_user={'subj_user', 0x3d, '^'}}, {@seclabel}]})
sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0xd, 0x0, 0x700, 0x0, [@sadb_key={0x3, 0x9, 0x50, 0x0, "e9255bb992464e73a021"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x68}, 0x1, 0x7}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0xe0, 0x11, 0x148, 0xe0, 0x0, 0x208, 0x2a8, 0x2a8, 0x208, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xc0, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x6, 0x1c000, 0xa53, 'snmp\x00', 'syz1\x00', {0x800}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300)

520.234036ms ago: executing program 4 (id=100):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0xa)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c80))
sendfile(r1, r0, 0x0, 0x80000000)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback=<r2=>0xffffffffffffffff, 0x2b, 0x1, 0x7ee, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], <r3=>0x0}, 0x40)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], 0x0, 0x8d, &(0x7f0000000480)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0x64, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000c00)=ANY=[@ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="2a000000050000a042e00d660ea253989f2022aafd82b9551039b9ac4328e4afff6071f9c769ce0547c536f26937b0b23486d29129e930cee1307e3689262aed51d316ea48e11236bc14c7eb9389645ea895ce42d789e71880839795c38a1c", @ANYRES32=r1, @ANYBLOB, @ANYRES32, @ANYRES64=r3], 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = accept4$vsock_stream(r2, &(0x7f0000000cc0)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x800)
connect$vsock_stream(r6, &(0x7f0000000d00)={0x28, 0x0, 0xfffffffe, @hyper}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000005c0))
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB='uni_xlate=0,shortname=win95,shortname=winnt,iocharset=macromanian,shortname=lower,shortname=lower,rodir,utf8=0,nfs=nostale_ro,uid=', @ANYRESHEX=0x0, @ANYBLOB=',rodir,shortname=win95,umask=00000000000000000000211,iocharset=ascii,uid=', @ANYRESHEX=0x0, @ANYBLOB=',utf8=1,\b'], 0x1, 0x2b0, &(0x7f0000000140)="$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")
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='ext4_es_find_extent_range_enter\x00', r7}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52d, &(0x7f0000000640)="$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")
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000080)='W', 0x1}], 0x1, 0x800be6b, 0x0, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff})
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="1200000024000000040000000200000000000000", @ANYRES32, @ANYBLOB="00000000003c671c96d3614dfe8b2be1fb6e0000482eca36aace2c350000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r11}, &(0x7f0000000700), &(0x7f0000000740)=r10}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609)

347.058727ms ago: executing program 2 (id=101):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000680)='$\x00\xe1s\r\xa7\xda\x15\xe9\x0e\xb6\x80\xdb\xab\x15}\xdd\xc5\xe1\xfb\f\xd3bo\x81\xef\xad&\xf7\xd4\xf8\xb8|s\x16\xd1\xfb\xfd\xc2@\x18l\xfe(,\xb6)\x84\xc0\xc0^5e\xcc\xe0\xdf`Z;\x1a\x94\xbf\xe6\x12\x1d>\x1e\xd1+\\>\xcf\xb0\x95\xf0c\xea\xbfO#\xc6\xef\x80\fi\xb9\xb5E\x85\xb2S\xc3%Q\xb7\x1eo=\xc8;\x8a\x1a\x7f=k$]?\xe4\x91^', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r1)
close(r1)

278.922988ms ago: executing program 1 (id=102):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10)
mq_notify(0xffffffffffffffff, 0x0)

253.533198ms ago: executing program 1 (id=103):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000000)=0x60, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$inet6(0x10, 0x3, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.swap.events\x00', 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000001300), 0x80)
r6 = io_uring_setup(0x410d, &(0x7f0000000200)={0x0, 0x23cf, 0x0, 0xfffffffc})
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r7, 0x0, 0x1100000001}, 0x18)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0xfffffffffffffe3b}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x78}}, 0x0)
r9 = eventfd2(0x0, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000000000)=r9, 0x1)
io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20)
read$eventfd(r9, &(0x7f0000000040), 0x8)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20)
setsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000012c0)={0x6, 0x7, 0x4, 0x34, 0x5b, 0x2, 0x5, 0x10, 0x7d, 0x40, 0xf7, 0x40, 0x0, 0x7}, 0xe)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg0\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0)
preadv(r10, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/4094, 0xffe}], 0x1, 0xf0, 0x3)

240.070508ms ago: executing program 2 (id=104):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000680)='$\x00\xe1s\r\xa7\xda\x15\xe9\x0e\xb6\x80\xdb\xab\x15}\xdd\xc5\xe1\xfb\f\xd3bo\x81\xef\xad&\xf7\xd4\xf8\xb8|s\x16\xd1\xfb\xfd\xc2@\x18l\xfe(,\xb6)\x84\xc0\xc0^5e\xcc\xe0\xdf`Z;\x1a\x94\xbf\xe6\x12\x1d>\x1e\xd1+\\>\xcf\xb0\x95\xf0c\xea\xbfO#\xc6\xef\x80\fi\xb9\xb5E\x85\xb2S\xc3%Q\xb7\x1eo=\xc8;\x8a\x1a\x7f=k$]?\xe4\x91^', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r1)
close(r1)

225.353529ms ago: executing program 2 (id=105):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r0}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)

162.354099ms ago: executing program 2 (id=106):
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48)
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4)
