last executing test programs:

14.242624531s ago: executing program 1 (id=9):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="16a20800000070556b0f00000000000000040800", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
r2 = inotify_init()
io_setup(0x200, &(0x7f0000000140)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000600)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x5, r2, 0x0}])
io_cancel(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0xac, 0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0)
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e0021768238324ee0d5b18eabeda10c06e6143315"], 0x1c}}, 0x0)
recvmmsg(r4, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}, 0xfffffc00}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0xa02000, &(0x7f0000000180)=ANY=[@ANYBLOB="6d706f6c3d62696e643d7374617469633a372d4e3ae806caee896016d11f99f6bc82142abf8ebb9ea8dd134430025ec7949a1ab16c9f03bf74590d345cbf3716d9e471125dc14f1d62499141"])
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000000c0)={@private, @broadcast}, &(0x7f0000000100)=0xc)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
eventfd2(0xc, 0x81001)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x40, 0x0, @perf_bp={0x0, 0x764922f6ef795283}, 0x8, 0x0, 0x9, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2)
r9 = dup(r8)
ioctl$TUNATTACHFILTER(r9, 0x401054d5, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
futex_waitv(&(0x7f0000001440)=[{0x7, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10)
prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0)
r10 = syz_open_dev$usbfs(&(0x7f0000000080), 0x4, 0x20c00)
ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000140)=@usbdevfs_driver={0xa6c, 0x1, &(0x7f00000000c0)="5b526cd7d3ed93757d7d467ced1a84adff73dca046980cbf81699433e7902abbe9f5eb6557f1e993eb0ab13aadca"})

14.041598951s ago: executing program 1 (id=11):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYRES32=r0], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
fchown(r2, 0xffffffffffffffff, 0xffffffffffffffff)
io_uring_setup(0x7361, &(0x7f00000000c0)={0x0, 0x5516, 0x2000, 0x0, 0x117, 0x0, r0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'dummy0\x00'})
socket$netlink(0x10, 0x3, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10)
syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0600000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/16, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="6a00000000000000000000050000000018110400", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10)
r6 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r6, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c)
listen(r6, 0x20000008)
r7 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
accept4(r6, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

13.959045141s ago: executing program 1 (id=12):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c010000190001000000000000000000fe8000000000000000000000000000aaac1e000100000000000000000000000000000000000000000a000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fdffffffffffffff0000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000c4000500ac1414bb000000000000000000000000000000006c0000000a00000000000000"], 0x17c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f00000003c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x42, 0x9, 0x40, 0x32, @mcast1, @local, 0x20, 0x10, 0xb, 0x6a2}})
r5 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r6=>0x0}, &(0x7f0000cab000)=0xc)
setfsuid(r6)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@remote, @in6=@empty, 0x4e21, 0x9, 0x4e23, 0x0, 0xa, 0x20, 0x20, 0x32, r4, r6}, {0x6, 0x1, 0x2, 0x230000, 0x9, 0x4, 0xdb6, 0x9}, {0x5, 0x334, 0xabcf405, 0x1}, 0x1ea9, 0x6e6bbd, 0x0, 0x1, 0x1, 0x2}, {{@in6=@mcast1, 0x4d4, 0x32}, 0xa, @in6=@local, 0x40, 0x3, 0x1, 0x10, 0x5, 0x9, 0x8}}, 0xe8)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000600)={r3, r0}, 0xc)

13.91641104s ago: executing program 1 (id=13):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r1 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(r1, 0x29, 0x21, 0x0, 0x0)
unshare(0x68040200)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x8205, &(0x7f0000000480)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@data_err_abort}, {@minixdf}, {@errors_remount}, {@abort}, {@noblock_validity}, {@barrier}, {@journal_dev={'journal_dev', 0x3d, 0xf35}}]}, 0x1, 0x618, &(0x7f0000000640)="$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")
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_smc(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3e, 0x6}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket(0xa, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x11, @private, 0x0, 0x0, 'lblcr\x00'}, 0x2c)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='./file0\x00')

13.65224583s ago: executing program 1 (id=15):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000940)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x6f00}, 0x0, 0xb216, 0x0, 0x0, 0x3}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14)
futex_waitv(&(0x7f0000001040), 0x0, 0x0, 0x0, 0x1)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x2)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x2)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080005000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2}, 0x4)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
r5 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000001080)=0x8)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000001c0)={r6, 0x80}, &(0x7f0000000200)=0x8)
write$UHID_CREATE(r3, &(0x7f0000000480)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000400)=""/107, 0x6b, 0x7, 0x2, 0x0, 0x6, 0x5}}, 0x120)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000008000000080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000889342011bc8cc1d05c0a1e33c157db1fde98913fe8cb2ff2aa949bf588285f37152c742882e27a420e56df8589dc6ef0c8d822258d1ec2f5dcd7d3ee7243d7446ab9c88d5bd3b6b573b6f319727e5", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10)
r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x288840, 0x0)
close_range(r8, r8, 0x0)
syz_usb_connect$uac1(0x4, 0x71, &(0x7f00000008c0)=ANY=[], 0x0)
close(r8)
pipe(&(0x7f00000000c0))
r9 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x3}, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x4b}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pidfd_getfd(0xffffffffffffffff, r9, 0x0)

10.078755052s ago: executing program 1 (id=48):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfdc0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, <r3=>0xffffffffffffffff}, 0x4)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r4)
mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESDEC=r5])
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x18)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8)
write$cgroup_int(r7, &(0x7f00000001c0), 0xfffffdef)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffeca50000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='kmem_cache_free\x00', r8}, 0x10)
r9 = getpid()
syz_pidfd_open(r9, 0x0)
syz_open_procfs(r9, &(0x7f0000000300)='stack\x00')
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
brk(0x3)
ioctl$TUNSETOFFLOAD(r7, 0x541b, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r7, 0x2, &(0x7f0000000000)='+-\x00', &(0x7f0000000040)="4083bce0d6", 0x5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000280), &(0x7f0000000080)=r1}, 0x20)
r10 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
pread64(r10, &(0x7f0000001240)=""/102400, 0x200000, 0x0)

10.052163552s ago: executing program 32 (id=48):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfdc0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, <r3=>0xffffffffffffffff}, 0x4)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r4)
mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESDEC=r5])
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x18)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8)
write$cgroup_int(r7, &(0x7f00000001c0), 0xfffffdef)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffeca50000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='kmem_cache_free\x00', r8}, 0x10)
r9 = getpid()
syz_pidfd_open(r9, 0x0)
syz_open_procfs(r9, &(0x7f0000000300)='stack\x00')
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
brk(0x3)
ioctl$TUNSETOFFLOAD(r7, 0x541b, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r7, 0x2, &(0x7f0000000000)='+-\x00', &(0x7f0000000040)="4083bce0d6", 0x5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000280), &(0x7f0000000080)=r1}, 0x20)
r10 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
pread64(r10, &(0x7f0000001240)=""/102400, 0x200000, 0x0)

2.924155276s ago: executing program 0 (id=174):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
statfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=""/103)

2.894855086s ago: executing program 0 (id=177):
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000a000000380003801400020076657468305f766972745f7769666900060007004e2400000800030000000000080001"], 0x4c}}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0xa8, r2, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010100}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x41}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x2, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x8}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x24}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x90}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000600), 0x5, 0x46a, &(0x7f0000000640)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d000000181100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="2703000000000000000000000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x408c0}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r8, &(0x7f00000004c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x44, 0x3, 0x3, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xd16}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x2}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb}}]}, 0x44}, 0x1, 0x0, 0x0, 0xa00c000}, 0x4040)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
lseek(r9, 0xfffffffffffffffc, 0x2)
getdents(r9, 0x0, 0x54)
ioctl$TIOCCONS(r0, 0x541d)
r10 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r10, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x8000)

2.755788135s ago: executing program 4 (id=180):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000940)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x6f00}, 0x0, 0xb216, 0x0, 0x0, 0x3}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14)
futex_waitv(&(0x7f0000001040), 0x0, 0x0, 0x0, 0x1)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x2)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x2)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080005000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2}, 0x4)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
r5 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000001080)=0x8)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000001c0)={r6, 0x80}, &(0x7f0000000200)=0x8)
write$UHID_CREATE(r3, &(0x7f0000000480)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000400)=""/107, 0x6b, 0x7, 0x2, 0x0, 0x6, 0x5}}, 0x120)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000008000000080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000889342011bc8cc1d05c0a1e33c157db1fde98913fe8cb2ff2aa949bf588285f37152c742882e27a420e56df8589dc6ef0c8d822258d1ec2f5dcd7d3ee7243d7446ab9c88d5bd3b6b573b6f319727e5", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10)
r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x288840, 0x0)
close_range(r8, r8, 0x0)
syz_usb_connect$uac1(0x4, 0x71, &(0x7f00000008c0)=ANY=[], 0x0)
close(r8)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x3}, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x4b}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)

2.532372685s ago: executing program 0 (id=182):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10)
sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
r4 = socket(0x1, 0x3, 0x0)
bind$unix(r4, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e)
r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00')
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11)
openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00')
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)

2.530459505s ago: executing program 5 (id=183):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x7, &(0x7f0000000a80)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000710000009500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000fc0)='sched_switch\x00', r3}, 0x10)
write$cgroup_int(r2, &(0x7f0000000000), 0xfffffd26)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401c5820, &(0x7f00000001c0)=0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r4 = add_key$keyring(&(0x7f0000000c80), &(0x7f0000000cc0)={'syz', 0x1}, 0x0, 0x0, 0x0)
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, r4, 0x1)
r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f00000003c0)='ceph\x00', 0x0, &(0x7f0000000400)="010000000037a788a11d1f000000000000006923c63a4541062101a59ea9cba39a989ca8c70b3692930208", 0x2b, r5)
r6 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000680)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000000000000000000000000000670db817e94c9c2d211b38dc09736695537648b1ad6609932367d8a42538b4ef982ecba0946c8c7ce5618da23482011c314cf297c88cb56a218dab85ce8f5b0c7ab22a9c614956d8c40bc080e5b52844949b74a66ba052ae2261496702c70bd5f3f3240259b206b5092d16c627b8d846e22d90692888a8b3d23e1256c25432cb6bee778ed2b1ec70c7c7e8e15b46b2a825040fd29bd85396f6e48422a236c371e937e989b136da703591fa71b6028f5ca19d84f54da4e5bdb064590ae79ff404195190da9e"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r0}, 0x10)
r7 = eventfd2(0x5, 0x80801)
ioctl$BTRFS_IOC_RESIZE(r7, 0x50009403, &(0x7f0000000d00)=ANY=[@ANYRES32=r0, @ANYBLOB="00000000aa3030303030303030303030303030303030303030749bcf69ad56e15c0904fd97a362afb34d649fa36343dfc7dd5a28beebe415d79fb173d361066907298a89148ebc323af5a63419bbf3661dbb1e796bc227371dbe7f3fb8bfa853dbb8eb8949475dab2620aafcadc5c751b5506db5d98406126b0398255265d74c2313f6673658f65adb"])
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f00000005c0)={0x0, 0x1000}, 0x8)
sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a0000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38)
syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x80a40)
mount$9p_fd(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000200), 0x1000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="2c64656663ae606450d621ee267e6f6e746078743d"])
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x10010, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r9)

2.434590655s ago: executing program 0 (id=186):
syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaa270005d70000fe0806000108000604000aaaaaaaaaaaaaac1414bbaaaaaaaa263773491dfcdee692e489de2134044d1912000000000000c92e6def3b37"], 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000004c0)={<r4=>0x0, 0xb}, &(0x7f0000000500)=0x8)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000540)={r4, 0x1ff}, &(0x7f0000000580)=0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000a42a29bd3cff33a0d6777a38af0ac9c0a2c0a84b9bb1fe5170982a551ee3c65ed414b80ca018b28d26576d3d6882db67dee603ad4e2c92825d320c1e271190b6b94be8dd0cf3d3d079dcc0697a8590e369c0cdac11b3f1270846b67403b75c4a669ad7e44353fddfc8654cb8afb989fc0b141bf9346a95ee4acf5f6536208b0ec9b0ea710341430f5e3fc37beef822d5981b44baf7264a16f2e674e8733a66b7e626ea2797a7428a5e1e3ee21b09fd44338dfa94"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
time(0x0)
r7 = socket(0x1e, 0x5, 0x0)
setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
listen(r7, 0x0)
r8 = socket(0x1e, 0x805, 0x0)
sendmsg$tipc(r8, 0x0, 0x4045094)
setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1c)
accept4$inet6(r7, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x2c}}, 0x0)
sendmsg$tipc(r8, &(0x7f0000000640)={&(0x7f0000000300), 0x10, 0x0}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$rds(0x15, 0x5, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000340)='kfree\x00', r9}, 0x18)