pipe2$watch_queue(&(0x7f00000004c0), 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback=0x1b, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r2, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000004000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000008949000000200000000040000000"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000380)='tlb_flush\x00', r4}, 0x10)
getsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040))
write(r6, &(0x7f0000004200)='t', 0x1)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0700000004000000080000200800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000037191efe2a00000000000000"], 0x48)
sendfile(r6, r1, 0x0, 0x8000000)

145.094539ms ago: executing program 0 (id=107):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r3)
sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x18000}, 0x0)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r4, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x44815}, 0x50)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538)

117.340149ms ago: executing program 0 (id=108):
syz_open_dev$usbmon(&(0x7f0000000100), 0x3ff, 0x640082)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x0)
r1 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x4, 0x1088f109, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
add_key(0x0, 0x0, &(0x7f0000000400)="010000000037a788a11d1f000000000000006923c63a4541062101a59ea9cba39a989ca8c70b3692930208", 0x2b, r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup(0xffffffffffffffff)
recvmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}, 0x2142)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
syz_open_dev$usbfs(&(0x7f0000000200), 0x205, 0x1)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0)
ioctl$HIDIOCGRAWINFO(r4, 0x80084803, &(0x7f0000000280)=""/93)

58.90618ms ago: executing program 1 (id=109):
syz_emit_ethernet(0x36, &(0x7f0000000d00)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x64010102}, {{0x0, 0x8035, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc1}}}}}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r0=>0x0})
r1 = socket$inet(0x2, 0x4, 0xa77)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x18)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x1}, 0x18)
fcntl$dupfd(r1, 0x406, r2)
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000040)={0x1d, r0}, 0x10)

15.53164ms ago: executing program 1 (id=110):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x18)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r2, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
r3 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r3, 0x10d, 0xaa, 0x0, &(0x7f0000000000)) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1, 0x80000000}]}]}}, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r4, 0x0, 0x178}, 0x18) (async)
ioperm(0x0, 0x1, 0x1bf4) (async)
r5 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
r6 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x80, 0x0}, 0x2004c040) (async)
sendmsg$kcm(r6, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x80, 0x0}, 0x20040010) (async)
ptrace$getregset(0x4204, r5, 0x201, &(0x7f0000000440)={0x0, 0x1100}) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff020000000000000000000000000001"], 0x0) (async, rerun: 64)
kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) (rerun: 64)

0s ago: executing program 0 (id=111):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYRES16=r0], 0x0, 0x10001, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x393, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x2)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x2)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000006a00)={&(0x7f0000006580)='tcp_probe\x00', r1, 0x0, 0x9}, 0x18)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'pimreg1\x00', <r3=>0x0})
clock_gettime(0x0, &(0x7f0000006980)={<r4=>0x0, <r5=>0x0})
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006840)=[{{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000180)=[{0xfffffffffffffffc}], 0x1, &(0x7f00000001c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000000280), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000480)=""/150, 0x96}, {&(0x7f0000000200)=""/45, 0x2d}, {&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000000580)=""/163, 0xa3}, {&(0x7f0000000640)=""/155, 0x9b}, {&(0x7f0000000700)=""/188, 0xbc}, {&(0x7f00000007c0)=""/229, 0xe5}], 0x7, &(0x7f00000008c0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000000940)=@abs, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000001f80)=""/4096, 0x1000}, {&(0x7f00000009c0)=""/145, 0x91}, {&(0x7f0000000a80)=""/85, 0x55}, {&(0x7f0000002f80)=""/4096, 0x1000}], 0x4, &(0x7f0000000b40)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000000bc0)=@abs, 0x6e, &(0x7f0000005280)=[{&(0x7f0000000c40)=""/96, 0x60}, {&(0x7f0000000cc0)=""/129, 0x81}, {&(0x7f0000000d80)=""/1, 0x1}, {&(0x7f0000000dc0)=""/213, 0xd5}, {&(0x7f0000003f80)=""/75, 0x4b}, {&(0x7f0000004000)=""/102, 0x66}, {&(0x7f0000004080)=""/220, 0xdc}, {&(0x7f0000004180)=""/212, 0xd4}, {&(0x7f0000004280)=""/4096, 0x1000}, {&(0x7f0000000ec0)=""/38, 0x26}], 0xa, &(0x7f0000005340)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f00000053c0)=@abs, 0x6e, &(0x7f0000006780)=[{&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/7, 0x7}, {&(0x7f0000006540)=""/26, 0x1a}, {&(0x7f0000006580)}, {&(0x7f00000065c0)=""/50, 0x32}, {&(0x7f0000006600)=""/27, 0x1b}, {&(0x7f0000006640)=""/56, 0x38}, {&(0x7f0000006680)=""/200, 0xc8}], 0x9}}], 0x5, 0x40, &(0x7f00000069c0)={r4, r5+60000000})
socket$unix(0x1, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRESOCT, @ANYRESHEX=r2, @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.54' (ED25519) to the list of known hosts.