1.859730624s ago: executing program 4 (id=193):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0002}]})
r4 = socket$tipc(0x1e, 0x5, 0x0)
fchmod(r4, 0x20)
r5 = mq_open(&(0x7f0000000340)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1b\x9fL\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0xbc, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x8})
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
mq_timedreceive(r5, &(0x7f0000000180)=""/204, 0xcc, 0xffc99a3b00000000, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1140, 0x0)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0)
close(r6)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20)
getsockopt$inet_mreqn(r7, 0x0, 0x24, &(0x7f00000012c0)={@remote}, &(0x7f0000001300)=0xc)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001680)={0xffffffffffffffff, 0xe0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000001400)=[0x0, 0x0, 0x0], &(0x7f0000001440)=[0x0, 0x0, 0x0], 0x0, 0xd8, &(0x7f0000001480)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000014c0), &(0x7f0000001500), 0x8, 0x8d, 0x8, 0x8, &(0x7f0000001540)}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000016c0)={0xffffffffffffffff}, 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001700)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0xa6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x88011, 0xffffffffffffffff, 0x611b3000)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48)

1.792613743s ago: executing program 3 (id=196):
r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x6c6, 0x501001)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYRESOCT=r0, @ANYRESOCT], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10)
bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r4, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='percpu_free_percpu\x00', r7}, 0x10)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000700)=ANY=[@ANYBLOB="0600000004000000008000005c00000000000000", @ANYRES32, @ANYBLOB="0000001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="20000000020000030000000000000000000011daf6f2658796d6fdd537bdf8c8637e00000000000000000000b5721eef769fca7ec7c8717891ba56fb4a0ee3e618ef04cc199ded8aa6edafecfa57dd7c9a9ed5705c50b147bc3eb583d45b6a738b3f08ecbf864d8cce5e5828cf7f8d56868298a04a35bbb92eee93de153e3dd225f56708ee4285192ce04824a8b103989c14c26fffb633"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000006bc0), 0x0, 0x0)
r11 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x800, 0x0, 0x6}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r12}, 0x10)
r13 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r13, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000001d80)=ANY=[@ANYBLOB="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"], 0x1028}}, 0x20000050)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r10, 0x7040, 0x0)
r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r14}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYRES8=r8, @ANYRESDEC=r1, @ANYRESOCT=r10, @ANYRES8=0x0, @ANYRESOCT=r4, @ANYRES64=r10, @ANYRES16=r6, @ANYRES64, @ANYRES32=r14], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000, @void, @value}, 0x94)
r15 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r15, 0x0, 0xfffffffffffffffe}, 0x18)
utime(&(0x7f0000000040)='./file0\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r9}, 0x10)

1.771266603s ago: executing program 2 (id=197):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
syz_emit_ethernet(0x52, &(0x7f00000043c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f2001c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa6c"], 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'veth0_to_batadv\x00', {0x2, 0x4e20, @multicast1}})
r2 = socket$inet_sctp(0x2, 0x4, 0x84)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00')
close(r3)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_acct\x00')
setns(r5, 0x8000000)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r4, &(0x7f0000000280)="a5535c5e9ff20b9cdf40d089517c88519f97bb6e4b3d2420f33d6a4077378a939ae8e6fc9ded90e97f680ab302def6e66b4665707ca9193dbbcc0b47cd400e33f972a44d31cc9c75255515c430624353856fa7b36e8a196d862921047dccdf", &(0x7f0000000380)=@udp6}, 0x20)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000008c0)={0xb0, r7, 0x200, 0x70bd2a, 0x25dfdbf8, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xb}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10008}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000000}, 0x10000000)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

1.662025613s ago: executing program 3 (id=198):
r0 = socket(0xa, 0x40000000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, 0x0}, 0x280)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_INTERFACE(r0, 0x0, 0x24008090)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000001080)='net/protocols\x00')
preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000000)=""/57, 0x39}], 0x1, 0xfffffffc, 0x3000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x2000000000000049, &(0x7f0000000240)=ANY=[], 0x0, 0x136, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000040)={0x6, 0xfe, 0x8})

1.661694013s ago: executing program 3 (id=199):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
statfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=""/103)

1.649521113s ago: executing program 3 (id=200):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="636865636b3d7374726963742c756e686964652c63727566742c696f636861727365743d63a08033322c636865636b3d72656c617865642c6e6f6a6f6c6965742c636865636b3d72656c617865642c6e6f6a6f6c6965742c00"], 0x3d, 0x55d, &(0x7f0000000b00)="$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")
mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x2}}, './file0\x00'})
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000200))
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4)
sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1, 0x0, 0x46, 0x407006}, 0x104)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)

1.568629623s ago: executing program 4 (id=201):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000c80), 0x10000005, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)

1.562932263s ago: executing program 2 (id=202):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x44000) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) (async)
r1 = socket$kcm(0x29, 0x2, 0x0)
write$binfmt_script(r1, &(0x7f0000003300)={'#! ', './bus'}, 0xff1d) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0)
pwritev(r2, 0x0, 0x0, 0xb9c4, 0x0) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xd0}}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 64)

1.490683913s ago: executing program 0 (id=203):
r0 = socket$inet(0x2, 0x1, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x200, 0xa)
sendmsg$nl_generic(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, 0x41, 0x2, 0x70bd2b, 0x25dfdbfe, {0x2}, [@generic="78198ab34a7fb559a5678d6207d33309aabacd66773ce67b1ccae50bd91fc54301ac", @typed={0x8, 0x148, 0x0, 0x0, @u32=0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8005)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x1c)
execveat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={[&(0x7f0000000080)='/\xe4\x00', &(0x7f00000000c0)=')\xee\x00', &(0x7f0000000100)='\x00']}, &(0x7f0000000340)={[&(0x7f0000000180)='\x00', &(0x7f00000001c0)=')##{\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='-@\x00', &(0x7f00000002c0)='(^\\[/-:\\)$\x00', &(0x7f0000000300)='\x00']}, 0x800)
r2 = gettid()
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r4, &(0x7f0000000440), 0x10)
listen(r4, 0xa)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000200)="458d1fca4f1d0461442e12c4d90f415ec86aa74e137467ce700772d98322478e00f9", 0x22}], 0x1)
r6 = accept4$unix(r4, 0x0, 0x0, 0x0)
recvmsg(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))

1.490059473s ago: executing program 4 (id=204):
r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x80, &(0x7f0000000300), 0x1, 0x4c6, &(0x7f00000012c0)="$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")
r1 = open(&(0x7f0000000200)='./bus\x00', 0x14d27e, 0x0)
syz_open_dev$usbmon(&(0x7f0000000040), 0x7, 0x800)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
ftruncate(r3, 0x2007ff3)
copy_file_range(r3, 0x0, r2, 0x0, 0xffffffffa003e459, 0x700000000000000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f0000000240)={'gre0\x00', <r9=>0x0, 0x40, 0x7800, 0x9, 0x6, {{0x8, 0x4, 0x3, 0x12, 0x20, 0x65, 0x0, 0x7, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x12}, {[@end, @end, @lsrr={0x83, 0x7, 0x9c, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})
getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000380)={@remote, @dev, <r10=>0x0}, &(0x7f00000003c0)=0xc)
r11 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000002c0)={'wg2\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xffffffffffffffff}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x48}}, 0x10)
r14 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', <r15=>0x0})
sendmsg$nl_route_sched(r14, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x200, 0x0, 0x4, {0x0, 0x0, 0x0, r13, {0x0, 0x6}, {0x5, 0xffff}, {0x5}}}, 0x24}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x174, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x7, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x62}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0xffffff7b, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x20004000)
ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f0000000280)={0x400, 0xffffffff001, 0x5, 0x100000})

1.466751773s ago: executing program 2 (id=205):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
syz_emit_ethernet(0x52, &(0x7f00000043c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f2001c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa6c"], 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'veth0_to_batadv\x00', {0x2, 0x4e20, @multicast1}})
r2 = socket$inet_sctp(0x2, 0x4, 0x84)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00')
close(r3)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_acct\x00')
setns(r4, 0x8000000)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000008c0)={0xb0, r7, 0x200, 0x70bd2a, 0x25dfdbf8, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xb}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10008}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000000}, 0x10000000)
close(r6)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

1.465639482s ago: executing program 5 (id=206):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x11, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa36, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0)
mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYRES32=<r2=>0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10)
r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000003c0)={0x900, 0x0, 0x4}, 0x18)
r6 = openat(r5, &(0x7f0000000480)='./file1\x00', 0x62042, 0x8)
fcntl$setlease(r6, 0x400, 0x0)
fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000000040), 0x0, 0x0, 0x0)
fremovexattr(r6, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00')
mq_timedsend(r1, 0x0, 0x0, 0x6, 0x0)
mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')
r7 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="010000000c000000ffff00000100000000000000", @ANYRESOCT=r2, @ANYRES16=r7, @ANYRES64=r0, @ANYRES32=r4, @ANYBLOB="000000000000000400000000008c0000000004000000000000000000"], 0x48)
r8 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r8, &(0x7f00000007c0)=[{{&(0x7f0000000080)={0x2, 0x4e1e, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='~', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x0, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000002300)="ef", 0x1}, {&(0x7f00000005c0)="3c743292ddf17d86b7d119c53b1f35070a894d7e712bce2bc98e55b8a9a0f30fa41ddb057bc781825c42a94f0a7391da7d5645ccb0581c8266b06e5f407339", 0x3f}], 0x2}}], 0x2, 0x4000000)
socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000500)=@assoc_value={<r9=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000000380)={r9, 0x5}, 0x8)
mkdir(&(0x7f0000000440)='./file1\x00', 0x118)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r10 = inotify_init1(0x0)
inotify_add_watch(r10, &(0x7f00000002c0)='./file0\x00', 0x600010c)
setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0)
removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00')
close(r1)

1.401259922s ago: executing program 2 (id=207):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000340)="01000722625a900ede290f00015b097ead85847837353d2dbad05d", 0x1b, r1)

1.386681212s ago: executing program 5 (id=208):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r3, <r4=>0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f00000002c0)='%ps    \x00'}, 0x20)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000007d00000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
close_range(0xffffffffffffffff, r2, 0x2)
r6 = io_uring_setup(0x4896, &(0x7f0000000300)={0x0, 0xbcd3, 0x3, 0xffffffff, 0x246, 0x0, r4})
r7 = socket$inet6(0xa, 0x40000080806, 0x2)
bind$inet6(r7, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c)
listen(r7, 0x20000005)
r8 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
accept4(r7, 0x0, 0x0, 0x0)
close_range(r6, 0xffffffffffffffff, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'macsec0\x00', <r10=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', r10, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='kvm_ioapic_delayed_eoi_inj\x00', r12, 0x0, 0x100000001}, 0x18)
setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x190, 0x168, 0x10, 0x388, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xff6a], [0xff], 'ip6gretap0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x3a, 0xb6, 0x0, 0x20}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x3ff, 0x1, 0xfffffffc, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x10000, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='mpol=interleave'])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)

1.360477132s ago: executing program 2 (id=209):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x41212, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0xff2e)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$sock(r2, &(0x7f0000000800)={&(0x7f0000000640)=@llc={0x1a, 0x320, 0x40, 0x6, 0x9, 0x1, @local}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000008c0)="14cf8c5504cd49fa62f921af33e663f345067a5108bef16e35208efe838e215288d207c81a5ca31b60c7398196b4cc9e4129d81afbeef97dcd2a6029d050470fd754a48de8032e79d8b7f243907a30ec112daeccc7a4891708a71a7e897c8007e0b675cf8874ce05cffbba692a7c5ddc7fc4334286d95854e70094c26055099c5dc8f322168258bc13cab49b7b41a25bbee95783cd2858ac56683c7a0d0afec7d358cc8807564224b3e80e65d4d8e6acd8df489cb3c40de20126ee10c8537692051b36f20949c5acb3a5d0baae1397d21ab23bae10f9474876c8177d61b42c53f5", 0xe1}, {&(0x7f0000000a00)="c040f2f38f4b87329a2d1b945ffc8239448bacc85441738a5c3bf300fd3a4a93169ff773f1fcbfd04048a72727f6217bb2743901a39d0a936d9ac81336b6fcf088cd59d1bb2d702ee1e3ab5ae29e233380b64466d3e0b342c6d36876ac6ac786e1f827c8cf7a01b710404be96f380ee91e320845b6de61b130e1b2506e17b5f1e28be869fb58f782ff325230303cc6e33f5c9a3180bc1d1058ee661ec0174e4d6649dd66cee7c504da0e288abf275c8402250b28d769960e320c3de1447c7913a3", 0xc1}, {&(0x7f00000006c0)="0418e984daf24e4785f12b483e28100141d1b2b17886bb58c80edb78431d230a59565555850e1aa63c47398057", 0x2d}], 0x3}, 0x4000)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000006, 0x11, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x6, 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x4, 0x2a, &(0x7f0000000c80)=""/42, 0x41000, 0x20, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000cc0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000d00)=[r0, r0, r3], &(0x7f0000000d40)=[{0x5, 0x2, 0x2, 0x9}], 0x10, 0x6, @void, @value}, 0x94)
unshare(0x68040200)
syz_mount_image$ext4(&(0x7f0000000e40)='ext2\x00', &(0x7f0000000580)='./file1\x00', 0x8205, &(0x7f0000000700)={[{@inode_readahead_blks}, {@data_err_abort}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8000}}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@dax_inode}, {@noblock_validity}, {@nobh}, {@acl}]}, 0x1, 0x61c, &(0x7f0000000e80)="$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")
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x328, 0x3d8, 0x3d8, 0x328, 0x3d8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffffff, 0xff000000, 0xff], 'geneve0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x11, 0x81, 0x6, 0x1d}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@srh={{0x30}, {0x2b, 0x2, 0x5, 0x4, 0x6, 0x401, 0x1}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00', 0x4}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x2, 0xfffffffc, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458)
syz_open_pts(r1, 0x8001)
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r7, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10)

1.276906312s ago: executing program 5 (id=210):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10)
r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='-'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0)
getsockopt(r2, 0x5, 0x72874595, &(0x7f0000000180)=""/52, &(0x7f00000001c0)=0x34)
ppoll(&(0x7f0000000080)=[{r1, 0x1100}, {r1, 0x2}], 0x2, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x80044940, &(0x7f0000000540))
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r5}, 0x10)
utimes(&(0x7f0000003040)='./file0\x00', 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r3, &(0x7f0000000040)="ee", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0x8000005}, 0x1c)

1.214274972s ago: executing program 5 (id=211):
syz_emit_ethernet(0x2bf, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r0 = gettid()
timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x2}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
getpgrp(r1)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udplite6\x00')
socket$nl_route(0x10, 0x3, 0x0)
socket$igmp(0x2, 0x3, 0x2)
eventfd2(0x0, 0x80001)
io_setup(0x81, &(0x7f0000000400)=<r3=>0x0)
io_submit(r3, 0x0, &(0x7f0000000a00))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$BLKTRACESETUP(r4, 0xc0481273, 0x0)
ioctl$SG_BLKTRACETEARDOWN(r4, 0x1276, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000340)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfe27, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x6}, 0x18)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0xc0}}, 0x20010800)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4)
r7 = accept4$x25(r2, &(0x7f00000001c0)={0x9, @remote}, 0x0, 0x0)
setsockopt$X25_QBITINCL(r7, 0x106, 0x1, &(0x7f0000000340)=0x1, 0x4)

1.192152182s ago: executing program 4 (id=212):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000900), 0x8)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae)
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff})
splice(r4, 0x0, r3, 0x0, 0x1, 0x0)
fcntl$setstatus(r3, 0x407, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f0000000480)={0x2, 0xfffe, @multicast2}, 0x10)
sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000003, 0x11, r2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020017e9c0000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x1c, 0x80000)
sendmmsg$inet6(r6, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000880)}}], 0x1, 0x20004010)

864.956611ms ago: executing program 4 (id=213):
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='svc_stats_latency\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xfffffffffffffe64}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) (fail_nth: 3)
socket$inet6_sctp(0xa, 0x1, 0x84)
listen(0xffffffffffffffff, 0x7)

765.321551ms ago: executing program 3 (id=214):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x600000, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3, 0x0, 0x800}, 0x18)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x9c96, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYRES64, @ANYRES64=r1, @ANYRESOCT=r6, @ANYRES8=r5], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r7}, 0x10)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700000000000000047154c157a66ad790000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r9}, 0x10)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002300)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r10, &(0x7f0000000300)={'#! ', './file1', [{0x20, '(*c:,-\x84\x8d\xd2\x89\xbd\xc9\x95\xff\"\x060^IVf_\xef\x14\xa0\xb6\xc8\xd7\x17\xb0\x89\xa5\x8d\x15Z\xf7\xd3k1\xb8\x8c\x8f\xf7\xca\x16\xf5\xd3\x83\xf9:\xf4\xf8\xc9f'}, {0x20, '!(\x96}'}], 0xa, "d161050000000000000074bdca9720dfcc73de5b223a3c160f224c83ef6cefab8104649d48cdb9a6c7669fce915c6e7588a6259b6eb774f58cd31674f9"}, 0x84)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r10, 0x0)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r11, 0x0, 0x33, &(0x7f0000000080), 0x4)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r11)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
sendmsg$tipc(r12, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0)

654.680021ms ago: executing program 3 (id=215):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x8, 0x81}, 0x140, 0x1, 0x3, 0x5, 0x0, 0x8, 0x5d, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
write(r3, &(0x7f00000000c0)="822a", 0x2)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r4=>r0, {<r5=>r0}}, './file0\x00'})
getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000080)={@multicast1, @local, <r6=>0x0}, &(0x7f00000000c0)=0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x11, 0x3, 0x80000000, 0x5, 0x0, 0x1, 0xc0f, '\x00', r6, r4, 0x0, 0x3, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
connect$netlink(r4, &(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfd, 0x8000000}, 0xc)
r7 = socket$netlink(0x10, 0x3, 0x14)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

651.283031ms ago: executing program 0 (id=216):
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000400)="61bd7a99a6", 0x5, 0x9000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff)
sendfile(r1, r1, 0x0, 0xfffe80) (fail_nth: 6)

484.949891ms ago: executing program 2 (id=217):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
syz_emit_ethernet(0x52, &(0x7f00000043c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f2001c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa6c"], 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'veth0_to_batadv\x00', {0x2, 0x4e20, @multicast1}})
r2 = socket$inet_sctp(0x2, 0x4, 0x84)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00')
close(r3)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_acct\x00')
setns(r4, 0x8000000)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000008c0)={0xb0, r7, 0x200, 0x70bd2a, 0x25dfdbf8, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xb}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10008}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000000}, 0x10000000)
close(r6)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

0s ago: executing program 5 (id=218):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000940)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x6f00}, 0x0, 0xb216, 0x0, 0x0, 0x3}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14)
futex_waitv(&(0x7f0000001040), 0x0, 0x0, 0x0, 0x1)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x2)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x2)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080005000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2}, 0x4)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
r5 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000001080)=0x8)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000001c0)={r6, 0x80}, &(0x7f0000000200)=0x8)
write$UHID_CREATE(r3, &(0x7f0000000480)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000400)=""/107, 0x6b, 0x7, 0x2, 0x0, 0x6, 0x5}}, 0x120)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000008000000080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000889342011bc8cc1d05c0a1e33c157db1fde98913fe8cb2ff2aa949bf588285f37152c742882e27a420e56df8589dc6ef0c8d822258d1ec2f5dcd7d3ee7243d7446ab9c88d5bd3b6b573b6f319727e5", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10)
r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x288840, 0x0)
close_range(r8, r8, 0x0)
close(r8)
pipe(&(0x7f00000000c0))
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x3}, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x4b}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)

kernel console output (not intermixed with test programs):