[   34.705966][   T30] audit: type=1400 audit(1741940412.469:81): avc:  denied  { mounton } for  pid=3290 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   34.707052][ T3290] cgroup: Unknown subsys name 'net'
[   34.729177][   T30] audit: type=1400 audit(1741940412.469:82): avc:  denied  { mount } for  pid=3290 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   34.756585][   T30] audit: type=1400 audit(1741940412.499:83): avc:  denied  { unmount } for  pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   34.776467][   T30] audit: type=1400 audit(1741940412.499:84): avc:  denied  { read } for  pid=2983 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   34.921888][ T3290] cgroup: Unknown subsys name 'cpuset'
[   34.928158][ T3290] cgroup: Unknown subsys name 'rlimit'
[   35.040409][   T30] audit: type=1400 audit(1741940412.799:85): avc:  denied  { setattr } for  pid=3290 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   35.063780][   T30] audit: type=1400 audit(1741940412.799:86): avc:  denied  { create } for  pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   35.084246][   T30] audit: type=1400 audit(1741940412.799:87): avc:  denied  { write } for  pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   35.104681][   T30] audit: type=1400 audit(1741940412.799:88): avc:  denied  { read } for  pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   35.115299][ T3293] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   35.124990][   T30] audit: type=1400 audit(1741940412.799:89): avc:  denied  { mounton } for  pid=3290 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   35.158495][   T30] audit: type=1400 audit(1741940412.799:90): avc:  denied  { mount } for  pid=3290 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   35.188260][ T3290] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   36.976722][ T3300] chnl_net:caif_netlink_parms(): no params data found
[   37.063557][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.070703][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.078103][ T3300] bridge_slave_0: entered allmulticast mode
[   37.084613][ T3300] bridge_slave_0: entered promiscuous mode
[   37.104565][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.111699][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.118903][ T3300] bridge_slave_1: entered allmulticast mode
[   37.125497][ T3300] bridge_slave_1: entered promiscuous mode
[   37.160990][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   37.190435][ T3307] chnl_net:caif_netlink_parms(): no params data found
[   37.199951][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   37.225716][ T3316] chnl_net:caif_netlink_parms(): no params data found
[   37.247299][ T3305] chnl_net:caif_netlink_parms(): no params data found
[   37.272467][ T3300] team0: Port device team_slave_0 added
[   37.279696][ T3300] team0: Port device team_slave_1 added
[   37.341697][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.348680][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.374681][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.403034][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.410207][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.417432][ T3307] bridge_slave_0: entered allmulticast mode
[   37.423913][ T3307] bridge_slave_0: entered promiscuous mode
[   37.430511][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.437569][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.463514][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.493998][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.501133][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.508365][ T3307] bridge_slave_1: entered allmulticast mode
[   37.514903][ T3307] bridge_slave_1: entered promiscuous mode
[   37.533826][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.540921][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.548256][ T3316] bridge_slave_0: entered allmulticast mode
[   37.554752][ T3316] bridge_slave_0: entered promiscuous mode
[   37.565877][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.573059][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.580206][ T3305] bridge_slave_0: entered allmulticast mode
[   37.586784][ T3305] bridge_slave_0: entered promiscuous mode
[   37.593512][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.600563][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.607853][ T3305] bridge_slave_1: entered allmulticast mode
[   37.614195][ T3305] bridge_slave_1: entered promiscuous mode
[   37.627368][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   37.636533][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.643660][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.650882][ T3316] bridge_slave_1: entered allmulticast mode
[   37.657347][ T3316] bridge_slave_1: entered promiscuous mode
[   37.679109][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   37.689324][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   37.709337][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   37.729172][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   37.741499][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   37.757860][ T3300] hsr_slave_0: entered promiscuous mode
[   37.764085][ T3300] hsr_slave_1: entered promiscuous mode
[   37.775751][ T3307] team0: Port device team_slave_0 added
[   37.781493][ T3309] chnl_net:caif_netlink_parms(): no params data found
[   37.791300][ T3307] team0: Port device team_slave_1 added
[   37.807383][ T3305] team0: Port device team_slave_0 added
[   37.827110][ T3316] team0: Port device team_slave_0 added
[   37.833492][ T3305] team0: Port device team_slave_1 added
[   37.839834][ T3316] team0: Port device team_slave_1 added
[   37.879290][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.886320][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.912303][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.933950][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.941032][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.967000][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.982748][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.989832][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.015948][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.026963][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.034022][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.059978][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.073615][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.080589][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.106658][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.128420][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.135513][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.161479][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.190174][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.197362][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.204599][ T3309] bridge_slave_0: entered allmulticast mode
[   38.211074][ T3309] bridge_slave_0: entered promiscuous mode
[   38.219829][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.227005][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.234238][ T3309] bridge_slave_1: entered allmulticast mode
[   38.240638][ T3309] bridge_slave_1: entered promiscuous mode
[   38.287605][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.297972][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.311816][ T3305] hsr_slave_0: entered promiscuous mode
[   38.317808][ T3305] hsr_slave_1: entered promiscuous mode
[   38.323687][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   38.331433][ T3305] Cannot create hsr debugfs directory
[   38.344758][ T3307] hsr_slave_0: entered promiscuous mode
[   38.350770][ T3307] hsr_slave_1: entered promiscuous mode
[   38.356744][ T3307] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   38.364403][ T3307] Cannot create hsr debugfs directory
[   38.384135][ T3316] hsr_slave_0: entered promiscuous mode
[   38.390148][ T3316] hsr_slave_1: entered promiscuous mode
[   38.396379][ T3316] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   38.404047][ T3316] Cannot create hsr debugfs directory
[   38.425147][ T3309] team0: Port device team_slave_0 added
[   38.447912][ T3309] team0: Port device team_slave_1 added
[   38.496022][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.503043][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.529066][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.540390][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.547392][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.573360][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.628939][ T3300] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   38.654025][ T3300] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   38.664661][ T3300] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   38.687840][ T3309] hsr_slave_0: entered promiscuous mode
[   38.694012][ T3309] hsr_slave_1: entered promiscuous mode
[   38.699871][ T3309] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   38.707555][ T3309] Cannot create hsr debugfs directory
[   38.720020][ T3300] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   38.779262][ T3307] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   38.790829][ T3307] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   38.815991][ T3307] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   38.833889][ T3307] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   38.843335][ T3316] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   38.855036][ T3316] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   38.864872][ T3316] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   38.875323][ T3316] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   38.912924][ T3305] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   38.922213][ T3305] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   38.931415][ T3305] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   38.948129][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.956608][ T3305] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   38.979587][ T3309] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   38.990198][ T3309] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   39.001983][ T3309] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   39.013093][ T3300] 8021q: adding VLAN 0 to HW filter on device team0
[   39.027209][ T3309] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   39.051471][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.058600][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.079971][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.087157][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.114495][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.149480][ T3307] 8021q: adding VLAN 0 to HW filter on device team0
[   39.158786][ T3300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   39.183815][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.190999][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.205399][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.224713][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.231844][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.260280][ T3307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   39.274028][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.289486][ T3316] 8021q: adding VLAN 0 to HW filter on device team0
[   39.302427][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.310729][ T1743] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.317923][ T1743] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.334034][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.341240][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.352293][ T3305] 8021q: adding VLAN 0 to HW filter on device team0
[   39.368943][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.376114][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.390394][ T3309] 8021q: adding VLAN 0 to HW filter on device team0
[   39.403769][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.414000][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.421232][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.430506][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.437596][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.469763][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.476897][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.498005][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.587900][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.612816][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.654483][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.664692][ T3300] veth0_vlan: entered promiscuous mode
[   39.679231][ T3307] veth0_vlan: entered promiscuous mode
[   39.693963][ T3300] veth1_vlan: entered promiscuous mode
[   39.714800][ T3307] veth1_vlan: entered promiscuous mode
[   39.730179][ T3300] veth0_macvtap: entered promiscuous mode
[   39.755695][ T3300] veth1_macvtap: entered promiscuous mode
[   39.769440][ T3307] veth0_macvtap: entered promiscuous mode
[   39.799867][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.809047][ T3307] veth1_macvtap: entered promiscuous mode
[   39.829917][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.843905][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.854433][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.865868][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.874776][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.885377][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.897642][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.909455][ T3300] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.918466][ T3300] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.927338][ T3300] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.936144][ T3300] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.958856][ T3316] veth0_vlan: entered promiscuous mode
[   39.966268][ T3307] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.975108][ T3307] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.983875][ T3307] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.992674][ T3307] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.005188][ T3309] veth0_vlan: entered promiscuous mode
[   40.022468][ T3305] veth0_vlan: entered promiscuous mode
[   40.035898][ T3316] veth1_vlan: entered promiscuous mode
[   40.044536][ T3309] veth1_vlan: entered promiscuous mode
[   40.054750][ T3305] veth1_vlan: entered promiscuous mode
[   40.060324][   T30] kauditd_printk_skb: 16 callbacks suppressed
[   40.060339][   T30] audit: type=1400 audit(1741940417.819:107): avc:  denied  { mounton } for  pid=3307 comm="syz-executor" path="/root/syzkaller.WJgag2/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   40.070086][ T3316] veth0_macvtap: entered promiscuous mode
[   40.090929][   T30] audit: type=1400 audit(1741940417.819:108): avc:  denied  { mount } for  pid=3307 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   40.101892][ T3316] veth1_macvtap: entered promiscuous mode
[   40.118637][   T30] audit: type=1400 audit(1741940417.819:109): avc:  denied  { mounton } for  pid=3307 comm="syz-executor" path="/root/syzkaller.WJgag2/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   40.134134][ T3309] veth0_macvtap: entered promiscuous mode
[   40.149643][   T30] audit: type=1400 audit(1741940417.819:110): avc:  denied  { mount } for  pid=3307 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   40.177404][   T30] audit: type=1400 audit(1741940417.819:111): avc:  denied  { mounton } for  pid=3307 comm="syz-executor" path="/root/syzkaller.WJgag2/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   40.204103][   T30] audit: type=1400 audit(1741940417.819:112): avc:  denied  { mounton } for  pid=3307 comm="syz-executor" path="/root/syzkaller.WJgag2/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   40.232708][   T30] audit: type=1400 audit(1741940417.819:113): avc:  denied  { unmount } for  pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   40.253667][   T30] audit: type=1400 audit(1741940417.999:114): avc:  denied  { mounton } for  pid=3307 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   40.261509][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   40.276546][   T30] audit: type=1400 audit(1741940417.999:115): avc:  denied  { mount } for  pid=3307 comm="syz-executor" name="/" dev="gadgetfs" ino=3781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   40.286945][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.286963][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   40.329665][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.342800][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.355529][ T3307] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   40.377522][ T3309] veth1_macvtap: entered promiscuous mode
[   40.383529][   T30] audit: type=1400 audit(1741940418.139:116): avc:  denied  { read write } for  pid=3307 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   40.416324][ T3439] loop3: detected capacity change from 0 to 256
[   40.424581][ T3305] veth0_macvtap: entered promiscuous mode
[   40.436044][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   40.446642][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.456545][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   40.467017][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.477921][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.485832][ T3305] veth1_macvtap: entered promiscuous mode