[   21.761074][   T29] audit: type=1400 audit(1737089797.476:81): avc:  denied  { read } for  pid=2983 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
Warning: Permanently added '10.128.10.6' (ED25519) to the list of known hosts.
[   26.679073][   T29] audit: type=1400 audit(1737089802.386:82): avc:  denied  { mounton } for  pid=3288 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   26.680413][ T3288] cgroup: Unknown subsys name 'net'
[   26.701822][   T29] audit: type=1400 audit(1737089802.386:83): avc:  denied  { mount } for  pid=3288 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   26.729289][   T29] audit: type=1400 audit(1737089802.416:84): avc:  denied  { unmount } for  pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   26.877137][ T3288] cgroup: Unknown subsys name 'cpuset'
[   26.883481][ T3288] cgroup: Unknown subsys name 'rlimit'
[   26.996092][   T29] audit: type=1400 audit(1737089802.696:85): avc:  denied  { setattr } for  pid=3288 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   27.019490][   T29] audit: type=1400 audit(1737089802.706:86): avc:  denied  { create } for  pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   27.040084][   T29] audit: type=1400 audit(1737089802.706:87): avc:  denied  { write } for  pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   27.060453][   T29] audit: type=1400 audit(1737089802.706:88): avc:  denied  { read } for  pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   27.080820][   T29] audit: type=1400 audit(1737089802.706:89): avc:  denied  { mounton } for  pid=3288 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   27.105706][   T29] audit: type=1400 audit(1737089802.706:90): avc:  denied  { mount } for  pid=3288 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   27.114639][ T3292] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   27.137763][   T29] audit: type=1400 audit(1737089802.846:91): avc:  denied  { relabelto } for  pid=3292 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   27.175872][ T3288] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   28.581638][ T3299] chnl_net:caif_netlink_parms(): no params data found
[   28.617002][ T3300] chnl_net:caif_netlink_parms(): no params data found
[   28.668038][ T3301] chnl_net:caif_netlink_parms(): no params data found
[   28.677376][ T3298] chnl_net:caif_netlink_parms(): no params data found
[   28.718802][ T3306] chnl_net:caif_netlink_parms(): no params data found
[   28.745604][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.752716][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.760082][ T3300] bridge_slave_0: entered allmulticast mode
[   28.766829][ T3300] bridge_slave_0: entered promiscuous mode
[   28.778150][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.785221][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.792381][ T3299] bridge_slave_0: entered allmulticast mode
[   28.799190][ T3299] bridge_slave_0: entered promiscuous mode
[   28.818426][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.825566][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.832865][ T3300] bridge_slave_1: entered allmulticast mode
[   28.839379][ T3300] bridge_slave_1: entered promiscuous mode
[   28.845700][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.852815][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.860076][ T3299] bridge_slave_1: entered allmulticast mode
[   28.866553][ T3299] bridge_slave_1: entered promiscuous mode
[   28.925016][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   28.935346][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   28.957828][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   28.972781][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   28.987043][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.994170][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.001374][ T3301] bridge_slave_0: entered allmulticast mode
[   29.007809][ T3301] bridge_slave_0: entered promiscuous mode
[   29.014235][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.021370][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.028581][ T3298] bridge_slave_0: entered allmulticast mode
[   29.034989][ T3298] bridge_slave_0: entered promiscuous mode
[   29.057333][ T3300] team0: Port device team_slave_0 added
[   29.063155][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.070296][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.077546][ T3301] bridge_slave_1: entered allmulticast mode
[   29.084216][ T3301] bridge_slave_1: entered promiscuous mode
[   29.090438][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.097541][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.104693][ T3298] bridge_slave_1: entered allmulticast mode
[   29.111315][ T3298] bridge_slave_1: entered promiscuous mode
[   29.117475][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.124588][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.131843][ T3306] bridge_slave_0: entered allmulticast mode
[   29.138353][ T3306] bridge_slave_0: entered promiscuous mode
[   29.150247][ T3300] team0: Port device team_slave_1 added
[   29.156597][ T3299] team0: Port device team_slave_0 added
[   29.172204][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.179344][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.186686][ T3306] bridge_slave_1: entered allmulticast mode
[   29.193072][ T3306] bridge_slave_1: entered promiscuous mode
[   29.209755][ T3299] team0: Port device team_slave_1 added
[   29.229535][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.249238][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.256332][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.282299][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.293625][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.300635][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.326566][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.338749][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.351550][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.361819][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.372356][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.387660][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.413493][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.420546][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.446509][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.463501][ T3301] team0: Port device team_slave_0 added
[   29.479076][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.486111][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.512121][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.528133][ T3301] team0: Port device team_slave_1 added
[   29.534302][ T3298] team0: Port device team_slave_0 added
[   29.540747][ T3306] team0: Port device team_slave_0 added
[   29.561028][ T3300] hsr_slave_0: entered promiscuous mode
[   29.567020][ T3300] hsr_slave_1: entered promiscuous mode
[   29.573502][ T3298] team0: Port device team_slave_1 added
[   29.589621][ T3306] team0: Port device team_slave_1 added
[   29.595555][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.602596][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.628605][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.666159][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.673166][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.699147][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.713198][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.720269][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.746411][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.757746][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.764743][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.790670][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.811599][ T3299] hsr_slave_0: entered promiscuous mode
[   29.817964][ T3299] hsr_slave_1: entered promiscuous mode
[   29.823795][ T3299] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   29.831416][ T3299] Cannot create hsr debugfs directory
[   29.848414][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.855395][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.881342][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.893038][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.900034][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.926012][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.987318][ T3306] hsr_slave_0: entered promiscuous mode
[   29.993494][ T3306] hsr_slave_1: entered promiscuous mode
[   29.999511][ T3306] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   30.007156][ T3306] Cannot create hsr debugfs directory
[   30.014683][ T3298] hsr_slave_0: entered promiscuous mode
[   30.020796][ T3298] hsr_slave_1: entered promiscuous mode
[   30.026852][ T3298] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   30.034419][ T3298] Cannot create hsr debugfs directory
[   30.068310][ T3301] hsr_slave_0: entered promiscuous mode
[   30.074350][ T3301] hsr_slave_1: entered promiscuous mode
[   30.080321][ T3301] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   30.087934][ T3301] Cannot create hsr debugfs directory
[   30.239494][ T3300] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   30.248284][ T3300] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   30.267602][ T3300] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   30.276813][ T3300] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   30.305847][ T3299] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   30.318081][ T3299] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   30.329550][ T3299] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   30.342661][ T3299] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   30.386256][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.393247][ T3301] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   30.407907][ T3301] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   30.423280][ T3306] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   30.432067][ T3301] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   30.441790][ T3301] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   30.459671][ T3306] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   30.468603][ T3306] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   30.481686][ T3306] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   30.491852][ T3300] 8021q: adding VLAN 0 to HW filter on device team0
[   30.511031][  T107] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.518239][  T107] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.527077][ T3298] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   30.540770][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.547883][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.555713][ T3298] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   30.565509][ T3298] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   30.575586][ T3298] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   30.635666][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.681201][ T3299] 8021q: adding VLAN 0 to HW filter on device team0
[   30.695143][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.706692][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.728889][  T331] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.736111][  T331] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.749587][ T3306] 8021q: adding VLAN 0 to HW filter on device team0
[   30.761187][  T331] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.768287][  T331] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.779662][  T331] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.786760][  T331] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.799664][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.806828][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.816358][ T3301] 8021q: adding VLAN 0 to HW filter on device team0
[   30.829993][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.843255][ T3298] 8021q: adding VLAN 0 to HW filter on device team0
[   30.857101][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.864232][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.874759][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.881828][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.905022][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.912158][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.931493][  T331] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.938570][  T331] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.954028][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.964142][ T3301] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   30.974569][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.035578][ T3298] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   31.046000][ T3298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.071012][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.124473][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.198937][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.230792][ T3300] veth0_vlan: entered promiscuous mode
[   31.259299][ T3300] veth1_vlan: entered promiscuous mode
[   31.268431][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.278018][ T3301] veth0_vlan: entered promiscuous mode
[   31.286028][ T3301] veth1_vlan: entered promiscuous mode
[   31.307493][ T3300] veth0_macvtap: entered promiscuous mode
[   31.334044][ T3300] veth1_macvtap: entered promiscuous mode
[   31.362862][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.370244][ T3299] veth0_vlan: entered promiscuous mode
[   31.380924][ T3301] veth0_macvtap: entered promiscuous mode
[   31.390520][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.408723][ T3306] veth0_vlan: entered promiscuous mode
[   31.417427][ T3300] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.426305][ T3300] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.435045][ T3300] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.443914][ T3300] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.454128][ T3301] veth1_macvtap: entered promiscuous mode
[   31.469065][ T3299] veth1_vlan: entered promiscuous mode
[   31.475442][ T3306] veth1_vlan: entered promiscuous mode
[   31.482964][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.493570][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.504438][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.527607][ T3298] veth0_vlan: entered promiscuous mode
[   31.535481][ T3298] veth1_vlan: entered promiscuous mode
[   31.552769][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.563400][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.577002][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.588733][ T3300] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   31.592441][ T3301] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.612019][ T3301] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.620986][ T3301] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.629869][ T3301] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.641856][ T3299] veth0_macvtap: entered promiscuous mode
[   31.663103][ T3306] veth0_macvtap: entered promiscuous mode
[   31.676939][ T3306] veth1_macvtap: entered promiscuous mode
[   31.684236][ T3299] veth1_macvtap: entered promiscuous mode