[   40.501841][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   40.512436][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.522377][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   40.532839][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.542679][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   40.553200][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.565179][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.577658][ T3316] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.586569][ T3316] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.595345][ T3316] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.604177][ T3316] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.613218][ T3443] syz.3.4: attempt to access beyond end of device
[   40.613218][ T3443] loop3: rw=2049, sector=256, nr_sectors = 4 limit=256
[   40.615524][ T3439] tipc: Started in network mode
[   40.631388][ T3439] tipc: Node identity fe80000000000000000000000000001e, cluster identity 4711
[   40.640256][ T3439] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   40.650618][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   40.661194][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.671073][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   40.674761][ T3444] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   40.681690][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.703307][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   40.713831][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.723681][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   40.734140][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.744732][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.754586][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   40.765149][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.765246][ T3445] loop0: detected capacity change from 0 to 128
[   40.775000][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   40.775027][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.801622][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   40.812285][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.830314][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.846834][ T3442] syz.0.1: attempt to access beyond end of device
[   40.846834][ T3442] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128
[   40.884045][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   40.894665][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.904564][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   40.915212][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.925089][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   40.935646][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.945589][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   40.956097][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.967048][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.980611][ T3309] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.989431][ T3309] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.998211][ T3309] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   41.006988][ T3309] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.028459][ T3305] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.037282][ T3305] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   41.046121][ T3305] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   41.054853][ T3305] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.166130][ T3459] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   41.186112][ T3459] loop1: detected capacity change from 0 to 512
[   41.198590][ T3459] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   41.211863][ T3459] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   41.222517][ T3461] loop3: detected capacity change from 0 to 512
[   41.229733][ T3461] EXT4-fs: Ignoring removed nobh option
[   41.243032][ T3461] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[   41.256360][ T3459] EXT4-fs (loop1): 1 orphan inode deleted
[   41.262200][ T3459] EXT4-fs (loop1): 1 truncate cleaned up
[   41.303360][ T3459] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.310185][ T3461] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #13: comm syz.3.7: casefold flag without casefold feature
[   41.349431][ T3471] loop4: detected capacity change from 0 to 512
[   41.356503][ T3461] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.7: couldn't read orphan inode 13 (err -117)
[   41.370075][ T3471] EXT4-fs: Ignoring removed oldalloc option
[   41.387284][ T3461] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.392566][ T3459] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.1.2: path /0/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0
[   41.410066][ T3461] EXT4-fs warning (device loop3): ext4_lookup:1825: Inconsistent encryption contexts: 2/12
[   41.432476][ T3459] EXT4-fs (loop1): Remounting filesystem read-only
[   41.450156][ T3471] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.9: Parent and EA inode have the same ino 15
[   41.493960][ T3471] EXT4-fs (loop4): Remounting filesystem read-only
[   41.500647][ T3471] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   41.513726][ T3471] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5)
[   41.589879][ T3471] EXT4-fs (loop4): 1 orphan inode deleted
[   41.608564][ T3471] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.628267][ T3475] process 'syz.0.10' launched './file0' with NULL argv: empty string added
[   41.671084][ T3471] SELinux: (dev loop4, type ext4) getxattr errno 5
[   41.704128][ T3471] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.886036][ T3480] netlink: 96 bytes leftover after parsing attributes in process `syz.4.12'.
[   41.932742][ T3480] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12'.
[   41.941713][ T3480] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12'.
[   41.968758][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.126903][ T3489] mmap: syz.2.15 (3489) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   42.358139][ T3461] syz.3.7 (3461) used greatest stack depth: 7200 bytes left
[   42.385665][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.861690][ T3524] netlink: 32 bytes leftover after parsing attributes in process `syz.3.24'.
[   42.902201][ T3528] loop0: detected capacity change from 0 to 128
[   42.906684][ T3531] loop4: detected capacity change from 0 to 1024
[   42.934424][ T3528] capability: warning: `syz.0.27' uses deprecated v2 capabilities in a way that may be insecure
[   42.947286][ T3531] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.168811][ T3545] dvmrp5: entered allmulticast mode
[   43.210439][ T3545] dvmrp5: left allmulticast mode
[   43.277618][ T3551] netlink: 96 bytes leftover after parsing attributes in process `syz.3.32'.
[   43.293281][ T3551] netlink: 28 bytes leftover after parsing attributes in process `syz.3.32'.
[   43.302240][ T3551] netlink: 28 bytes leftover after parsing attributes in process `syz.3.32'.
[   43.305247][ T3553] loop2: detected capacity change from 0 to 128
[   43.318465][ T3553] FAT-fs (loop2): Directory bread(block 162) failed
[   43.325201][ T3553] FAT-fs (loop2): Directory bread(block 163) failed
[   43.332006][ T3553] FAT-fs (loop2): Directory bread(block 164) failed
[   43.338624][ T3553] FAT-fs (loop2): Directory bread(block 165) failed
[   43.345390][ T3553] FAT-fs (loop2): Directory bread(block 166) failed
[   43.353238][ T3553] FAT-fs (loop2): Directory bread(block 167) failed
[   43.359889][ T3553] FAT-fs (loop2): Directory bread(block 168) failed
[   43.367864][ T3553] FAT-fs (loop2): Directory bread(block 169) failed
[   43.382523][ T3553] FAT-fs (loop2): Directory bread(block 162) failed
[   43.389500][ T3553] FAT-fs (loop2): Directory bread(block 163) failed
[   43.437344][ T3562] bridge: RTM_NEWNEIGH with invalid ether address
[   43.584083][ T3571] loop2: detected capacity change from 0 to 128
[   43.605246][ T3571] syz.2.39: attempt to access beyond end of device
[   43.605246][ T3571] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128
[   43.755676][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.778210][ T3575] loop0: detected capacity change from 0 to 1024
[   43.779211][    C0] hrtimer: interrupt took 47899 ns
[   43.785099][ T3575] =======================================================
[   43.785099][ T3575] WARNING: The mand mount option has been deprecated and
[   43.785099][ T3575]          and is ignored by this kernel. Remove the mand
[   43.785099][ T3575]          option from the mount to silence this warning.
[   43.785099][ T3575] =======================================================
[   43.826907][ T3575] EXT4-fs: Ignoring removed bh option
[   43.832439][ T3575] EXT4-fs: Ignoring removed nobh option
[   43.853987][ T3575] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.870871][ T3575] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4115: comm syz.0.42: Allocating blocks 481-513 which overlap fs metadata
[   43.887064][ T3575] FAULT_INJECTION: forcing a failure.