[   31.687051][   T29] kauditd_printk_skb: 34 callbacks suppressed
[   31.687067][   T29] audit: type=1400 audit(1737089807.396:126): avc:  denied  { map_create } for  pid=3435 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   31.694950][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.725350][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.735215][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.745781][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.756317][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.767205][   T29] audit: type=1400 audit(1737089807.466:127): avc:  denied  { map_read map_write } for  pid=3435 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   31.791968][ T3298] veth0_macvtap: entered promiscuous mode
[   31.800743][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.811293][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.821225][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.831782][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.842666][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.855839][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.866529][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.876375][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.886827][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.896687][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.907185][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.919540][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.930565][ T3298] veth1_macvtap: entered promiscuous mode
[   31.952389][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.962918][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.972794][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.983433][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.993272][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.003745][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.011669][ T3440] loop3: detected capacity change from 0 to 256
[   32.018137][   T29] audit: type=1400 audit(1737089807.716:128): avc:  denied  { create } for  pid=3439 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   32.020902][ T3440] =======================================================
[   32.020902][ T3440] WARNING: The mand mount option has been deprecated and
[   32.020902][ T3440]          and is ignored by this kernel. Remove the mand
[   32.020902][ T3440]          option from the mount to silence this warning.
[   32.020902][ T3440] =======================================================
[   32.039281][   T29] audit: type=1400 audit(1737089807.716:129): avc:  denied  { ioctl } for  pid=3439 comm="syz.3.4" path="socket:[3595]" dev="sockfs" ino=3595 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   32.098606][   T29] audit: type=1400 audit(1737089807.716:130): avc:  denied  { create } for  pid=3439 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   32.125920][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.137995][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.148610][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.150429][   T29] audit: type=1400 audit(1737089807.806:131): avc:  denied  { mount } for  pid=3439 comm="syz.3.4" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   32.158528][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.158558][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.158572][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.194972][ T3440] netlink: 268 bytes leftover after parsing attributes in process `syz.3.4'.
[   32.200439][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.200456][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.211042][ T3440] unsupported nla_type 65024
[   32.219706][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.223958][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.236177][   T29] audit: type=1400 audit(1737089807.896:132): avc:  denied  { write } for  pid=3439 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   32.281760][   T29] audit: type=1400 audit(1737089807.896:133): avc:  denied  { nlmsg_write } for  pid=3439 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   32.292234][ T3299] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.310928][ T3299] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.319732][ T3299] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.328521][ T3299] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.345924][ T3306] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.354723][ T3306] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.363495][ T3306] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.372285][ T3306] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.385193][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.394748][   T29] audit: type=1400 audit(1737089808.096:134): avc:  denied  { unmount } for  pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   32.395778][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.425564][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.436219][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.446033][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.456724][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.466831][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.477448][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.490623][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.499462][ T3298] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.508248][ T3298] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.517463][ T3298] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.526234][ T3298] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.550136][ T3442] loop3: detected capacity change from 0 to 2048
[   32.583485][ T3442] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   32.600006][   T29] audit: type=1400 audit(1737089808.306:135): avc:  denied  { mount } for  pid=3441 comm="syz.3.6" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   32.831800][ T3469] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   32.875759][ T3471] lo speed is unknown, defaulting to 1000
[   32.894785][ T3471] lo speed is unknown, defaulting to 1000
[   32.915866][ T3471] lo speed is unknown, defaulting to 1000
[   32.931142][ T3460] syzkaller0: entered allmulticast mode
[   32.961669][ T3460] syzkaller0 (unregistering): left allmulticast mode
[   32.977197][ T3471] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   32.995234][ T3471] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   33.034655][ T3484] loop4: detected capacity change from 0 to 164
[   33.067272][ T3471] lo speed is unknown, defaulting to 1000
[   33.073862][ T3471] lo speed is unknown, defaulting to 1000
[   33.081812][ T3471] lo speed is unknown, defaulting to 1000
[   33.088709][ T3471] lo speed is unknown, defaulting to 1000
[   33.097558][ T3471] lo speed is unknown, defaulting to 1000
[   33.148000][ T3493] netlink: 196 bytes leftover after parsing attributes in process `syz.1.12'.
[   33.200087][ T3442] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   33.200573][ T3495] lo speed is unknown, defaulting to 1000
[   33.215994][ T3442] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[   33.233261][ T3442] EXT4-fs (loop3): This should not happen!! Data will be lost
[   33.233261][ T3442] 
[   33.243099][ T3442] EXT4-fs (loop3): Total free blocks count 0
[   33.249220][ T3442] EXT4-fs (loop3): Free/Dirty block details
[   33.255143][ T3442] EXT4-fs (loop3): free_blocks=2415919104
[   33.261130][ T3442] EXT4-fs (loop3): dirty_blocks=8192
[   33.266492][ T3442] EXT4-fs (loop3): Block reservation details
[   33.272583][ T3442] EXT4-fs (loop3): i_reserved_data_blocks=512
[   33.340441][ T3453] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[   33.363525][ T3498] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3498 comm=syz.4.14
[   33.376110][ T1034] IPVS: starting estimator thread 0...
[   33.393368][ T3498] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=102 sclass=netlink_tcpdiag_socket pid=3498 comm=syz.4.14
[   33.423230][ T3498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14'.
[   33.464982][ T3498] netlink: 96 bytes leftover after parsing attributes in process `syz.4.14'.
[   33.475319][ T3498] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   33.476211][ T3499] IPVS: using max 2016 ests per chain, 100800 per kthread
[   33.519394][ T3442] syz.3.6 (3442) used greatest stack depth: 10216 bytes left
[   33.608926][   T36] IPVS: stop unused estimator thread 0...
[   33.653528][ T3508] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[   33.715036][ T3510] SELinux:  Context � is not valid (left unmapped).
[   33.737355][ T3510] loop2: detected capacity change from 0 to 512
[   33.745717][ T3510] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   33.751203][ T3513] Zero length message leads to an empty skb
[   33.758802][ T3510] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   33.779505][ T3510] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   33.796880][ T3510] EXT4-fs (loop2): 1 truncate cleaned up
[   33.803400][ T3510] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.845777][ T3515] 9pnet_virtio: no channels available for device 127.0.0.1
[   34.048396][ T3522] loop3: detected capacity change from 0 to 256
[   34.127601][ T3522] netlink: 3 bytes leftover after parsing attributes in process `syz.3.22'.
[   34.438612][ T3510] lo speed is unknown, defaulting to 1000
[   34.543487][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.579837][ T3531] loop3: detected capacity change from 0 to 128
[   34.587402][ T3531] vfat: Unknown parameter ''
[   34.661470][ T3540] syz.3.29[3540] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   34.661576][ T3540] syz.3.29[3540] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   34.674909][ T3540] syz.3.29[3540] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   34.782906][ T3551] loop4: detected capacity change from 0 to 512
[   34.808833][ T3551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.821479][ T3551] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   34.865891][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.919458][ T3560] loop4: detected capacity change from 0 to 2048
[   34.947669][ T3560] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   35.210754][ T3564] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ����
[   35.248073][ T3564] lo speed is unknown, defaulting to 1000
[   35.605260][ T3566] netlink: zone id is out of range
[   35.880928][ T3570] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[   35.940415][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.957244][ T3574] FAULT_INJECTION: forcing a failure.
[   35.957244][ T3574] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   35.970623][ T3574] CPU: 0 UID: 0 PID: 3574 Comm: syz.3.38 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0
[   35.981217][ T3574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   35.991405][ T3574] Call Trace:
[   35.994703][ T3574]  <TASK>
[   35.997657][ T3574]  dump_stack_lvl+0xf2/0x150
[   36.002398][ T3574]  dump_stack+0x15/0x1a
[   36.006618][ T3574]  should_fail_ex+0x223/0x230
[   36.011372][ T3574]  should_fail_alloc_page+0xfd/0x110
[   36.016706][ T3574]  __alloc_pages_noprof+0x109/0x340
[   36.022001][ T3574]  alloc_pages_mpol_noprof+0xb8/0x260
[   36.027486][ T3574]  vma_alloc_folio_noprof+0x1a0/0x2f0
[   36.032871][ T3574]  do_wp_page+0x64b/0x2340
[   36.037295][ T3574]  ? __rcu_read_lock+0x36/0x50
[   36.042079][ T3574]  handle_mm_fault+0xc63/0x2ac0
[   36.047008][ T3574]  exc_page_fault+0x296/0x650
[   36.051723][ T3574]  asm_exc_page_fault+0x26/0x30
[   36.056588][ T3574] RIP: 0010:__put_user_4+0x11/0x20
[   36.061715][ T3574] Code: 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90
[   36.081340][ T3574] RSP: 0018:ffffc900037a7db8 EFLAGS: 00050206
[   36.087466][ T3574] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000020000000
[   36.095462][ T3574] RDX: ffff8881053a3180 RSI: 0000000000000000 RDI: 0000000000000000
[   36.103438][ T3574] RBP: 0000000000000000 R08: ffffffff848aedb2 R09: 0000000000000000
[   36.111435][ T3574] R10: 0001ffffffffffff R11: ffff8881053a3180 R12: 0000000000000000
[   36.120462][ T3574] R13: 0000000020000000 R14: 0000000000000000 R15: ffff8881036f44c0
[   36.128559][ T3574]  ? rawv6_getsockopt+0x252/0x3b0
[   36.133712][ T3574]  rawv6_getsockopt+0x272/0x3b0
[   36.138593][ T3574]  sock_common_getsockopt+0x5b/0x70
[   36.143905][ T3574]  ? __pfx_sock_common_getsockopt+0x10/0x10
[   36.149853][ T3574]  do_sock_getsockopt+0x1ca/0x260
[   36.154897][ T3574]  __x64_sys_getsockopt+0x18c/0x200
[   36.160120][ T3574]  x64_sys_call+0x1288/0x2dc0
[   36.164805][ T3574]  do_syscall_64+0xc9/0x1c0
[   36.169380][ T3574]  ? clear_bhb_loop+0x55/0xb0
[   36.174068][ T3574]  ? clear_bhb_loop+0x55/0xb0
[   36.178760][ T3574]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   36.184663][ T3574] RIP: 0033:0x7feefe9d5d29
[   36.189187][ T3574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   36.208847][ T3574] RSP: 002b:00007feefd047038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[   36.217340][ T3574] RAX: ffffffffffffffda RBX: 00007feefebc5fa0 RCX: 00007feefe9d5d29
[   36.225318][ T3574] RDX: 0000000000000001 RSI: 000000000000003a RDI: 0000000000000003
[   36.233363][ T3574] RBP: 00007feefd047090 R08: 0000000020000000 R09: 0000000000000000
[   36.241351][ T3574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   36.249379][ T3574] R13: 0000000000000000 R14: 00007feefebc5fa0 R15: 00007ffeecb36c38
[   36.257380][ T3574]  </TASK>
[   36.373211][ T3581] loop3: detected capacity change from 0 to 128
[   36.392164][ T3581] vfat: Unknown parameter ''
[   36.403885][ T3585] loop4: detected capacity change from 0 to 128
[   36.419942][ T3585] vfat: Unknown parameter ''
[   36.480765][ T3601] loop3: detected capacity change from 0 to 512
[   36.498896][ T3601] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.513897][ T3601] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   36.567481][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.691773][ T3617] capability: warning: `syz.4.43' uses 32-bit capabilities (legacy support in use)
[   36.710690][   T29] kauditd_printk_skb: 1199 callbacks suppressed
[   36.710707][   T29] audit: type=1326 audit(1737089812.416:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3614 comm="syz.3.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feefe9ccce7 code=0x7ffc0000
[   36.740334][   T29] audit: type=1326 audit(1737089812.416:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3614 comm="syz.3.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feefe971f29 code=0x7ffc0000
[   36.763573][   T29] audit: type=1326 audit(1737089812.416:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3614 comm="syz.3.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7feefe9d5d29 code=0x7ffc0000
[   36.790621][   T29] audit: type=1326 audit(1737089812.496:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3614 comm="syz.3.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feefe9ccce7 code=0x7ffc0000
[   36.813928][   T29] audit: type=1326 audit(1737089812.496:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3614 comm="syz.3.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feefe971f29 code=0x7ffc0000