[   43.887064][ T3575] name failslab, interval 1, probability 0, space 0, times 1
[   43.899844][ T3575] CPU: 1 UID: 0 PID: 3575 Comm: syz.0.42 Not tainted 6.14.0-rc6-syzkaller-00103-g4003c9e78778 #0
[   43.899882][ T3575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   43.899904][ T3575] Call Trace:
[   43.899912][ T3575]  <TASK>
[   43.899922][ T3575]  dump_stack_lvl+0xf2/0x150
[   43.900015][ T3575]  dump_stack+0x15/0x1a
[   43.900081][ T3575]  should_fail_ex+0x24a/0x260
[   43.900123][ T3575]  should_failslab+0x8f/0xb0
[   43.900242][ T3575]  kmem_cache_alloc_noprof+0x52/0x320
[   43.900271][ T3575]  ? __es_insert_extent+0x563/0xed0
[   43.900309][ T3575]  __es_insert_extent+0x563/0xed0
[   43.900363][ T3575]  __es_remove_extent+0x6cd/0xd80
[   43.900407][ T3575]  ext4_es_insert_extent+0x3de/0x1c60
[   43.900493][ T3575]  ext4_map_blocks+0x8b9/0xd20
[   43.900575][ T3575]  _ext4_get_block+0x104/0x370
[   43.900611][ T3575]  ext4_get_block_unwritten+0x2c/0xb0
[   43.900702][ T3575]  ext4_block_write_begin+0x34f/0x9c0
[   43.900744][ T3575]  ? __pfx_ext4_get_block_unwritten+0x10/0x10
[   43.900782][ T3575]  ? ext4_inode_journal_mode+0xdf/0x1d0
[   43.900809][ T3575]  ext4_write_begin+0x426/0xc30
[   43.900898][ T3575]  ext4_da_write_begin+0x1b6/0x540
[   43.900931][ T3575]  generic_perform_write+0x1a8/0x4a0
[   43.900970][ T3575]  ext4_buffered_write_iter+0x1ed/0x3c0
[   43.901037][ T3575]  ext4_file_write_iter+0x383/0xf20
[   43.901075][ T3575]  ? kstrtouint_from_user+0xb0/0xe0
[   43.901191][ T3575]  ? avc_policy_seqno+0x15/0x20
[   43.901215][ T3575]  ? selinux_file_permission+0x22a/0x360
[   43.901258][ T3575]  vfs_write+0x77b/0x920
[   43.901291][ T3575]  ? __pfx_ext4_file_write_iter+0x10/0x10
[   43.901367][ T3575]  ksys_write+0xe8/0x1b0
[   43.901400][ T3575]  __x64_sys_write+0x42/0x50
[   43.901494][ T3575]  x64_sys_call+0x287e/0x2dc0
[   43.901527][ T3575]  do_syscall_64+0xc9/0x1c0
[   43.901564][ T3575]  ? clear_bhb_loop+0x55/0xb0
[   43.901595][ T3575]  ? clear_bhb_loop+0x55/0xb0
[   43.901637][ T3575]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   43.901669][ T3575] RIP: 0033:0x7f8bf608d169
[   43.901694][ T3575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   43.901717][ T3575] RSP: 002b:00007f8bf46f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   43.901740][ T3575] RAX: ffffffffffffffda RBX: 00007f8bf62a5fa0 RCX: 00007f8bf608d169
[   43.901755][ T3575] RDX: 000000000208e24b RSI: 0000400000000080 RDI: 0000000000000008
[   43.901770][ T3575] RBP: 00007f8bf46f1090 R08: 0000000000000000 R09: 0000000000000000
[   43.901793][ T3575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   43.901807][ T3575] R13: 0000000000000000 R14: 00007f8bf62a5fa0 R15: 00007ffd95232998
[   43.901828][ T3575]  </TASK>
[   44.203835][ T3575] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4115: comm syz.0.42: Allocating blocks 497-513 which overlap fs metadata
[   44.218612][ T3575] EXT4-fs (loop0): pa ffff88810598f000: logic 352, phys. 465, len 3
[   44.226708][ T3575] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1
[   44.249039][ T3585] netlink: 96 bytes leftover after parsing attributes in process `syz.1.45'.
[   44.260758][ T3585] netlink: 28 bytes leftover after parsing attributes in process `syz.1.45'.
[   44.269793][ T3585] netlink: 28 bytes leftover after parsing attributes in process `syz.1.45'.
[   44.280987][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.302678][ T3589] loop3: detected capacity change from 0 to 512
[   44.323686][ T3589] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   44.338135][ T3589] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   44.364247][ T3598] sctp: [Deprecated]: syz.2.50 (pid 3598) Use of int in maxseg socket option.
[   44.364247][ T3598] Use struct sctp_assoc_value instead
[   44.404998][ T3602] loop1: detected capacity change from 0 to 1024
[   44.416717][ T3602] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.436830][ T3608] FAULT_INJECTION: forcing a failure.