[   36.837362][   T29] audit: type=1326 audit(1737089812.496:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3614 comm="syz.3.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7feefe9d5d29 code=0x7ffc0000
[   36.871552][   T29] audit: type=1326 audit(1737089812.496:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3614 comm="syz.3.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feefe9ccce7 code=0x7ffc0000
[   36.894795][   T29] audit: type=1326 audit(1737089812.496:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3614 comm="syz.3.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feefe971f29 code=0x7ffc0000
[   36.918093][   T29] audit: type=1326 audit(1737089812.496:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3614 comm="syz.3.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7feefe9d5d29 code=0x7ffc0000
[   36.941489][   T29] audit: type=1400 audit(1737089812.496:1344): avc:  denied  { mount } for  pid=3620 comm="syz.0.45" name="/" dev="configfs" ino=2134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   36.987545][   T28] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   37.022845][ T3630] loop7: detected capacity change from 0 to 16384
[   37.193383][ T3634] FAULT_INJECTION: forcing a failure.
[   37.193383][ T3634] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   37.206606][ T3634] CPU: 0 UID: 0 PID: 3634 Comm: syz.0.51 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0
[   37.217137][ T3634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   37.227337][ T3634] Call Trace:
[   37.230625][ T3634]  <TASK>
[   37.233564][ T3634]  dump_stack_lvl+0xf2/0x150
[   37.238185][ T3634]  dump_stack+0x15/0x1a
[   37.242449][ T3634]  should_fail_ex+0x223/0x230
[   37.247209][ T3634]  should_fail+0xb/0x10
[   37.251374][ T3634]  should_fail_usercopy+0x1a/0x20
[   37.256433][ T3634]  _copy_to_user+0x20/0xa0
[   37.261049][ T3634]  simple_read_from_buffer+0xa0/0x110
[   37.266484][ T3634]  proc_fail_nth_read+0xf9/0x140
[   37.271581][ T3634]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   37.277190][ T3634]  vfs_read+0x1a2/0x700
[   37.281372][ T3634]  ? __rcu_read_unlock+0x4e/0x70
[   37.286396][ T3634]  ? __fget_files+0x17c/0x1c0
[   37.291117][ T3634]  ksys_read+0xe8/0x1b0
[   37.295360][ T3634]  __x64_sys_read+0x42/0x50
[   37.299964][ T3634]  x64_sys_call+0x2874/0x2dc0
[   37.304744][ T3634]  do_syscall_64+0xc9/0x1c0
[   37.309260][ T3634]  ? clear_bhb_loop+0x55/0xb0
[   37.314031][ T3634]  ? clear_bhb_loop+0x55/0xb0
[   37.318780][ T3634]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   37.324758][ T3634] RIP: 0033:0x7fc8d0cf473c
[   37.329178][ T3634] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   37.348854][ T3634] RSP: 002b:00007fc8cf367030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   37.357280][ T3634] RAX: ffffffffffffffda RBX: 00007fc8d0ee5fa0 RCX: 00007fc8d0cf473c
[   37.365260][ T3634] RDX: 000000000000000f RSI: 00007fc8cf3670a0 RDI: 0000000000000006
[   37.373325][ T3634] RBP: 00007fc8cf367090 R08: 0000000000000000 R09: 0000000000000000
[   37.381367][ T3634] R10: 000000000000006a R11: 0000000000000246 R12: 0000000000000001
[   37.389349][ T3634] R13: 0000000000000000 R14: 00007fc8d0ee5fa0 R15: 00007ffd126634b8
[   37.397346][ T3634]  </TASK>
[   37.401517][ T3636] loop7: detected capacity change from 16384 to 16383
[   37.429537][ T3630] I/O error, dev loop7, sector 9984 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 0
[   37.435484][ T3636] I/O error, dev loop7, sector 6744 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[   37.449401][ T3636] Buffer I/O error on dev loop7, logical block 843, lost async page write
[   37.458053][ T3636] Buffer I/O error on dev loop7, logical block 844, lost async page write
[   37.458813][ T3630] I/O error, dev loop7, sector 9736 op 0x0:(READ) flags 0x80700 phys_seg 20 prio class 0
[   37.466626][ T3636] Buffer I/O error on dev loop7, logical block 845, lost async page write
[   37.476713][ T3630] I/O error, dev loop7, sector 9736 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   37.485065][ T3636] Buffer I/O error on dev loop7, logical block 846, lost async page write
[   37.494443][ T3630] Buffer I/O error on dev loop7, logical block 1217, async page read
[   37.502952][ T3636] Buffer I/O error on dev loop7, logical block 847, lost async page write
[   37.503007][ T3636] Buffer I/O error on dev loop7, logical block 848, lost async page write
[   37.503027][ T3636] Buffer I/O error on dev loop7, logical block 849, lost async page write
[   37.503048][ T3636] Buffer I/O error on dev loop7, logical block 850, lost async page write
[   37.503069][ T3636] Buffer I/O error on dev loop7, logical block 851, lost async page write
[   37.506747][ T3636] I/O error, dev loop7, sector 7768 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[   37.566226][ T3630] I/O error, dev loop7, sector 9736 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   37.601656][ T3636] I/O error, dev loop7, sector 8792 op 0x1:(WRITE) flags 0x800 phys_seg 117 prio class 0
[   37.622461][ T3636] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   37.632558][ T3636] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   37.641784][ T3636]  loop7: unable to read partition table
[   37.647553][ T3636] loop_reread_partitions: partition scan of loop7 (R%0���T�$7�)]W����?�18��;9��C?��-��z׌����	������97d���) failed (rc=-5)
[   37.650928][ T3640] lo speed is unknown, defaulting to 1000
[   37.716851][ T3629] I/O error, dev loop7, sector 9728 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0
[   37.748655][ T3659] netlink: 24 bytes leftover after parsing attributes in process `syz.3.55'.
[   37.789805][ T3640] chnl_net:caif_netlink_parms(): no params data found
[   37.801515][ T3663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   37.817757][ T3663] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   37.829612][   T28] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   37.843127][ T3665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   37.880725][ T3665] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   37.892949][ T3661] xt_hashlimit: max too large, truncated to 1048576
[   37.900077][ T3661] No such timeout policy "syz1"
[   37.959094][   T28] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   37.985286][ T3640] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.992466][ T3640] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.999787][ T3640] bridge_slave_0: entered allmulticast mode
[   38.006609][ T3640] bridge_slave_0: entered promiscuous mode
[   38.013404][ T3640] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.020552][ T3640] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.028657][ T3640] bridge_slave_1: entered allmulticast mode
[   38.035238][ T3640] bridge_slave_1: entered promiscuous mode
[   38.044246][   T28] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.055639][ T3679] netlink: 100 bytes leftover after parsing attributes in process `syz.0.62'.
[   38.077698][ T3640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.088183][ T3640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.109906][ T3640] team0: Port device team_slave_0 added
[   38.124645][ T3640] team0: Port device team_slave_1 added
[   38.176643][ T3640] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.184142][ T3640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.210125][ T3640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.233852][   T28] bridge_slave_1: left allmulticast mode
[   38.239713][   T28] bridge_slave_1: left promiscuous mode
[   38.245450][   T28] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.262058][   T28] bridge_slave_0: left allmulticast mode
[   38.267793][   T28] bridge_slave_0: left promiscuous mode
[   38.273571][   T28] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.378902][   T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   38.390112][   T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   38.412978][   T28] bond0 (unregistering): Released all slaves
[   38.417772][ T3702] loop4: detected capacity change from 0 to 512
[   38.428355][ T3640] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.435322][ T3640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.461428][ T3640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.512210][ T3702] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.526114][ T3702] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   38.576351][ T3640] hsr_slave_0: entered promiscuous mode
[   38.582584][ T3640] hsr_slave_1: entered promiscuous mode
[   38.606204][ T3640] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   38.606548][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.614753][ T3640] Cannot create hsr debugfs directory
[   38.641250][   T28] hsr_slave_0: left promiscuous mode
[   38.672105][   T28] hsr_slave_1: left promiscuous mode
[   38.679235][   T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   38.686791][   T28] batman_adv: batadv0: Removing interface: batadv_slave_0
[   38.704837][   T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   38.712409][   T28] batman_adv: batadv0: Removing interface: batadv_slave_1
[   38.733130][   T28] veth1_macvtap: left promiscuous mode
[   38.738721][   T28] veth0_macvtap: left promiscuous mode
[   38.744324][   T28] veth1_vlan: left promiscuous mode
[   38.749640][   T28] veth0_vlan: left promiscuous mode
[   38.765761][ T3740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   38.786185][ T3740] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   38.816774][ T3735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.79'.
[   38.905023][   T28] team0 (unregistering): Port device team_slave_1 removed
[   38.916519][   T28] team0 (unregistering): Port device team_slave_0 removed
[   39.013505][ T3749] : renamed from bond0 (while UP)
[   39.042211][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   39.049730][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   39.057304][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   39.064817][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   39.072384][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   39.079862][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   39.087355][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   39.094846][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   39.102360][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   39.109784][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   39.117245][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   39.125067][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   39.132608][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   39.140047][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   39.147500][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   39.155046][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   39.162610][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   39.170684][ T3373] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   39.171723][ T3760] C: renamed from team_slave_0 (while UP)
[   39.199220][ T3760] netlink: 'syz.4.82': attribute type 2 has an invalid length.
[   39.206902][ T3760] netlink: 112 bytes leftover after parsing attributes in process `syz.4.82'.
[   39.219838][ T3760] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   39.302596][ T3640] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   39.325148][ T3640] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   39.332093][ T3770] loop2: detected capacity change from 0 to 512
[   39.342194][ T3640] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   39.357437][ T3770] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   39.363305][ T3775] loop4: detected capacity change from 0 to 512
[   39.390760][ T3640] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   39.409765][ T3770] EXT4-fs error (device loop2): ext4_quota_enable:7112: comm syz.2.85: inode #167772160: comm syz.2.85: iget: illegal inode #
[   39.431041][ T3770] EXT4-fs error (device loop2): ext4_quota_enable:7115: comm syz.2.85: Bad quota inode: 167772160, type: 2
[   39.439648][ T3775] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.456346][ T3770] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-117, ino=167772160). Please run e2fsck to fix.
[   39.468213][ T3778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.87'.
[   39.481820][ T3770] EXT4-fs (loop2): mount failed
[   39.517315][ T3775] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   39.530224][ T3640] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.548534][ T3778] IPVS: Error joining to the multicast group
[   39.563988][ T3640] 8021q: adding VLAN 0 to HW filter on device team0
[   39.574547][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.581668][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.593175][ T3787] loop0: detected capacity change from 0 to 128
[   39.623313][ T3787] vfat: Unknown parameter ''
[   39.636718][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.643902][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.658608][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.669918][ T3796] capability: warning: `syz.3.91' uses deprecated v2 capabilities in a way that may be insecure
[   39.720078][ T3640] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   39.737069][ T3802] 9pnet_fd: Insufficient options for proto=fd
[   39.854292][ T3640] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.863535][ T3815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   39.901044][ T3815] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   39.958876][ T3831] loop0: detected capacity change from 0 to 512
[   39.970611][ T3833] syz.3.100[3833] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   39.970686][ T3833] syz.3.100[3833] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   40.005945][ T3833] syz.3.100[3833] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   40.018299][ T3831] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #4: comm syz.0.99: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 2047, max 0(0), depth 0(0)
[   40.053780][ T3833] vlan2: entered allmulticast mode
[   40.066962][ T3844] loop2: detected capacity change from 0 to 512
[   40.074157][ T3831] EXT4-fs error (device loop0): ext4_quota_enable:7115: comm syz.0.99: Bad quota inode: 4, type: 1
[   40.089179][ T3831] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   40.097923][ T3844] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.104575][ T3831] EXT4-fs (loop0): mount failed
[   40.121408][ T3844] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   40.186582][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.230402][ T3640] veth0_vlan: entered promiscuous mode
[   40.258929][ T3640] veth1_vlan: entered promiscuous mode
[   40.302330][ T3640] veth0_macvtap: entered promiscuous mode
[   40.319432][ T3868] syz.3.105[3868] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   40.319580][ T3868] syz.3.105[3868] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   40.337587][ T3640] veth1_macvtap: entered promiscuous mode
[   40.357408][ T3868] syz.3.105[3868] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   40.358939][ T3869] SELinux:  Context system_u:object_r:login_exec_t:s0 is not valid (left unmapped).