[   44.436830][ T3608] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   44.450018][ T3608] CPU: 0 UID: 0 PID: 3608 Comm: syz.0.54 Not tainted 6.14.0-rc6-syzkaller-00103-g4003c9e78778 #0
[   44.450049][ T3608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   44.450064][ T3608] Call Trace:
[   44.450072][ T3608]  <TASK>
[   44.450080][ T3608]  dump_stack_lvl+0xf2/0x150
[   44.450114][ T3608]  dump_stack+0x15/0x1a
[   44.450141][ T3608]  should_fail_ex+0x24a/0x260
[   44.450246][ T3608]  should_fail+0xb/0x10
[   44.450279][ T3608]  should_fail_usercopy+0x1a/0x20
[   44.450318][ T3608]  _copy_from_user+0x1c/0xa0
[   44.450366][ T3608]  copy_msghdr_from_user+0x54/0x2a0
[   44.450406][ T3608]  ? __fget_files+0x17c/0x1c0
[   44.450449][ T3608]  __sys_sendmsg+0x13e/0x230
[   44.450494][ T3608]  __x64_sys_sendmsg+0x46/0x50
[   44.450524][ T3608]  x64_sys_call+0x2734/0x2dc0
[   44.450588][ T3608]  do_syscall_64+0xc9/0x1c0
[   44.450681][ T3608]  ? clear_bhb_loop+0x55/0xb0
[   44.450758][ T3608]  ? clear_bhb_loop+0x55/0xb0
[   44.450793][ T3608]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   44.450897][ T3608] RIP: 0033:0x7f8bf608d169
[   44.450916][ T3608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   44.450937][ T3608] RSP: 002b:00007f8bf46f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   44.450965][ T3608] RAX: ffffffffffffffda RBX: 00007f8bf62a5fa0 RCX: 00007f8bf608d169
[   44.450980][ T3608] RDX: 0000000000000000 RSI: 0000400000000540 RDI: 0000000000000003
[   44.450994][ T3608] RBP: 00007f8bf46f1090 R08: 0000000000000000 R09: 0000000000000000
[   44.451008][ T3608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   44.451022][ T3608] R13: 0000000000000000 R14: 00007f8bf62a5fa0 R15: 00007ffd95232998
[   44.451043][ T3608]  </TASK>
[   44.632031][ T3610] RDS: rds_bind could not find a transport for b700::, load rds_tcp or rds_rdma?
[   44.663960][ T3615] loop2: detected capacity change from 0 to 128
[   44.695892][ T3622] kexec: Could not allocate control_code_buffer
[   44.764125][ T3627] dvmrp5: entered allmulticast mode
[   44.770525][ T3627] dvmrp5: left allmulticast mode
[   44.822310][ T3629] loop0: detected capacity change from 0 to 128
[   44.844766][ T3629] syz.0.60: attempt to access beyond end of device
[   44.844766][ T3629] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128
[   45.076896][   T30] kauditd_printk_skb: 921 callbacks suppressed
[   45.076914][   T30] audit: type=1400 audit(1741940422.855:1038): avc:  denied  { ioctl } for  pid=3632 comm="syz.4.62" path="/dev/ptp0" dev="devtmpfs" ino=246 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   45.143889][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   45.228874][ T3638] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   45.229143][ T3376] IPVS: starting estimator thread 0...
[   45.259085][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.280788][   T30] audit: type=1326 audit(1741940423.045:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3641 comm="syz.1.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2425e9d169 code=0x7ffc0000
[   45.287475][ T3642] loop1: detected capacity change from 0 to 512
[   45.304310][   T30] audit: type=1326 audit(1741940423.045:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3641 comm="syz.1.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2425e9d169 code=0x7ffc0000
[   45.314534][ T3642] EXT4-fs: Ignoring removed nobh option
[   45.333944][   T30] audit: type=1326 audit(1741940423.045:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3641 comm="syz.1.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2425e9d169 code=0x7ffc0000
[   45.340626][ T3640] IPVS: using max 2016 ests per chain, 100800 per kthread
[   45.363272][   T30] audit: type=1326 audit(1741940423.045:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3641 comm="syz.1.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2425e9d169 code=0x7ffc0000
[   45.393758][   T30] audit: type=1326 audit(1741940423.045:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3641 comm="syz.1.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2425e9d169 code=0x7ffc0000
[   45.417064][   T30] audit: type=1326 audit(1741940423.045:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3641 comm="syz.1.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2425e9d169 code=0x7ffc0000
[   45.419236][ T3642] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[   45.440547][   T30] audit: type=1326 audit(1741940423.055:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3641 comm="syz.1.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2425e9d169 code=0x7ffc0000
[   45.453485][ T3642] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #13: comm syz.1.65: casefold flag without casefold feature
[   45.472512][   T30] audit: type=1326 audit(1741940423.055:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3641 comm="syz.1.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2425e9d169 code=0x7ffc0000
[   45.498938][ T3642] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.65: couldn't read orphan inode 13 (err -117)
[   45.508308][   T30] audit: type=1326 audit(1741940423.055:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3641 comm="syz.1.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2425e9d169 code=0x7ffc0000
[   45.523008][ T3642] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.564150][ T3642] EXT4-fs warning (device loop1): ext4_lookup:1825: Inconsistent encryption contexts: 2/12
[   45.918376][ T3662] loop2: detected capacity change from 0 to 512
[   46.131948][ T3662] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   46.149305][ T3662] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   46.305978][ T3676] loop4: detected capacity change from 0 to 128
[   46.328235][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.392511][ T3687] loop3: detected capacity change from 0 to 1024
[   46.399699][ T3687] EXT4-fs: Ignoring removed bh option
[   46.405980][ T3687] EXT4-fs: Ignoring removed nobh option
[   46.422673][ T3682] dvmrp5: entered allmulticast mode
[   46.428959][ T3682] dvmrp5: left allmulticast mode
[   46.430086][ T3687] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.517992][ T3687] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4115: comm syz.3.82: Allocating blocks 497-513 which overlap fs metadata
[   46.535949][ T3687] EXT4-fs (loop3): pa ffff88810598f150: logic 256, phys. 385, len 8
[   46.544196][ T3687] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1
[   46.676744][ T3697] loop1: detected capacity change from 0 to 8192
[   46.699430][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.769622][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   46.830310][ T3715] loop2: detected capacity change from 0 to 512
[   46.838072][ T3715] EXT4-fs: Ignoring removed nobh option
[   46.851338][ T3715] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[   46.863497][ T3715] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #13: comm syz.2.90: casefold flag without casefold feature
[   46.890402][ T3715] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.90: couldn't read orphan inode 13 (err -117)
[   46.904225][ T3715] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.918313][ T3715] EXT4-fs warning (device loop2): ext4_lookup:1825: Inconsistent encryption contexts: 2/12
[   46.993638][ T3718] loop3: detected capacity change from 0 to 1024
[   47.074436][ T3718] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.104052][ T3718] FAULT_INJECTION: forcing a failure.
[   47.104052][ T3718] name failslab, interval 1, probability 0, space 0, times 0
[   47.116946][ T3718] CPU: 1 UID: 0 PID: 3718 Comm: syz.3.94 Not tainted 6.14.0-rc6-syzkaller-00103-g4003c9e78778 #0
[   47.116974][ T3718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   47.117021][ T3718] Call Trace:
[   47.117030][ T3718]  <TASK>
[   47.117040][ T3718]  dump_stack_lvl+0xf2/0x150
[   47.117075][ T3718]  dump_stack+0x15/0x1a
[   47.117099][ T3718]  should_fail_ex+0x24a/0x260
[   47.117159][ T3718]  should_failslab+0x8f/0xb0
[   47.117196][ T3718]  kmem_cache_alloc_noprof+0x52/0x320
[   47.117224][ T3718]  ? getname_flags+0x81/0x3b0
[   47.117266][ T3718]  getname_flags+0x81/0x3b0
[   47.117365][ T3718]  __x64_sys_symlink+0x33/0x60
[   47.117396][ T3718]  x64_sys_call+0x28b0/0x2dc0
[   47.117462][ T3718]  do_syscall_64+0xc9/0x1c0
[   47.117501][ T3718]  ? clear_bhb_loop+0x55/0xb0
[   47.117545][ T3718]  ? clear_bhb_loop+0x55/0xb0
[   47.117587][ T3718]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   47.117620][ T3718] RIP: 0033:0x7f55801cd169
[   47.117636][ T3718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   47.117719][ T3718] RSP: 002b:00007f557e837038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058
[   47.117738][ T3718] RAX: ffffffffffffffda RBX: 00007f55803e5fa0 RCX: 00007f55801cd169
[   47.117750][ T3718] RDX: 0000000000000000 RSI: 00004000000002c0 RDI: 00004000000005c0
[   47.117767][ T3718] RBP: 00007f557e837090 R08: 0000000000000000 R09: 0000000000000000
[   47.117779][ T3718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   47.117791][ T3718] R13: 0000000000000000 R14: 00007f55803e5fa0 R15: 00007ffcb03eefe8
[   47.117872][ T3718]  </TASK>
[   47.342011][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.519745][ T3734] loop4: detected capacity change from 0 to 512
[   47.543848][ T3734] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   47.558439][ T3741] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   47.574449][ T3734] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   47.685332][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.807405][ T3756] __nla_validate_parse: 5 callbacks suppressed
[   47.807425][ T3756] netlink: 28 bytes leftover after parsing attributes in process `syz.1.103'.
[   47.822722][ T3756] netlink: 28 bytes leftover after parsing attributes in process `syz.1.103'.
[   47.840707][ T3762] loop2: detected capacity change from 0 to 1024
[   47.871263][ T3762] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.893134][ T3766] xt_hashlimit: max too large, truncated to 1048576
[   47.983399][ T3772] netlink: 28 bytes leftover after parsing attributes in process `syz.1.109'.
[   47.992383][ T3772] netlink: 28 bytes leftover after parsing attributes in process `syz.1.109'.
[   48.028223][ T3776] ==================================================================
[   48.036384][ T3776] BUG: KCSAN: data-race in mas_wr_store_entry / mtree_range_walk
[   48.044145][ T3776] 
[   48.046479][ T3776] write to 0xffff888104636560 of 8 bytes by task 3773 on cpu 1:
[   48.054117][ T3776]  mas_wr_store_entry+0x1222/0x23f0
[   48.059341][ T3776]  mas_store_prealloc+0x6bf/0x960
[   48.064406][ T3776]  commit_merge+0x441/0x740
[   48.068952][ T3776]  vma_expand+0x211/0x360
[   48.073320][ T3776]  vma_merge_new_range+0x2da/0x340
[   48.078477][ T3776]  mmap_region+0x7e0/0x1620
[   48.082996][ T3776]  do_mmap+0x98a/0xc30
[   48.087085][ T3776]  vm_mmap_pgoff+0x16d/0x2d0
[   48.091702][ T3776]  ksys_mmap_pgoff+0xd0/0x330
[   48.096422][ T3776]  x64_sys_call+0x1940/0x2dc0
[   48.101145][ T3776]  do_syscall_64+0xc9/0x1c0
[   48.105697][ T3776]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   48.111624][ T3776] 
[   48.113955][ T3776] read to 0xffff888104636560 of 8 bytes by task 3776 on cpu 0:
[   48.121506][ T3776]  mtree_range_walk+0x1b4/0x460
[   48.126384][ T3776]  mas_walk+0x16e/0x320
[   48.130561][ T3776]  lock_vma_under_rcu+0x95/0x270
[   48.135514][ T3776]  exc_page_fault+0x150/0x650
[   48.140221][ T3776]  asm_exc_page_fault+0x26/0x30
[   48.145100][ T3776] 
[   48.147432][ T3776] value changed: 0x00007f242449efff -> 0x00007f242447dfff
[   48.154554][ T3776] 
[   48.156890][ T3776] Reported by Kernel Concurrency Sanitizer on:
[   48.163052][ T3776] CPU: 0 UID: 0 PID: 3776 Comm: syz.1.110 Not tainted 6.14.0-rc6-syzkaller-00103-g4003c9e78778 #0
[   48.173871][ T3776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   48.183954][ T3776] ==================================================================
[   48.361226][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   48.684784][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.