[   40.361649][ T3861] loop2: detected capacity change from 0 to 128
[   40.397515][ T3640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   40.405349][ T3861] vfat: Unknown parameter ''
[   40.408167][ T3640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.422756][ T3640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   40.433242][ T3640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.443112][ T3640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   40.453684][ T3640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.463859][ T3640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   40.474405][ T3640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.495931][ T3640] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.519504][ T3640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   40.530072][ T3640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.540098][ T3640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   40.550655][ T3640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.560547][ T3640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   40.571080][ T3640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.580985][ T3640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   40.591444][ T3640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.609798][ T3640] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.628014][ T3885] netlink: 28 bytes leftover after parsing attributes in process `syz.3.109'.
[   40.637119][ T3885] netlink: 28 bytes leftover after parsing attributes in process `syz.3.109'.
[   40.646002][ T3885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.109'.
[   40.661975][ T3640] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.670772][ T3640] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.679622][ T3640] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.688364][ T3640] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.713965][ T3893] syz.0.111[3893] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   40.714111][ T3893] syz.0.111[3893] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   40.740166][ T3893] syz.0.111[3893] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   40.753594][ T3893] FAULT_INJECTION: forcing a failure.
[   40.753594][ T3893] name failslab, interval 1, probability 0, space 0, times 0
[   40.777731][ T3893] CPU: 0 UID: 0 PID: 3893 Comm: syz.0.111 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0
[   40.788449][ T3893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   40.798542][ T3893] Call Trace:
[   40.801843][ T3893]  <TASK>
[   40.804798][ T3893]  dump_stack_lvl+0xf2/0x150
[   40.809537][ T3893]  dump_stack+0x15/0x1a
[   40.813746][ T3893]  should_fail_ex+0x223/0x230
[   40.818480][ T3893]  should_failslab+0x8f/0xb0
[   40.823557][ T3893]  __kmalloc_noprof+0xab/0x3f0
[   40.828366][ T3893]  ? genl_family_rcv_msg_attrs_parse+0x75/0x1a0
[   40.834726][ T3893]  genl_family_rcv_msg_attrs_parse+0x75/0x1a0
[   40.840844][ T3893]  ? ns_capable+0x7d/0xb0
[   40.845248][ T3893]  genl_rcv_msg+0x470/0x6c0
[   40.849876][ T3893]  ? __pfx_netlbl_mgmt_adddef+0x10/0x10
[   40.855497][ T3893]  ? should_fail_ex+0x31/0x230
[   40.860445][ T3893]  ? __rcu_read_unlock+0x4e/0x70
[   40.865462][ T3893]  ? avc_has_perm_noaudit+0x1cc/0x210
[   40.870956][ T3893]  netlink_rcv_skb+0x12c/0x230
[   40.875821][ T3893]  ? __pfx_genl_rcv_msg+0x10/0x10
[   40.880931][ T3893]  genl_rcv+0x28/0x40
[   40.884936][ T3893]  netlink_unicast+0x599/0x670
[   40.889731][ T3893]  netlink_sendmsg+0x5cc/0x6e0
[   40.894528][ T3893]  ? __pfx_netlink_sendmsg+0x10/0x10
[   40.899820][ T3893]  __sock_sendmsg+0x140/0x180
[   40.904515][ T3893]  ____sys_sendmsg+0x312/0x410
[   40.909302][ T3893]  __sys_sendmsg+0x19d/0x230
[   40.913988][ T3893]  __x64_sys_sendmsg+0x46/0x50
[   40.918791][ T3893]  x64_sys_call+0x2734/0x2dc0
[   40.923469][ T3893]  do_syscall_64+0xc9/0x1c0
[   40.928044][ T3893]  ? clear_bhb_loop+0x55/0xb0
[   40.932807][ T3893]  ? clear_bhb_loop+0x55/0xb0
[   40.937493][ T3893]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   40.943480][ T3893] RIP: 0033:0x7fc8d0cf5d29
[   40.947920][ T3893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   40.967609][ T3893] RSP: 002b:00007fc8cf367038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   40.976095][ T3893] RAX: ffffffffffffffda RBX: 00007fc8d0ee5fa0 RCX: 00007fc8d0cf5d29
[   40.984084][ T3893] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000007
[   40.992053][ T3893] RBP: 00007fc8cf367090 R08: 0000000000000000 R09: 0000000000000000
[   41.000136][ T3893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   41.008116][ T3893] R13: 0000000000000000 R14: 00007fc8d0ee5fa0 R15: 00007ffd126634b8
[   41.016130][ T3893]  </TASK>
[   41.071161][ T3915] loop0: detected capacity change from 0 to 512
[   41.124851][ T3915] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #12: comm syz.0.113: corrupted in-inode xattr: invalid ea_ino
[   41.187309][ T3915] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.113: couldn't read orphan inode 12 (err -117)
[   41.205422][ T3915] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.219656][ T3915] EXT4-fs error (device loop0): htree_dirblock_to_tree:1083: inode #2: comm syz.0.113: Directory hole found for htree leaf block 0
[   41.276171][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.333360][ T3943] random: crng reseeded on system resumption
[   41.411402][ T3950] loop4: detected capacity change from 0 to 512
[   41.412931][ T3952] loop5: detected capacity change from 0 to 128
[   41.438268][ T3950] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   41.457992][ T3952] vfat: Unknown parameter ''
[   41.503405][ T3950] EXT4-fs (loop4): 1 truncate cleaned up
[   41.519296][ T3950] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.578440][    C1] hrtimer: interrupt took 27342 ns
[   41.668880][ T3985] loop5: detected capacity change from 0 to 512
[   41.683858][ T3985] EXT4-fs: group quota file already specified
[   41.689839][ T3988] 9pnet_fd: Insufficient options for proto=fd
[   41.720033][   T29] kauditd_printk_skb: 765 callbacks suppressed
[   41.720051][   T29] audit: type=1326 audit(1737089817.426:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3986 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f17e0805d29 code=0x7ffc0000
[   41.771245][   T29] audit: type=1326 audit(1737089817.426:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3986 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e0805d29 code=0x7ffc0000
[   41.794843][   T29] audit: type=1326 audit(1737089817.426:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3986 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f17e0805d29 code=0x7ffc0000
[   41.818223][   T29] audit: type=1326 audit(1737089817.426:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3986 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e0805d29 code=0x7ffc0000
[   41.841807][   T29] audit: type=1326 audit(1737089817.436:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3986 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f17e0805d29 code=0x7ffc0000
[   41.865177][   T29] audit: type=1326 audit(1737089817.436:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3986 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e0805d29 code=0x7ffc0000
[   41.888952][   T29] audit: type=1326 audit(1737089817.436:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3986 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17e0805d29 code=0x7ffc0000
[   41.905175][ T3998] IPv6: Can't replace route, no match found
[   41.912340][   T29] audit: type=1326 audit(1737089817.436:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3986 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e0805d29 code=0x7ffc0000
[   41.941594][   T29] audit: type=1326 audit(1737089817.436:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3986 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17e0805d29 code=0x7ffc0000
[   41.965291][   T29] audit: type=1326 audit(1737089817.456:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3986 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e0805d29 code=0x7ffc0000
[   42.008429][ T4007] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[   42.024138][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.147078][ T4009] loop5: detected capacity change from 0 to 128
[   42.162080][ T4009] vfat: Unknown parameter ''
[   42.195637][ T4029] loop4: detected capacity change from 0 to 512
[   42.215500][ T4029] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   42.249315][ T4029] EXT4-fs (loop4): orphan cleanup on readonly fs
[   42.261110][ T4034] loop0: detected capacity change from 0 to 512
[   42.279671][ T4034] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   42.288457][ T4029] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.137: Failed to acquire dquot type 1
[   42.312460][ T4029] EXT4-fs (loop4): 1 truncate cleaned up
[   42.322511][ T4029] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   42.335274][ T4034] EXT4-fs (loop0): orphan cleanup on readonly fs
[   42.343839][ T4034] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.138: Failed to acquire dquot type 1
[   42.366722][ T4046] 9pnet_fd: Insufficient options for proto=fd
[   42.403636][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.421783][ T4034] EXT4-fs (loop0): 1 truncate cleaned up
[   42.436282][ T4034] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   42.465349][ T4053] loop4: detected capacity change from 0 to 1024
[   42.497605][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.561615][ T4060] FAULT_INJECTION: forcing a failure.
[   42.561615][ T4060] name failslab, interval 1, probability 0, space 0, times 0
[   42.567480][ T4061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.144'.
[   42.574473][ T4060] CPU: 1 UID: 0 PID: 4060 Comm: syz.4.146 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0
[   42.593950][ T4060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   42.604060][ T4060] Call Trace:
[   42.606552][ T4061] bridge0: entered promiscuous mode
[   42.607433][ T4060]  <TASK>
[   42.607445][ T4060]  dump_stack_lvl+0xf2/0x150
[   42.612656][ T4061] macvlan2: entered promiscuous mode
[   42.615563][ T4060]  dump_stack+0x15/0x1a
[   42.615605][ T4060]  should_fail_ex+0x223/0x230
[   42.634491][ T4060]  should_failslab+0x8f/0xb0
[   42.639112][ T4060]  kmem_cache_alloc_noprof+0x52/0x320
[   42.644578][ T4060]  ? dst_alloc+0xc0/0x100
[   42.649020][ T4060]  dst_alloc+0xc0/0x100
[   42.653268][ T4060]  ? ip_vs_sh_schedule+0x252/0x5a0
[   42.658471][ T4060]  ip_route_output_key_hash_rcu+0xb90/0x12d0
[   42.664774][ T4060]  ip_route_output_key_hash+0x7b/0xb0
[   42.670188][ T4060]  tcp_v4_connect+0x3c4/0xad0
[   42.674935][ T4060]  ? __rcu_read_unlock+0x4e/0x70
[   42.680034][ T4060]  __inet_stream_connect+0x162/0x790
[   42.685352][ T4060]  ? tcp_sendmsg_fastopen+0x163/0x4f0
[   42.690883][ T4060]  ? should_failslab+0x8f/0xb0
[   42.695801][ T4060]  ? __kmalloc_cache_noprof+0x186/0x320
[   42.701396][ T4060]  tcp_sendmsg_fastopen+0x40e/0x4f0
[   42.706704][ T4060]  tcp_sendmsg_locked+0x2513/0x2710
[   42.711957][ T4060]  ? mntput_no_expire+0x70/0x3d0
[   42.716920][ T4060]  ? __rcu_read_unlock+0x4e/0x70
[   42.721905][ T4060]  ? avc_has_perm_noaudit+0x1cc/0x210
[   42.727363][ T4060]  ? avc_has_perm+0xd4/0x160
[   42.731993][ T4060]  ? _raw_spin_unlock_bh+0x36/0x40
[   42.737128][ T4060]  ? __pfx_tcp_sendmsg+0x10/0x10
[   42.742120][ T4060]  tcp_sendmsg+0x30/0x50
[   42.746392][ T4060]  inet_sendmsg+0x77/0xd0
[   42.750818][ T4060]  __sock_sendmsg+0x102/0x180
[   42.755518][ T4060]  __sys_sendto+0x1a8/0x230
[   42.760115][ T4060]  __x64_sys_sendto+0x78/0x90
[   42.764809][ T4060]  x64_sys_call+0x29fa/0x2dc0
[   42.769495][ T4060]  do_syscall_64+0xc9/0x1c0
[   42.774106][ T4060]  ? clear_bhb_loop+0x55/0xb0
[   42.778828][ T4060]  ? clear_bhb_loop+0x55/0xb0
[   42.783562][ T4060]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   42.789487][ T4060] RIP: 0033:0x7ffb5cfd5d29
[   42.793979][ T4060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   42.813630][ T4060] RSP: 002b:00007ffb5b647038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[   42.822127][ T4060] RAX: ffffffffffffffda RBX: 00007ffb5d1c5fa0 RCX: 00007ffb5cfd5d29
[   42.830168][ T4060] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006
[   42.838172][ T4060] RBP: 00007ffb5b647090 R08: 0000000020000040 R09: 0000000000000010
[   42.846228][ T4060] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000001
[   42.854213][ T4060] R13: 0000000000000000 R14: 00007ffb5d1c5fa0 R15: 00007ffd33862958
[   42.862205][ T4060]  </TASK>
[   42.907761][ T4063] FAULT_INJECTION: forcing a failure.
[   42.907761][ T4063] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   42.920906][ T4063] CPU: 1 UID: 0 PID: 4063 Comm: syz.2.147 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0
[   42.931593][ T4063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   42.941750][ T4063] Call Trace:
[   42.945034][ T4063]  <TASK>
[   42.947972][ T4063]  dump_stack_lvl+0xf2/0x150
[   42.952612][ T4063]  dump_stack+0x15/0x1a
[   42.956860][ T4063]  should_fail_ex+0x223/0x230
[   42.961552][ T4063]  should_fail+0xb/0x10
[   42.965736][ T4063]  should_fail_usercopy+0x1a/0x20
[   42.970809][ T4063]  _copy_from_user+0x1e/0xb0
[   42.975485][ T4063]  ____sys_sendmsg+0x1a4/0x410
[   42.980371][ T4063]  __sys_sendmmsg+0x227/0x4b0
[   42.985087][ T4063]  __x64_sys_sendmmsg+0x57/0x70
[   42.990039][ T4063]  x64_sys_call+0x29aa/0x2dc0
[   42.994804][ T4063]  do_syscall_64+0xc9/0x1c0
[   42.999368][ T4063]  ? clear_bhb_loop+0x55/0xb0
[   43.004204][ T4063]  ? clear_bhb_loop+0x55/0xb0
[   43.008909][ T4063]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   43.014829][ T4063] RIP: 0033:0x7f17e0805d29
[   43.019252][ T4063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   43.038900][ T4063] RSP: 002b:00007f17dee77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   43.047333][ T4063] RAX: ffffffffffffffda RBX: 00007f17e09f5fa0 RCX: 00007f17e0805d29
[   43.055386][ T4063] RDX: 0000000000000001 RSI: 0000000020000800 RDI: 0000000000000003
[   43.063370][ T4063] RBP: 00007f17dee77090 R08: 0000000000000000 R09: 0000000000000000
[   43.071350][ T4063] R10: 0000000000000c00 R11: 0000000000000246 R12: 0000000000000001
[   43.079518][ T4063] R13: 0000000000000000 R14: 00007f17e09f5fa0 R15: 00007ffccd3b1b18
[   43.087507][ T4063]  </TASK>
[   43.153662][ T4074] syz.5.149[4074] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   43.164357][ T4072] loop3: detected capacity change from 0 to 2048
[   43.239066][ T4072] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.315001][ T4083] lo speed is unknown, defaulting to 1000
[   43.354149][ T4089] lo speed is unknown, defaulting to 1000
[   43.436679][ T4101] 9pnet_fd: Insufficient options for proto=fd
[   43.661355][ T4124] FAULT_INJECTION: forcing a failure.
[   43.661355][ T4124] name failslab, interval 1, probability 0, space 0, times 0
[   43.674203][ T4124] CPU: 0 UID: 0 PID: 4124 Comm: syz.5.167 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0
[   43.684840][ T4124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   43.694919][ T4124] Call Trace:
[   43.698219][ T4124]  <TASK>
[   43.701238][ T4124]  dump_stack_lvl+0xf2/0x150
[   43.705884][ T4124]  dump_stack+0x15/0x1a
[   43.710081][ T4124]  should_fail_ex+0x223/0x230
[   43.714794][ T4124]  should_failslab+0x8f/0xb0
[   43.719456][ T4124]  kmem_cache_alloc_node_noprof+0x59/0x320
[   43.725302][ T4124]  ? __alloc_skb+0x10b/0x310
[   43.729939][ T4124]  __alloc_skb+0x10b/0x310
[   43.734392][ T4124]  netlink_alloc_large_skb+0xad/0xe0
[   43.739733][ T4124]  netlink_sendmsg+0x3b4/0x6e0
[   43.744628][ T4124]  ? __pfx_netlink_sendmsg+0x10/0x10
[   43.749944][ T4124]  __sock_sendmsg+0x140/0x180
[   43.754674][ T4124]  ____sys_sendmsg+0x312/0x410
[   43.759570][ T4124]  __sys_sendmsg+0x19d/0x230
[   43.764277][ T4124]  __x64_sys_sendmsg+0x46/0x50
[   43.769074][ T4124]  x64_sys_call+0x2734/0x2dc0
[   43.773805][ T4124]  do_syscall_64+0xc9/0x1c0
[   43.778338][ T4124]  ? clear_bhb_loop+0x55/0xb0
[   43.783064][ T4124]  ? clear_bhb_loop+0x55/0xb0
[   43.787816][ T4124]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   43.793730][ T4124] RIP: 0033:0x7f4e01765d29
[   43.797182][ T4072] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, 
[   43.798144][ T4124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   43.806452][ T4072] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   43.826044][ T4124] RSP: 002b:00007f4dffdd1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   43.838128][ T4072] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[   43.843341][ T4124] RAX: ffffffffffffffda RBX: 00007f4e01955fa0 RCX: 00007f4e01765d29
[   43.843360][ T4124] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003
[   43.855822][ T4072] EXT4-fs (loop3): This should not happen!! Data will be lost
[   43.855822][ T4072] 
[   43.863713][ T4124] RBP: 00007f4dffdd1090 R08: 0000000000000000 R09: 0000000000000000
[   43.863731][ T4124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   43.863747][ T4124] R13: 0000000000000000 R14: 00007f4e01955fa0 R15: 00007ffcc94e5868
[   43.863772][ T4124]  </TASK>
[   43.871751][ T4072] EXT4-fs (loop3): Total free blocks count 0
[   43.914756][ T4072] EXT4-fs (loop3): Free/Dirty block details
[   43.920783][ T4072] EXT4-fs (loop3): free_blocks=2415919104
[   43.926565][ T4072] EXT4-fs (loop3): dirty_blocks=8192
[   43.931867][ T4072] EXT4-fs (loop3): Block reservation details
[   43.937889][ T4072] EXT4-fs (loop3): i_reserved_data_blocks=512
[   43.968212][ T4094] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[   43.993841][ T4128] netlink: 16 bytes leftover after parsing attributes in process `syz.0.169'.
[   44.015486][ T4133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.171'.
[   44.083872][ T4139] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   44.110702][ T4133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.171'.
[   44.184862][ T4145] loop3: detected capacity change from 0 to 164
[   44.216970][ T4152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.177'.
[   44.231095][ T4152] loop0: detected capacity change from 0 to 512
[   44.272720][ T4152] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   44.288225][ T4157] loop5: detected capacity change from 0 to 128
[   44.295146][ T4152] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.177: invalid indirect mapped block 4294967295 (level 0)
[   44.350001][ T4152] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.177: invalid indirect mapped block 4294967295 (level 1)
[   44.377068][ T4162] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[   44.379236][ T4157] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   44.387669][ T4152] EXT4-fs (loop0): 1 orphan inode deleted
[   44.403387][ T4152] EXT4-fs (loop0): 1 truncate cleaned up
[   44.409467][ T4152] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.413144][ T4157] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   44.440330][ T4152] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.520609][ T1034] IPVS: starting estimator thread 0...
[   44.536259][    T8] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   44.614822][ T4187] FAULT_INJECTION: forcing a failure.
[   44.614822][ T4187] name failslab, interval 1, probability 0, space 0, times 0
[   44.626130][ T4175] IPVS: using max 2448 ests per chain, 122400 per kthread
[   44.628720][ T4187] CPU: 0 UID: 0 PID: 4187 Comm: syz.3.185 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0
[   44.645248][ T4187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   44.655372][ T4187] Call Trace:
[   44.658684][ T4187]  <TASK>
[   44.661639][ T4187]  dump_stack_lvl+0xf2/0x150
[   44.666429][ T4187]  dump_stack+0x15/0x1a
[   44.670619][ T4187]  should_fail_ex+0x223/0x230
[   44.675398][ T4187]  should_failslab+0x8f/0xb0
[   44.680080][ T4187]  __kmalloc_noprof+0xab/0x3f0
[   44.684873][ T4187]  ? ethnl_default_start+0x8c/0x330
[   44.690164][ T4187]  ethnl_default_start+0x8c/0x330
[   44.695236][ T4187]  ? __pfx_ethnl_default_start+0x10/0x10
[   44.701108][ T4187]  genl_start+0x2e8/0x3a0
[   44.705503][ T4187]  __netlink_dump_start+0x32a/0x520
[   44.710783][ T4187]  genl_rcv_msg+0x4e5/0x6c0
[   44.715414][ T4187]  ? __pfx_ethnl_default_start+0x10/0x10
[   44.721076][ T4187]  ? __pfx_ethnl_default_dumpit+0x10/0x10
[   44.726895][ T4187]  ? __pfx_ethnl_default_done+0x10/0x10
[   44.732522][ T4187]  ? __pfx_genl_start+0x10/0x10
[   44.737403][ T4187]  ? __pfx_genl_dumpit+0x10/0x10
[   44.742418][ T4187]  ? __pfx_genl_done+0x10/0x10
[   44.747315][ T4187]  netlink_rcv_skb+0x12c/0x230
[   44.752099][ T4187]  ? __pfx_genl_rcv_msg+0x10/0x10
[   44.757276][ T4187]  genl_rcv+0x28/0x40
[   44.761319][ T4187]  netlink_unicast+0x599/0x670
[   44.766107][ T4187]  netlink_sendmsg+0x5cc/0x6e0
[   44.770911][ T4187]  ? __pfx_netlink_sendmsg+0x10/0x10
[   44.776232][ T4187]  __sock_sendmsg+0x140/0x180
[   44.780935][ T4187]  ____sys_sendmsg+0x312/0x410
[   44.785781][ T4187]  __sys_sendmsg+0x19d/0x230
[   44.790411][ T4187]  __x64_sys_sendmsg+0x46/0x50
[   44.795259][ T4187]  x64_sys_call+0x2734/0x2dc0
[   44.800029][ T4187]  do_syscall_64+0xc9/0x1c0
[   44.804588][ T4187]  ? clear_bhb_loop+0x55/0xb0
[   44.809364][ T4187]  ? clear_bhb_loop+0x55/0xb0
[   44.814059][ T4187]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   44.820067][ T4187] RIP: 0033:0x7feefe9d5d29
[   44.824521][ T4187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   44.844197][ T4187] RSP: 002b:00007feefd047038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   44.852625][ T4187] RAX: ffffffffffffffda RBX: 00007feefebc5fa0 RCX: 00007feefe9d5d29
[   44.860606][ T4187] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000006
[   44.868591][ T4187] RBP: 00007feefd047090 R08: 0000000000000000 R09: 0000000000000000
[   44.876574][ T4187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   44.884554][ T4187] R13: 0000000000000000 R14: 00007feefebc5fa0 R15: 00007ffeecb36c38
[   44.892620][ T4187]  </TASK>
[   44.897936][ T1034] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   44.898318][ T3640] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   44.958132][ T4198] loop5: detected capacity change from 0 to 2048
[   44.993040][ T4198] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.183640][ T4225] siw: device registration error -23
[   45.240535][ T4228] xt_hashlimit: max too large, truncated to 1048576
[   45.249992][ T4228] No such timeout policy "syz1"
[   45.331287][ T4236] syzkaller0: entered promiscuous mode
[   45.336901][ T4236] syzkaller0: entered allmulticast mode
[   45.387451][ T4216] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   45.402957][ T4216] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[   45.415612][ T4216] EXT4-fs (loop5): This should not happen!! Data will be lost
[   45.415612][ T4216] 
[   45.425533][ T4216] EXT4-fs (loop5): Total free blocks count 0
[   45.431583][ T4216] EXT4-fs (loop5): Free/Dirty block details
[   45.437935][ T4216] EXT4-fs (loop5): free_blocks=2415919104
[   45.444034][ T4216] EXT4-fs (loop5): dirty_blocks=8192
[   45.449397][ T4216] EXT4-fs (loop5): Block reservation details
[   45.455406][ T4216] EXT4-fs (loop5): i_reserved_data_blocks=512
[   45.468945][ T4256] loop3: detected capacity change from 0 to 164
[   45.559411][ T4259] IPv6: Can't replace route, no match found
[   45.620486][ T4268] loop4: detected capacity change from 0 to 512
[   45.627997][ T3640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.658729][ T4268] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.671774][ T4268] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   45.755475][ T4268] netlink: 24 bytes leftover after parsing attributes in process `syz.4.204'.
[   45.772218][ T4281] xt_hashlimit: max too large, truncated to 1048576
[   45.780412][ T4281] No such timeout policy "syz1"
[   45.792466][ T4268] netlink: 4 bytes leftover after parsing attributes in process `syz.4.204'.
[   45.822784][ T4287] lo speed is unknown, defaulting to 1000
[   45.859653][ T4293] loop2: detected capacity change from 0 to 1024
[   45.866652][ T4293] EXT4-fs: quotafile must be on filesystem root
[   45.904753][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.958793][ T4296] netlink: 'syz.4.212': attribute type 16 has an invalid length.
[   45.966733][ T4296] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.212'.
[   46.476541][ T4305] infiniband syz!: set active
[   46.481343][ T4305] infiniband syz!: added team_slave_0
[   46.484311][ T4309] loop0: detected capacity change from 0 to 2048
[   46.517461][ T4309] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.526811][ T4305] RDS/IB: syz!: added
[   46.533558][ T4305] smc: adding ib device syz! with port count 1
[   46.542052][ T4305] smc:    ib device syz! port 1 has pnetid 
[   46.552012][ T4309] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   46.603672][ T4309] FAULT_INJECTION: forcing a failure.
[   46.603672][ T4309] name failslab, interval 1, probability 0, space 0, times 0
[   46.616589][ T4309] CPU: 0 UID: 0 PID: 4309 Comm: syz.0.216 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0
[   46.627263][ T4309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   46.637359][ T4309] Call Trace:
[   46.640688][ T4309]  <TASK>
[   46.643638][ T4309]  dump_stack_lvl+0xf2/0x150
[   46.648275][ T4309]  dump_stack+0x15/0x1a
[   46.652532][ T4309]  should_fail_ex+0x223/0x230
[   46.657278][ T4309]  should_failslab+0x8f/0xb0
[   46.661933][ T4309]  kmem_cache_alloc_noprof+0x52/0x320
[   46.667381][ T4309]  ? ext4_init_io_end+0x31/0xb0
[   46.672318][ T4309]  ext4_init_io_end+0x31/0xb0
[   46.677117][ T4309]  ext4_do_writepages+0x6c5/0x2130
[   46.682334][ T4309]  ? probe_sched_wakeup+0x81/0xa0
[   46.687390][ T4309]  ? try_to_wake_up+0x35e/0x570
[   46.692330][ T4309]  ? __rcu_read_unlock+0x34/0x70
[   46.697300][ T4309]  ? __queue_work+0x77d/0xb40
[   46.702090][ T4309]  ? queue_work_on+0xf4/0x180
[   46.706808][ T4309]  ? _raw_spin_unlock_irq+0x26/0x50
[   46.712034][ T4309]  ? loop_queue_rq+0x5af/0x660
[   46.716829][ T4309]  ext4_writepages+0x159/0x2e0
[   46.721615][ T4309]  ? __pfx_ext4_writepages+0x10/0x10
[   46.726989][ T4309]  do_writepages+0x1d8/0x480
[   46.731842][ T4309]  ? blk_mq_flush_plug_list+0xdee/0xef0
[   46.737535][ T4309]  ? blk_add_rq_to_plug+0x211/0x3d0
[   46.742791][ T4309]  ? blk_mq_submit_bio+0x961/0xe40
[   46.747979][ T4309]  ? xas_load+0x3ae/0x3d0
[   46.752421][ T4309]  ? _raw_spin_unlock+0x26/0x50
[   46.757392][ T4309]  ? wbc_attach_and_unlock_inode+0x8f/0x2d0
[   46.763330][ T4309]  filemap_write_and_wait_range+0x146/0x360
[   46.769267][ T4309]  kiocb_write_and_wait+0x73/0x100
[   46.774428][ T4309]  __iomap_dio_rw+0x50c/0x1110
[   46.779254][ T4309]  iomap_dio_rw+0x40/0x90
[   46.783628][ T4309]  ext4_file_read_iter+0x214/0x290
[   46.788827][ T4309]  copy_splice_read+0x3a0/0x5d0
[   46.793833][ T4309]  ? __pfx_ext4_file_splice_read+0x10/0x10
[   46.799680][ T4309]  splice_direct_to_actor+0x28b/0x670
[   46.805162][ T4309]  ? __pfx_direct_splice_actor+0x10/0x10
[   46.810851][ T4309]  do_splice_direct+0xd7/0x150
[   46.815664][ T4309]  ? __pfx_direct_file_splice_eof+0x10/0x10
[   46.821599][ T4309]  do_sendfile+0x398/0x660
[   46.826044][ T4309]  __x64_sys_sendfile64+0x110/0x150
[   46.831337][ T4309]  x64_sys_call+0xfbd/0x2dc0
[   46.835966][ T4309]  do_syscall_64+0xc9/0x1c0
[   46.840582][ T4309]  ? clear_bhb_loop+0x55/0xb0
[   46.845307][ T4309]  ? clear_bhb_loop+0x55/0xb0
[   46.850087][ T4309]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   46.856017][ T4309] RIP: 0033:0x7fc8d0cf5d29
[   46.860566][ T4309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   46.880207][ T4309] RSP: 002b:00007fc8cf367038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[   46.888678][ T4309] RAX: ffffffffffffffda RBX: 00007fc8d0ee5fa0 RCX: 00007fc8d0cf5d29
[   46.896677][ T4309] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005
[   46.904682][ T4309] RBP: 00007fc8cf367090 R08: 0000000000000000 R09: 0000000000000000
[   46.912733][ T4309] R10: 0000000000fffe80 R11: 0000000000000246 R12: 0000000000000001
[   46.920734][ T4309] R13: 0000000000000000 R14: 00007fc8d0ee5fa0 R15: 00007ffd126634b8
[   46.929178][ T4309]  </TASK>
[   47.036437][ T3640] ==================================================================
[   47.044592][ T3640] BUG: KCSAN: data-race in shmem_getattr / shmem_recalc_inode
[   47.052160][ T3640] 
[   47.054504][ T3640] read-write to 0xffff8881187d7748 of 8 bytes by task 4292 on cpu 0:
[   47.062597][ T3640]  shmem_recalc_inode+0x36/0x1b0
[   47.067578][ T3640]  shmem_get_folio_gfp+0x7ce/0xd90
[   47.072720][ T3640]  shmem_write_begin+0xa2/0x180
[   47.077603][ T3640]  generic_perform_write+0x1a8/0x4a0
[   47.082912][ T3640]  shmem_file_write_iter+0xc2/0xe0
[   47.088045][ T3640]  __kernel_write_iter+0x24b/0x4e0
[   47.093295][ T3640]  dump_user_range+0x3ac/0x550
[   47.098091][ T3640]  elf_core_dump+0x1bdc/0x1ce0
[   47.102882][ T3640]  do_coredump+0x1898/0x1f40
[   47.107506][ T3640]  get_signal+0xd4f/0x1000
[   47.111948][ T3640]  arch_do_signal_or_restart+0x95/0x4b0
[   47.117535][ T3640]  irqentry_exit_to_user_mode+0xa7/0x120
[   47.123212][ T3640]  irqentry_exit+0x12/0x50
[   47.127681][ T3640]  asm_exc_page_fault+0x26/0x30
[   47.132599][ T3640] 
[   47.134939][ T3640] read to 0xffff8881187d7748 of 8 bytes by task 3640 on cpu 1:
[   47.142516][ T3640]  shmem_getattr+0x42/0x200
[   47.147059][ T3640]  vfs_statx_path+0x171/0x2d0
[   47.151755][ T3640]  vfs_statx+0xe1/0x170
[   47.155963][ T3640]  __se_sys_newfstatat+0xdc/0x300
[   47.161026][ T3640]  __x64_sys_newfstatat+0x55/0x70
[   47.166088][ T3640]  x64_sys_call+0x236d/0x2dc0
[   47.170810][ T3640]  do_syscall_64+0xc9/0x1c0
[   47.175358][ T3640]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   47.181284][ T3640] 
[   47.183620][ T3640] value changed: 0x0000000000003f1d -> 0x0000000000003f1e
[   47.190743][ T3640] 
[   47.193083][ T3640] Reported by Kernel Concurrency Sanitizer on:
[   47.199241][ T3640] CPU: 1 UID: 0 PID: 3640 Comm: syz-executor Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0
[   47.210130][ T3640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   47.220209][ T3640] ==================================================================
[   47.271373][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.445260][ T4323] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[   52.296405][    T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   52.936645][ T1034] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   56.136531][  T107] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration