last executing test programs:

6.619105196s ago: executing program 4 (id=66):
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="add50e3e9a10ed602049917979194bb53a673ce8765382eff5ae40fc95b3f036ece49f4d6926b5c21ef0aff862d576165026658e3f75de5dfe465e17d0b4ccb081b83d9c82f1f35711b96e870ed48b1f5dba49c34a014769a16866a6801397eafe1e2c45e8ed8d1ef6a4efefc192235b21198c0d796701e7fb1e1ed64b9fed7b5d908f1b7e259ead78a230a8a24dbf2c424cc35f5a8328dc54738a0f4196f1e0c76a9cafdd3b54bc6d3880754ed696c406854394f381b82d9de8f4fc8b8ac772e2090621ae6cf052682339d3e2c52aa05560c5dc36d926a4178beeeff781c9"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='netfs_rreq_ref\x00', r0, 0x0, 0x1}, 0x18)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000000480)={0x10, 0x0, 0x25dfdbfb, 0x808b9027}, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x80, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x929)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0)
fcntl$lock(r7, 0x25, &(0x7f0000002380))
preadv(r7, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB="1c0000003e000781fcfffffff6dbdf25017c00000800038043"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r1, &(0x7f0000000280)="32780f64398323756224d03a", 0xc, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c)
shutdown(r1, 0x1)
r9 = getpid()
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1, 0x0, r9}}, 0x40)

6.460916209s ago: executing program 4 (id=68):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x3, &(0x7f00000001c0)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}, {0x40, 0x6, 0x1, 0x1}, {0x2, 0x9, 0xa5}]})
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xacf8, 0xf3}, 0x1100, 0x5dd8, 0x3a68, 0x5, 0x0, 0x8, 0x8697, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f00000008c0)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c05eb"], 0x30}, 0x40880)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0)
write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"})
r3 = syz_open_pts(r2, 0x0)
dup3(r3, r2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0900000004000000563c000001"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000009df7000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0xfffc, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
syz_io_uring_setup(0x116, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000003c0)={'erspan0\x00', 0x0, 0x700, 0x7800, 0x9, 0xffffffff, {{0x10, 0x4, 0x0, 0x28, 0x40, 0x68, 0x0, 0x7, 0x2b, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x19}, {[@timestamp_prespec={0x44, 0x4, 0x80, 0x3, 0x5}, @lsrr={0x83, 0x1f, 0xf, [@remote, @remote, @empty, @dev={0xac, 0x14, 0x14, 0x3f}, @rand_addr=0x64010100, @loopback, @local]}, @cipso={0x86, 0x6}, @generic={0x44, 0x3, "c0"}]}}}}})
r8 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r9=>0x0})
bind$can_raw(r8, &(0x7f0000000000)={0x1d, r9}, 0x10)
setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
bind$can_raw(r8, &(0x7f0000000080), 0x10)
getrusage(0x1, &(0x7f0000000040))
syz_io_uring_setup(0x1066, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000040), &(0x7f0000000280))

5.383623088s ago: executing program 4 (id=71):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'dvmrp1\x00', <r3=>0x0})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300)=<r4=>0x0, &(0x7f0000000340)=0x4)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000400)={'ip6gre0\x00', <r5=>0x0, 0x29, 0x5, 0x0, 0x3, 0x61, @dev={0xfe, 0x80, '\x00', 0x25}, @private2, 0x10, 0x7800, 0x30000, 0x401}})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000580)={'vxcan0\x00', <r6=>0x0})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000005c0)={<r7=>0x0, @rand_addr, @initdev}, &(0x7f0000000600)=0xc)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522ec, 0x0, {0x0, 0x0, 0x74, r9, {0x10, 0xf}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4044880}, 0x0)
sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f00000007c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x138, r2, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x80}, 0x68c4)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r11}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000040000400"/17], 0x50)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0xfdff, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c001800f8ffffffffffffff140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
r12 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_SIOCGARP(r12, 0x8954, &(0x7f0000000000)={{0x2, 0x4e20, @empty}, {0x0, @random="442da5380ee5"}, 0x3c, {0x2, 0x4e23, @empty}, 'dummy0\x00'})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0}, 0x1049a5, 0x10000, 0x1, 0x1, 0xa, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x130)
r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r14 = openat$cgroup_ro(r13, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r14, &(0x7f0000000140)=0xe6c, 0x12)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)

4.836784352s ago: executing program 4 (id=77):
fsopen(0x0, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = syz_open_dev$loop(&(0x7f00000001c0), 0xfff, 0x28000)
ioctl$BLKZEROOUT(r1, 0x127f, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000340)={0x8, {{0x2, 0x8000, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}, 0x20000880)
getsockopt$inet_buf(r2, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x2)
setsockopt$inet6_tcp_int(r0, 0x6, 0x18, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1818e58, &(0x7f0000000140)={[{@errors_remount}, {@grpid}]}, 0x22, 0x63f, &(0x7f0000000d80)="$eJzs3c9rXFsdAPDvvZPkJWl86RMRX1AMuHgP5KVJfVh1Y1sXdlGwYBciLhqapIZOf5CkYGvBBFwoKIi4LdKN/4B76d6dCOrOtVBFKha0dB73zp1mMplfaTIzSe7nA5M599wzOeebOyf33HvnzA2gtOazH2nE+xGvbyQRs03rZqK+cr4o9+Lfj29mjyRqte/+K4mkyGuUT4rnM8XCZET86XLEpyv76918+Oj2crVW95OIc1t37p/bfPjoo/U7y7dWb63eXTr/tY8vLH596eOlpoa+vTPF85Wr3/n8L3/6w6+u/bn6URIX4/r4j1eiJY6jMh/z8boIsTl/LCIuZIk2f5eT5hSEUGqV4v04HhGfjdmo5Et1s7H+i5E2DhioWiWi1l3SqwBwUuneUFaNcUDj2L6/4+DrAx6VDM/zS/UDoP3xjxWnHCbzY6PpF0nTkVH93MbZI6g/q+PV48knrx7PPYk95yFevtk6Y0dQTyfbOxHxuXbxJ3nbzuaRZvGne47104hYjIiJon3fOkQbkqb0IM7DdHOQ+Ju3Qxb/xeI5y7/8lvW3ntYadvwAlNOzS8WOfDtb2t3/ZWOPxvgn2ox/Zg5/SSY36v1f5/FfY38/mY970pZxWDZmudb+V463Zvz951d+3an++vhv7knjkdXfGAsOw/OdiLmW+H+WBVuMf7L4kzbbPyty42J/dXz7L/+80mndqOOvPY34oO3xz+6oNEt1uT55bm29urpY/9m2jj/88Qe/61R/+/jfGUCk7WXbf7pD/E3bP219XfY3ud/+V+60Zvz+2tM7neqf6bn9039MJPXjzYki50c7W1sbSxETydWiSJG/vLW1cb57vPUyL2v581I9/g+/1L7/73n/t0Q11fiX2Yf737v9otO6t3n/N11Mfl3rsw2dZPGv9N7++/p/lverPuv47/cffKHTum7xTx0mMAAAAAAAACihNL8Gm6QLb9JpurBQny/7mZhOq/c2t768du/B3ZWID/PPQ46nkSb5R0Zm68vJ2np1dan4PGxj+XzL8lci4r2I+E1lKl9euHmvujLq4AEAAAAAAAAAAAAAAAAAAOCYOFPM/2/cp/o/lfr8f6Aket9gbt/9H4BTYpA3mASOt7z/d9vFvzu8tgDDZf8P5aX/Q3np/1Be+j+Ul/4P5aX/Q3np/1Be+j8AAAAAnErvffHZ35KI2P7GVP7ITBTrTPqF0238QKUrA2sHMHx6NJTXm0v/BvtQOn2N//9XfDng4JsDjEDSLjMfHNS6d/5nbV+5a+fwbQMAAAAAAAAAAAAA6j54v/P8/4PNDQZOGtP+oLwOMf/fVwfACeer/6G8HOMDPWbxx2SnFb3m/wMAAAAAAAAAAAAAR2YmfyTpQjEXeCbSdGEh4lMRcTbGk7X16upiRLwbEX+tjL+TLS+NutEAAAAAAAAAAAAAAAAAAABwymw+fHR7uVpd3WhO/H9fzulONO6C2rtwrY8yXRPfjAO+KpLh/1mmImLkG2VgibGmnCRiO9vyx6JhG5txPJqRJ0b8jwkAAAAAAAAAAAAAAAAAAEqoae5xe3O/HXKLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGD4du//3yOxMl1/QV+F9yZGHSMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcDJ9EgAA//+YYDw3")
r3 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f00000000c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10)
timer_gettime(0x0, &(0x7f0000000380))
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]})
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x10)
r9 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0)
fcntl$setlease(r9, 0x400, 0x0)
mq_unlink(&(0x7f0000000340)='eth0\x00')
close_range(r7, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)

3.308883838s ago: executing program 0 (id=85):
r0 = msgget$private(0x0, 0x309)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000100)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}, 0xc)
msgsnd(r0, &(0x7f0000000000)=ANY=[], 0x39, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000008000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x100002, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x4, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r2], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18)
request_key(&(0x7f0000002740)='asymmetric\x00', &(0x7f0000002780)={'syz', 0x3}, &(0x7f00000027c0)=',*[\\/&)\x00', 0xffffffffffffffff)
socket$inet_udp(0x2, 0x2, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/33}, 0x29, 0x2, 0x2000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382)
r5 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5', 0x2)
pwritev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010001ffe0098", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRESDEC=r3], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff)
r7 = socket(0x1e, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040))
sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
sendfile(r4, r4, 0x0, 0x24002de8)
ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f00000001c0)={0x0, {}, 0x0, {}, 0x3, 0x0, 0x11, 0x1, "28f5c9ea1f1ae4be4111ab18d2da69bde58cd7af40fd150b70aac11c2e17bd5bba7663c435aff94793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d541", "07a9310978072a8b070006584a128d7469166ffbffffff19e7df4af14e1df82d", [0x1, 0x7]})
ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x5452, &(0x7f0000000ec0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})

2.271800753s ago: executing program 0 (id=90):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
syz_open_dev$usbfs(&(0x7f0000000280), 0x4, 0x1135c1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffa, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan1\x00', <r2=>0x0})
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000030000000d00000000842d00000001000000522803ea5a9ff3c33d635c30338a"], 0x0, 0x33, 0x0, 0x40000000, 0x8, 0x10000}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="21000000c61d0000ffffffff0a00000000540000", @ANYRES32=r1, @ANYBLOB="01ffffff00000000000000000000000000000000e576afdb55bdf4a2d7e8d190e102fc031b0eb4d5312930a7496282b1194f0c8bd034ba51a1434e9d88e71f8431f582547da112bffbf7b4e4c3e1ec81570065983077a8f3f3483189da2cfaf509774d8b45f468f7b95e0e91b59f72a927ae7666cb2bfa4f84d49919db06dca6bf1bf2bb994ff23cb6a2399d2d16869c73d9ad548493c2d9bd6f7ee7de476ff86d8dde397d2916d8f000adf0be5a39b0d00a8f37181fbc6521a2197e115ffbcc714c", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="00000000050000000100"/28], 0x50)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000000c1431002dbd7000fbdbdf25080001000000000008003d00050000003cc4bcd7f472d57253c23257ddfa82e5ac417cd741095f322cc565f5b3"], 0x20}, 0x1, 0x0, 0x0, 0x4004400}, 0x0)
r4 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$int_in(r5, 0x5452, &(0x7f0000b28000)=0x20003)
pause()
fcntl$setsig(r5, 0xa, 0x12)
poll(&(0x7f0000b2c000)=[{r6}], 0x2c, 0xffffffffffbffff8)
futex(&(0x7f00000006c0)=0x2, 0x0, 0x2, &(0x7f0000000140)={0x77359400}, 0x0, 0x80000002)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
r7 = gettid()
rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000003, 0x0}, 0x0, 0x8, &(0x7f0000000200))
tkill(r7, 0x16)
dup2(r5, r6)
fcntl$setown(r5, 0x8, r4)
tkill(r4, 0x13)
fchdir(0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='mm_page_alloc\x00', r0, 0x0, 0x7}, 0x18)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)

2.198714879s ago: executing program 3 (id=92):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00')
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket(0x840000000002, 0x3, 0xff)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r3, 0x0, 0xffffffffffffffff}, 0x18)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10)
sendmmsg$inet(r2, &(0x7f0000000440)=[{{&(0x7f0000000200)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000340)="5825be57aff935e67ca2746357d1787935589db15a23319e3f64fdf5", 0x1c}], 0x1}}], 0x1, 0x840)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "d1"}]}], {0x14}}, 0x74}}, 0x0)
pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a)
r4 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x8b7c, 0x800, 0x200007, 0x22}, &(0x7f0000000940)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r4, 0x47f9, 0x4db, 0x0, 0x0, 0x0)
clock_nanosleep(0x2, 0x37dc12502000000, &(0x7f00000000c0)={0x0, 0x989680}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r8=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f000001a3c0)={0x11, 0xb, &(0x7f000001a2c0)=ANY=[@ANYBLOB="180000000000000000000020646c2500770000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000072000000950000000000000000006ef84048e041b140662a1257199b773c1e86637a5d28fd39835af82240c6283f3e34a749003cba7da898596de476ff5c648e2e33c684975b86cdadb564cbf694c82a8d2de2a04381e60efde807dd4c7162d413f862c67b1656c2fd1f7064fad66e929095b6ce1c8e82d7d6c614d95e3060"], &(0x7f000001a480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r8, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='sys_enter\x00', r9}, 0x18)
process_mrelease(0xffffffffffffffff, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r10}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_generic(r0, &(0x7f000001a240)={&(0x7f0000019080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f000001a200)={&(0x7f00000190c0)={0x1114, 0x1b, 0x1, 0x70bd2b, 0x25dfdbfe, {0xa}, [@generic="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", @typed={0x100, 0x16, 0x0, 0x0, @binary="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"}]}, 0x1114}, 0x1, 0x0, 0x0, 0x40010}, 0x8001)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r11, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01dfffffff9a2600000021"], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})

2.140737504s ago: executing program 1 (id=93):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000005680), &(0x7f0000009980)=0x40)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x800000, &(0x7f0000000500)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES32, @ANYBLOB="b7ad7cd65c46a5be7840094fc88ed3944440d445ac89758d3aa4a6c77ea3e1e50196a99f88ba68f3377383de4de11c07aa5d22d9f4f3c58344d6011b6ea5ee82cf40e4ca5976370cb73c872e576f936791a0ffa5639ac237214be5926acea5405e00f1a144cf7a5240bc1e56ed617e19d6a5a268505f0012b4baf36d3a71eb34c8b67281dbba4b20c3d724ef150deff6f7d908bc72575a1f43b608e0d118", @ANYBLOB="a1fffd2e4c38a7b17fef1a78ad1943012e7b7711a1517cd8b4288a2fbb7d202d8c4a1809add074e6dde0703158125f2f114c49f5ee5f249d63ac0d851c212ccd8d82b7c694ead23c417021e8bc78d646d07e3513568bb81d2179a012dcdcb845b0a58b6d5e46a177de56e3e77ed573967e4eea299078019693ca486edbaa44e947802c7f46f1de18cf7f0e1af02964d04cc84d979855e8d3a3fda262f6a7d2b4b4849fd880c9b9af9be818ba05386754a3505e833ca0b9770f63e91f3a9a04e9fca51d88273d5491ed", @ANYRES8=0x0], 0x3, 0x7ec, &(0x7f0000001580)="$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")
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x20, 0x1411, 0x1, 0x8070bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040084}, 0x40)
r4 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3})
mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x3, 0x5eb, &(0x7f0000000c00)="$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")
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x80000}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x82)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r6, 0x5460, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
close(0xffffffffffffffff)
mq_timedreceive(r4, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000006242260020c55e2150000"], &(0x7f0000000580)='GPL\x00'}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0ff5b14104fe62cc60e413905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf2364149215108333719acd97cfa107d40224edc5465a93df8513a32ec450bebc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe511195418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4929330142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da8c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000dd11e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15f2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f000010000000000000905ad897ef3b7cda42013d53046da21b"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

2.060535911s ago: executing program 3 (id=94):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
mlockall(0x2)
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffd8b}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r1}, 0x10)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0)
socket$kcm(0x10, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$isdn(0x22, 0x2, 0x25)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000300)={0x6d00, 0x8200, 0x6, 0x7ff}, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$TUNSETLINK(r4, 0x400454cd, 0x6)
bind$isdn(r3, &(0x7f0000000200)={0x22, 0x7f, 0x8, 0x23, 0x5}, 0x6)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100200005000000", 0x29}], 0x1)
r5 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil)
shmctl$SHM_LOCK(r5, 0xb)
shmat(r5, &(0x7f0000ffd000/0x1000)=nil, 0x7000)
shmctl$SHM_UNLOCK(r5, 0xc)

1.979079517s ago: executing program 1 (id=96):
bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/uevent_seqnum', 0x400, 0x48)
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
setuid(0xee01)
syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)
accept(r1, &(0x7f0000000440)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r2}, 0x10)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendto$inet6(r3, 0x0, 0x0, 0x20004041, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0xf34)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0)
syz_emit_ethernet(0x9a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbff02000000000000000000000000000100004e22"], 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001680)=@delqdisc={0x230, 0x25, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xe}, {0x7, 0xfff3}, {0xb, 0x8}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7fff}, @TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x124, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x7f, 0x8000, 0x8, 0x2, 0x3, 0x8001, 0x8}}, {0x14, 0x2, [0x0, 0x4, 0x5, 0x8, 0x5, 0x1bce, 0x97, 0x71]}}, {{0x1c, 0x1, {0x7, 0x9, 0x800, 0x5, 0x1, 0x1, 0x5, 0x4}}, {0xc, 0x2, [0x8780, 0x800, 0xa, 0xfffd]}}, {{0x1c, 0x1, {0x8, 0x5, 0x5, 0x9, 0x1, 0x9, 0x8, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x0, 0xe5, 0x0, 0x8000, 0x2, 0x0, 0x9, 0x6}}, {0x10, 0x2, [0x8000, 0xa1, 0x3, 0xc2b, 0x0, 0x7]}}, {{0x1c, 0x1, {0x7f, 0x9, 0xa, 0xa, 0x0, 0x9, 0x5, 0x6}}, {0x10, 0x2, [0x9ce, 0x0, 0xf821, 0x4, 0xf5c, 0x1]}}, {{0x1c, 0x1, {0x3, 0x5, 0x8, 0x4, 0x2, 0x1, 0x4, 0x3}}, {0xa, 0x2, [0xc15, 0x7, 0xfffe]}}, {{0x1c, 0x1, {0x3, 0xfd, 0xd934, 0xd9, 0x2, 0x80, 0x6, 0x2}}, {0x8, 0x2, [0x3000, 0x3]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8de}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_STAB={0xc0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x27, 0x5, 0x6, 0xb112, 0x2, 0x80000001, 0x2, 0x5}}, {0xe, 0x2, [0x30, 0x3, 0x1, 0x2, 0x9]}}, {{0x1c, 0x1, {0x0, 0x6, 0xa, 0x3, 0x2, 0xfa, 0xfffffffc, 0x6}}, {0x10, 0x2, [0x6, 0x969, 0x50, 0x1, 0x2, 0x3]}}, {{0x1c, 0x1, {0xf6, 0x0, 0x7, 0xc, 0x1, 0x2, 0x5, 0x9}}, {0x16, 0x2, [0xf, 0x3, 0x5, 0x1, 0x7, 0x8, 0x401, 0xaf7d, 0xb945]}}, {{0x1c, 0x1, {0x9, 0x0, 0x400, 0x9, 0x2, 0xfffffff9, 0x3, 0x8}}, {0x14, 0x2, [0xfff5, 0x9, 0x1, 0x5, 0x7810, 0x398, 0x5, 0x200]}}]}]}, 0x230}}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$vsock_stream(0x28, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x31, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
timer_create(0x3, 0x0, &(0x7f0000000200)=<r8=>0x0)
timer_delete(r8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r7}, 0x10)

1.874447726s ago: executing program 3 (id=97):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r1, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = io_uring_setup(0x4f04, &(0x7f00000002c0)={0x0, 0x48c7, 0x400, 0x0, 0xffffffff})
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x6d, 0x7}, 0xe)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="b7556d07aac56d8a1eadafcd53", @ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r7, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000009c0), &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0], <r9=>0x0, 0x400034, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000006c0), &(0x7f00000007c0), 0x8, 0xa2, 0x8, 0x8, &(0x7f0000000800)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r11 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
close(r11)
r12 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240), 0x20082, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x8000, &(0x7f0000002100)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r12}})
bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x1c, 0x9, &(0x7f0000000440)=@raw=[@cb_func={0x18, 0xb, 0x4, 0x0, 0x6}, @ringbuf_query, @map_fd={0x18, 0x3}, @generic={0x8, 0x3, 0x1, 0x2, 0x6}], &(0x7f00000004c0)='GPL\x00', 0xdc1, 0x1000, &(0x7f0000000640)=""/4096, 0x41000, 0x11, '\x00', 0x0, @fallback=0x8, r0, 0x8, &(0x7f0000000540)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000001640)={0x2, 0x10, 0x1, 0xfffffffa}, 0x10, r9, r1, 0x0, &(0x7f0000001680)=[r3, r2, r10, r11], &(0x7f00000016c0), 0x10, 0x6}, 0x94)
setsockopt$SO_TIMESTAMP(r6, 0x1, 0x4b, &(0x7f0000000040)=0x5, 0x4)
shutdown(r6, 0x1)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000380)={0x0, 0x1359, 0x10, 0x1, 0x9}, &(0x7f00000003c0)=0x18)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r5, 0xfffffffc)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
close_range(r4, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33)

1.852575918s ago: executing program 1 (id=98):
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48)
r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x82)
socket$inet6(0xa, 0x1, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x14)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4)
sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000)
sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYRES64=0x0], &(0x7f0000000100)='GPL\x00', 0x4b7901da, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5}, 0x94)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x20300, 0x0)
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r7, 0x80083314, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000)
r8 = io_uring_setup(0x1fb8, &(0x7f0000000540)={0x0, 0x1ae0, 0x400, 0x0, 0xea})
io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f0000000940)=[{&(0x7f0000000a00)=""/181, 0xb5}, {&(0x7f0000000200)=""/38, 0x26}, {&(0x7f0000000280)=""/20, 0x14}, {&(0x7f0000000380)=""/88, 0x58}, {&(0x7f0000000ac0)=""/173, 0xad}], 0x5)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r9}, 0x10)
io_uring_register$IORING_REGISTER_FILES(r8, 0x1e, &(0x7f0000000000)=[r8], 0x1)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getcwd(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x45c601, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="847bd0b52f5c023bcb35db67d6a977a1d5f3ef85646c0b4e54a476cb9c3f060d60d921f61f316a226b36d54073262a15290227409187b8c2b0145cd3cb8a592213c2a9e9dd8f81cbc76211b34542c25bc7b293e84d486a5e006293ee21da397cef49753e4480b4484c51c5fdff40df7adf06e0f881d958a58ea42799ed7b87303aee918b019e1972aa9a1f21d5c208c63c780c458725a4b65bd9c672eaaf4b968ec420a29edb22b8e86614d3bb470cbc067e4d9e0e41d71a7e31345128b7da8c92d1913d4a4253f4e78aaf64"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.752080436s ago: executing program 1 (id=99):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20002)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000ffea0000008000004e60656fcac47f00000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x10, 0xc, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r3}, 0x10)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
ioctl$sock_SIOCBRDELBR(r0, 0x89a1, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000240)={<r5=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000002c0))
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f00000001c0)={r5})
sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000100000000100000006000a004e22000008000800e000000250e47eb09bde6f16cb2bd2fcc7bde28cbc5796005d3f8cd2a9ebfeb44e95f72e46fc1984db346fb81775018057af2da522d3cf422f2473b50aaff0b50876c951927c4abcf40a9c86e4a85c375d688b5195bc7acef6147ad5f365b7ccf57db61411d1695cced0d4a1e598d3026273528e3a5e81cc573a2a3f53"], 0x24}}, 0x0)
r6 = fcntl$dupfd(r1, 0x0, r1)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000fe00000000000800"/28], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r7, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r8}, 0x10)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x0, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BLKSECDISCARD(r6, 0x127d, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)

1.737526437s ago: executing program 2 (id=100):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x54, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7f, 0x6}, 0x10004, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setrlimit(0x9, &(0x7f0000000000))
io_setup(0x3ff, &(0x7f0000000500)=<r0=>0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000640)={'geneve1\x00', <r3=>0x0})
sendto$packet(r2, 0x0, 0x0, 0x12004014, &(0x7f00000002c0)={0x11, 0x9, r3, 0x1, 0xd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, 0x14)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340))
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
r6 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x7ffe, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040))
r7 = eventfd2(0xff, 0x80001)
unshare(0x22020600)
io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000000300)=r7, 0x1)
setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000000c0), 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
unshare(0x64000600)
io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
io_setup(0x2004, &(0x7f0000000680))

1.719755109s ago: executing program 4 (id=101):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x6c, 0x7f, 0x7ffc0002}]})
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="42ae9f6cff6fc351163dc6c43ce13a50649f1a0a6342e2806bf0a92f73207a5e4b8cf2b0483e4bc7c10dc208d4e16d76fcdbee1ac5f9a59b26ff279b9407a86d0cccbaac82001f0bde8af13d2682ee915aac84335d1052f416fbe6bdea0668665525d8b837e21b8c57f66dc2863d3aa9a9d1ddeab57ae2024bad08176ddbd2ee13d7d14341fd2b7581d7f9911b0c2cb17952a5a24646b42177becb60c2f64b6f24e5"], &(0x7f0000000400)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
fsync(0xffffffffffffffff)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006000200010000001ffe02000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000002e00000095000000000000000000000c00"/32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$tipc(r5, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x3, {0x4e24, 0x1}}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4)
recvmsg$unix(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x1000410, &(0x7f0000000100), 0x1, 0x504, &(0x7f0000019940)="$eJzs3c9vG1kdAPDvOHGTZt1NF/YACNiyLBRU6vzobrRaDnQvILRaCbFCQuLQDYk3imLXUZwsTcghPXJHohIn+BO4cUDqiQM3bnDjUg5IBSJQg8Rh0IyniZvEdWiTeGt/PtJ45r1x/H3PznvP8xznBTC0rkTETkRciIgPI2KyyE+KLW62t+x+j3a3F/Z2txeSSNMP/pHk57O86PiZzEvFY45HxPe/E/Hj5Gjc1ubWyny9Xlsr0lPrjdWp1ubW9eVSkTM7NzM3/faNt2ZPra6vNX7z8NvL7/3gd7/9woM/7nz9p1mxKj+7lJ/rrMdpale9HJWOvNGIeO8sgvXJaPH7w4sna22fiojX8/Y/GSP5qwkADLI0nYx0sjMNAAy67Pq/EkmpWswFVKJUqlbbc3ivxkSp3mytX5tsbtxejHwO63KUSx8t12vTxVzh5SgnWXomPz5Izx5K34iIVyLi52MX83R1oVlf7OcbHwAYYi8dGv//PdYe/wGAATfe7wIAAOfO+A8Aw8f4DwDD5/8Y/307EAAGhOt/ABg+xn8AGD49x/+751MOAOBcfO/997Mt3Sv+//Xix5sb36x8fH2x1lqpNjYWqgvNtdXqUrO5VK9VF9K01+PVm83VmTf3k63NrVuN5sbt9VvLjfml2q1a+YzrAwD09spr9/+cRMTOOxfzLTrWcjBWw2ArPZE6ZqEeYGCN9LsAQN/4Pg8MrxNc45sGgAHX68q/658I3bP4K7yorn7W/D8Mq1K/CwD0zbPN/3/r1MsBnD/z/zC80jSx5j8ADBlz/MCzfP7/wyg+/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAhVcm3pFTN1wLfyW5L1WrEpYi4HOXko+V6bToiXo6IP42Vx7L0TL8LDQA8p9LfkmL9r6uTb1QOn72Q/Gcs30fET375wS/uzK+vr81k+f/cz1+/V+TPXuhHBQCATjePZrXH6WLfcSH/aHd74fF2nkV8+G57cdEs7l6xtc+Mxmi+H49yREz8KynSbdn7lZFTiL9zNyI+c1D/Ox0RKvkcSHvl08Pxs9iXziD+wfOfRJqm6UH80hPxS3nZsn05fy4+fQplgWFz/912P5m1u4u721kTK9pfKa7k++Pb/3jeQz2/x/3f3pH+r7Tf/40ciZ/kbf7KfvrpJXn45u+/eyQznWyfuxvxudHj4if78ZMu/e8bJ6zjXz7/xde7nUt/FXE1jo/f1si72an1xupUa3Pr+nJjfqm2VLs9Ozs3Mzf99o23ZqfyOer27R+Oi/H3d6693C1+Vv+JLvHHe9T/Kyes/6//++GPvvSU+F/78vGv/6tPiZ+NiV89Yfz5iZvHLd+9H3+xS/17vf7XThj/wV+3Fk94VwDgHLQ2t1bm6/XaWo+D7L1mr/s4eDEPYifinIN+YzziE1F3B90O+t0zAWftoNH3uyQAAAAAAAAAAAAAAEA3rc2tlbE4268T9buOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADK7/BQAA//+TAtDE")
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfecc)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f00000003c0)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r4], 0x841, 0x1)
mkdir(&(0x7f0000000040)='./file0/bus\x00', 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, 0xffffffffffffffff, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206050000000000000000000000000014000780080013400000000008000600000000000500010006000000050005000200000005000400000000000900020073797a320000000011000300686173683a6970"], 0x60}}, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x6)

1.631868936s ago: executing program 2 (id=102):
unshare(0x20000600)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000ec0)=ANY=[@ANYRES32=r0, @ANYRESHEX, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYRES32], 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x40)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000134000000140a03000000000000000000020000000900010073797a300000000008000340000000010c0006400000000000000002140000001100010000000000000000000000000a"], 0x98}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_dev$usbfs(0x0, 0xf, 0xc340)
r5 = epoll_create(0x4c4)
r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)={0x20000000})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10)
r8 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x3, 0x4, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000180)='cpu>=0||!')
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0xe, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r10}, 0x10)
sendto$inet6(r3, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)

1.498769647s ago: executing program 2 (id=103):
set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8)
set_mempolicy(0x4000, &(0x7f00000000c0)=0xffff, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
unshare(0x2c020400)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x800, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x7, 0xc, 0x6, 0xa, 0x1900, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0x1}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000001542a88005457eb00000000000000", @ANYRES32=r2, @ANYRES64=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
io_setup(0x3, &(0x7f0000000340))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = syz_mount_image$iso9660(&(0x7f0000000940), &(0x7f00000001c0)='./file0\x00', 0x4c0, &(0x7f0000000240)=ANY=[@ANYBLOB='session=0x0000000000000043,dmode=0x0000000000000006,map=acorn,mode=0x0000000000000007,sbsector=0x0000000004008001,check=strict,check=relaxed,overriderockperm,sbsector=0x0000000000000000,utf8,sbsector=0x0000000000000000,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c7362736563746f723d3078303030303030303030303030303030332c686964652c6769643d6fcfd9bbb83ea2da0b38200cf34afb69235336bd2e00000000000000100e0d7f75a3e0a7e54119c4992224af29f853bce4aca191f148f30708d72b47b71648508f7bc62d8797e2498c686370511071e7aa762d4a01bd68d3ba1c195a732d93d5ea0b5c0fe5dd2898d2127578f6314c9a2d3013d2cc64affbccde695695aecddd024a02c1eb54483c000000000000000000", @ANYRESHEX=0x0, @ANYRES64], 0x2, 0x976, &(0x7f0000000980)="$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")
r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r6, 0x0, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r4}, 0x18)
bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r1, 0x0, 0x20000000}, 0x20)
r7 = syz_open_pts(r0, 0x468c1)
r8 = dup(r7)
syz_clone(0x3841500, 0x0, 0x0, 0x0, 0x0, 0x0)
dup3(r7, r8, 0x80000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r5], &(0x7f0000000500)='GPL\x00', 0x8e1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r8}, 0x94)
shmget(0x0, 0x3000, 0x9ba4babae520bb93, &(0x7f0000ffb000/0x3000)=nil)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_clone3(&(0x7f0000000380)={0x480, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x58)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4, 0x0, 0xfffffffffffffffd}, 0x18)

1.369251588s ago: executing program 0 (id=104):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c0000000b"], 0x50)
r2 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
tgkill(r2, r2, 0x21)
wait4(r2, 0x0, 0x40000000, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r3}, 0x18)
inotify_rm_watch(0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000d857ea6dcbf5b67d43ad93fdf1e7dc00"/43], 0x48)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r7 = getpid()
r8 = syz_pidfd_open(r7, 0x0)
r9 = dup(r8)
copy_file_range(r9, 0x0, r9, 0x0, 0xd63, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000300000000000000", @ANYRES32, @ANYBLOB="00000000000a14680e50ced9ca5e7042b35e77aa2fab2658140a5701c92e9d9d2dbe18974466fabf8562958df0bcfe555af95b2a14d521396fe9f86ee7686c4b1bfaa4e5d3012cea90bd7be4bebe074b53aa4d32af4773724fe2eb", @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="04000000050000000500"/28], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='rxrpc_recvmsg\x00'}, 0x18)
r10 = socket$kcm(0x21, 0x2, 0x2)
socket$inet6_udp(0xa, 0x2, 0x0)
recvmsg$kcm(r10, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x10061)
readv(r5, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4)
r11 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1})
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.298304343s ago: executing program 2 (id=105):
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000000)=@generic={&(0x7f00000008c0)='./file0\x00', 0x0, 0x8}, 0x18)
socket$inet(0x2, 0x4000000000000001, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000002b08060000000000060000cb85672b0000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r1, @ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095", @ANYRESHEX=0x0], &(0x7f0000000780)='GPL\x00', 0x401, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r2], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r4, @ANYRESOCT=r3], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = dup(r3)
write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0xb, 0xfa00, @id_afonly={0x0, 0xffffffffffffffff, 0x0, 0x2, 0xfffffffffffffe44}}, 0x20)
write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r5])
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0, 0x800)
r6 = inotify_init1(0x0)
inotify_add_watch(r6, &(0x7f00000000c0)='.\x00', 0xa4000061)
read(r6, &(0x7f0000000140)=""/68, 0x44)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
splice(r0, 0x0, r7, 0x0, 0x9, 0x0)
socket$inet6(0xa, 0x1, 0x84)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

1.201708521s ago: executing program 2 (id=106):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x518, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x9001, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14006, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x6fd, &(0x7f0000000c40)="$eJzs3V2P21gZB/D/STJJJoWqAlStqm7ndMpKUzGkTmabKipIGOckY0jiyPbAjIS0KnRmNWqmQFskmpt2bniRli/A3d5wwYdYiQuu9lvAFUgrEDesQMjIx3ZeJk5m0knb7e7/N9qNYz8+5/Gx61N37GMQERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERhNUwjIpA2+7u7MrZrIbrdJIvWUwtj0pbwc1o4ua8OlfCegER/odiEW9Fs9/62ijkcvi/dVyNvl1FMfwoYnDh8qW7X81lkvXnJPwisGiBj58OHtzr9/cfnSE2i4WLf52QOUNQS3Vtz7E7ZktJ23NkvVYzbm03Pdm028rb83zVkZarMr7jyg3rpqzU61tSlfecnW6rYbZVMvPON6uGUZPfK0Q7GkDZs7btdtvutnRMuDiMuSM/+FEUoMyOlAeH/f2tsXyepbVxGFRJST4zHhwGVU/b3KpRrVYq1Wqldrt++45h5KZmGCFhDGEqYukHLb1hlnsCJzqHjNX4r/EXAbRRRBc72IVM/bHQgAsHnRnLY0n//84tNbfe8f4/6eVXRouvQPf/16Jv12b1/zNykZB6hbQlYsb8xX5WdEYSj/EUAzzAPfTRxz4eLaFsCbl27hLyRtySS8ln5k8LCl3Y8ODARgcmWvgyZDxHoo4aajDwHrbRhAeJJmy0oeBhDx58qPCIyoeZKpjw4cCFxAYs3IREBXXUsQUJhTL24GAHXbTQgIl/B0FwgEPd7ltxPs9TthpJUGXGRhSQS467fVTnbO2s/v/Hz6K14/7fYP//RRUdB4Xo4+N5MUSfAUF8/b+gtZeTDRERERERERG9DEL/67vQv5V/G0CApt1WxkRM4bVlR0RERERERETLIBAUcBUiuisfb0NMX/8TERERERER0ZtN6GfsBICSvqlfjB6XOss/AmRfQYpEREREREREdE76yf9reSDQd/mvQSx0/U9EREREREREb4DfjI2xn8vGY+wGya/1MwDW/loQH/2jAHdFHPd2vy6OzHCJeRTHTN0B4DeviIvxQL36Iw9Af7PUVRHXFg+CORx38JOD9LH+nwcRIYR7IoF8dryAGQmIsOZaLv6GD3A9WuV6PM78/UEGekk0onCpabdV2XLadyswzYsZX+36v3h4+EvAHW7nwWF/v/yTn/bv61yOw1nHR2GhzybSyaQ3xiiXJ3q8Bf3MRdroxqtoJlX+ttspCV2vkWx/FuZRZryieTugtgpEW/krrEf7bD2IYkuD4Yj7AljTgz9UynqXTWy9uyJGWVRObnnajpix5UWdxY0o5sbGjegjaZOwnIwofiMLVMvT+2Aii+p4Fqe3hfjnifafnwVEMWyLrTCLP4UFncjihx9FK2/1dpPhMc6SxdRRQET0uhyMeiE9iPnUGPtJ95Cc1M7e7yAHxGe5Gb37qJYg7j+S3v3J74Ooh8oCufh3E+m1JP0KwjP6htDl5KMB3XNXUs7oRvnTIAjMi0WMn9H/F/89Y9jHnq13Ow6C4OQZ/Y+jdyDFaU9l8Z8gCO5WdE/yuxO96ofhCh/OrNdrV7NhE956cvQzPQB+6P399/cfVqtbNeNdw7hdxYr+q0L8kQX7HiIimnL6O3Z0RGZOhHgX16Myrt//+zvR1ESP95X4lgLtFtDHfWwmrxBYSy+1hAN8+1/RbQib0VUrsF6KPksDefnS3fCqdhh7KHL6DS+bM6/qdF8axerbG6rD2OS9QyevAEexWy95LxAREb1a6zP6YWCi/8dk/1+c6P83sRFFbFxJve4ujd1SuJlcHQ8v6QcXjlNjK6cn/50lNwYREdEXhHI/ESX/18J17d57lXq9YvrbSrqO9X3p2o2WknbXV661bXZbSvZcx3cspy17Lgr2qvKkt9PrOa4vm44re45n7+o3v8v41e+e6phd37a8XluZnpKW0/VNy5cN27Nkb+e7bdvbVq5e2espy27alunbTld6zo5rqbKUnlJjgXZDdX27aYeTXdlz7Y7p7skfOO2djpIN5Vmu3fOdqMCkLrvbdNyOLraMYOEXHRIREX0ePX46eHCv399/dHJiNbw0j+YcY0bM9EQ+pUCOEURERPQZM+quF1ip+BITIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiKiKac/0rfgxEraw4LAcM7PL8Zz8ByjRwynyhE4bz6fun/WA/u9yOqZRStNHokYPPh4TvDqcE7S/OMxx4tUikvAC7fP374EXNBzEM3JLfEAmH5+dOnHWNrEtw6iFp0VoxemLioM90Vu+X8cwomHf5heJMKWD4IgmL96YbIN82c/nnMAHuXPsQte9ZmIiF61/wcAAP//iYxA9A==")
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0)
perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0xd}, 0x4c58, 0x6, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000a00)=@newtaction={0x60, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xfffff004, 0x7, 0x20000000, 0x8, 0x3856}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4002}, 0x0, 0x0)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)
connect$llc(r5, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x5, 0x4}, 0x10)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
perf_event_open(&(0x7f0000001180)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7, 0x0, @perf_config_ext={0x80, 0xffffffbfffffffff}, 0x10000, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0x3)
socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r6}, 0x18)
setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000140)=[{{0x2, 0x1, 0x1, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x4}, {0x1, 0x1, 0x0, 0x1}}], 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$cgroup_int(r2, &(0x7f0000000000)=0xfe8e, 0x12)

1.078986231s ago: executing program 0 (id=107):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000007000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="00b83c036300"/20, @ANYRES32=0x0, @ANYRES32], 0x48)
lchown(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0)
pipe(&(0x7f0000000500)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x6, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0xe}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
sendto$packet(r3, &(0x7f0000000600)="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", 0xff, 0x8000, &(0x7f0000000180)={0x11, 0x8, r5, 0x1, 0x3, 0x6, @local}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES16=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10)
r7 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0)
socket$inet6(0xa, 0x3, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x10, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000100000085000000854000000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendfile(0xffffffffffffffff, r6, &(0x7f0000000300)=0x101, 0x7)
fcntl$setpipe(r0, 0x407, 0x401)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x7})
r8 = socket$netlink(0x10, 0x3, 0xa)
r9 = dup(r8)
socket$inet6_udp(0xa, 0x2, 0x0)
r10 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c)
ftruncate(r10, 0x200004)
sendfile(r9, r10, 0x0, 0x80001d00c0d1)

1.037489685s ago: executing program 0 (id=108):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000640)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000380)={0x4, 0x10000, 0x99, 0xffffffff, 0x11, "9b9b93a7b36f097853faeb080d53977b104819"})
r6 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000080000000850000000e00000095000000000035decb3910b95c48888d19fe0000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x59}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
readv(r6, &(0x7f0000000400)=[{0x0}, {&(0x7f0000004900)=""/4068, 0xab}], 0x2)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/234, 0xea}], 0x1}, 0x1f00)
sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
socket$packet(0x11, 0xa, 0x300)
sendmmsg$sock(r9, &(0x7f000000bb40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000011)
r10 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r10, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r10, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r10, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40)
close_range(r4, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf, 0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r11 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r11, 0x0, 0x0)

998.839228ms ago: executing program 3 (id=109):
bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/uevent_seqnum', 0x400, 0x48)
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
setuid(0xee01)
syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)
accept(r1, &(0x7f0000000440)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r2}, 0x10)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendto$inet6(r3, 0x0, 0x0, 0x20004041, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0xf34)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0)
syz_emit_ethernet(0x9a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbff02000000000000000000000000000100004e22"], 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001680)=@delqdisc={0x230, 0x25, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xe}, {0x7, 0xfff3}, {0xb, 0x8}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7fff}, @TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x124, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x7f, 0x8000, 0x8, 0x2, 0x3, 0x8001, 0x8}}, {0x14, 0x2, [0x0, 0x4, 0x5, 0x8, 0x5, 0x1bce, 0x97, 0x71]}}, {{0x1c, 0x1, {0x7, 0x9, 0x800, 0x5, 0x1, 0x1, 0x5, 0x4}}, {0xc, 0x2, [0x8780, 0x800, 0xa, 0xfffd]}}, {{0x1c, 0x1, {0x8, 0x5, 0x5, 0x9, 0x1, 0x9, 0x8, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x0, 0xe5, 0x0, 0x8000, 0x2, 0x0, 0x9, 0x6}}, {0x10, 0x2, [0x8000, 0xa1, 0x3, 0xc2b, 0x0, 0x7]}}, {{0x1c, 0x1, {0x7f, 0x9, 0xa, 0xa, 0x0, 0x9, 0x5, 0x6}}, {0x10, 0x2, [0x9ce, 0x0, 0xf821, 0x4, 0xf5c, 0x1]}}, {{0x1c, 0x1, {0x3, 0x5, 0x8, 0x4, 0x2, 0x1, 0x4, 0x3}}, {0xa, 0x2, [0xc15, 0x7, 0xfffe]}}, {{0x1c, 0x1, {0x3, 0xfd, 0xd934, 0xd9, 0x2, 0x80, 0x6, 0x2}}, {0x8, 0x2, [0x3000, 0x3]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8de}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_STAB={0xc0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x27, 0x5, 0x6, 0xb112, 0x2, 0x80000001, 0x2, 0x5}}, {0xe, 0x2, [0x30, 0x3, 0x1, 0x2, 0x9]}}, {{0x1c, 0x1, {0x0, 0x6, 0xa, 0x3, 0x2, 0xfa, 0xfffffffc, 0x6}}, {0x10, 0x2, [0x6, 0x969, 0x50, 0x1, 0x2, 0x3]}}, {{0x1c, 0x1, {0xf6, 0x0, 0x7, 0xc, 0x1, 0x2, 0x5, 0x9}}, {0x16, 0x2, [0xf, 0x3, 0x5, 0x1, 0x7, 0x8, 0x401, 0xaf7d, 0xb945]}}, {{0x1c, 0x1, {0x9, 0x0, 0x400, 0x9, 0x2, 0xfffffff9, 0x3, 0x8}}, {0x14, 0x2, [0xfff5, 0x9, 0x1, 0x5, 0x7810, 0x398, 0x5, 0x200]}}]}]}, 0x230}}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$vsock_stream(0x28, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x31, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
timer_create(0x3, 0x0, &(0x7f0000000200)=<r8=>0x0)
timer_delete(r8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r7}, 0x10)

870.590529ms ago: executing program 1 (id=110):
chroot(&(0x7f0000000000)='./file0/../file0\x00')
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001340)=@mangle={'mangle\x00', 0x10, 0x6, 0x8f8, 0x738, 0x738, 0xf0, 0x438, 0x738, 0x878, 0x878, 0x878, 0x878, 0x878, 0x6, 0x0, {[{{@uncond, 0x0, 0x2d8, 0xf0, 0x0, {0x7a00000000000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv4=@empty, 0xe}}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@devgroup={{0x38}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @private2, @loopback, @mcast2, @local, @mcast1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @dev, @private1, @private1, @loopback, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}]}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [], 'bridge_slave_1\x00', 'gretap0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x958)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10)
fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6})
mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000080)={'syztnl1\x00', <r7=>0x0, 0x2f, 0xb7, 0x24, 0x80, 0x40, @private2, @mcast2, 0x1, 0x8, 0x7, 0xfffffff7}})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff})
r9 = syz_open_procfs(0x0, &(0x7f0000001080)='net/protocols\x00')
preadv(r9, &(0x7f0000000040)=[{&(0x7f0000000000)=""/57, 0x39}], 0x1, 0xfffffffc, 0x0)
sendmsg$inet(r8, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001)
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000480)={@remote, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x40}, 0x101, 0x584, 0xc72, 0x500, 0x1000, 0x20000, r7})
sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x40d, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5019}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @remote}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x18, 0x30, 0x2, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x4}]}, 0x18}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d00)=@newtaction={0x14, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}}, 0x14}, 0x1, 0x0, 0x0, 0x488d5}, 0x0)

870.281389ms ago: executing program 3 (id=111):
r0 = memfd_create(0x0, 0x0)
unshare(0x80)
write$binfmt_misc(r0, &(0x7f0000000180)="e502", 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, 0x0, &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, 0x0, 0x7e, 0x2)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
execveat(r0, 0x0, 0x0, 0x0, 0x1000)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r4}, 0x18)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x1539, &(0x7f00000003c0)={0x0, 0xed32, 0x2, 0x0, 0x394}, 0x0, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = epoll_create1(0x80000)
r7 = fcntl$dupfd(r5, 0x406, r6)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r8, &(0x7f00000000c0))
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000001c0)={0x60000006})
epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000180)={0xa0000008})

761.461507ms ago: executing program 2 (id=112):
fsopen(0x0, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = syz_open_dev$loop(&(0x7f00000001c0), 0xfff, 0x28000)
ioctl$BLKZEROOUT(r1, 0x127f, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000340)={0x8, {{0x2, 0x8000, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}, 0x20000880)
getsockopt$inet_buf(r2, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x2)
setsockopt$inet6_tcp_int(r0, 0x6, 0x18, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1818e58, &(0x7f0000000140)={[{@errors_remount}, {@grpid}]}, 0x22, 0x63f, &(0x7f0000000d80)="$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")
r3 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f00000000c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10)
timer_gettime(0x0, &(0x7f0000000380))
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]})
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x10)
r9 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0)
fcntl$setlease(r9, 0x400, 0x0)
mq_unlink(&(0x7f0000000340)='eth0\x00')
close_range(r7, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)

761.109027ms ago: executing program 4 (id=113):
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0)
write(r2, &(0x7f00000001c0)="f14a18f6", 0x4)
open(&(0x7f0000000340)='./bus\x00', 0x40000, 0x48)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
request_key(0x0, &(0x7f0000000080)={'syz', 0x0}, 0x0, 0xfffffffffffffffe)
r4 = accept4$phonet_pipe(r1, &(0x7f00000002c0), &(0x7f0000000300)=0x10, 0x80000)
connect$pppl2tp(r3, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @remote}, 0x3, 0x2, 0x1, 0x2}}, 0x2e)
ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000240))
sendfile(r2, r0, 0x0, 0x40001)
sendfile(r2, r1, 0x0, 0x7ffff000)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x1ff, 0x8005, 0x1, 0x80}, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed0744", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x18)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={0x0, 0xe4bf, 0x7, 0x2, 0x10001, 0x3}, 0x14)
getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, &(0x7f0000000080))
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
socket$packet(0x11, 0x2, 0x300)

229.470241ms ago: executing program 3 (id=114):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
syz_open_dev$usbfs(&(0x7f0000000280), 0x4, 0x1135c1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffa, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan1\x00', <r2=>0x0})
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000030000000d00000000842d00000001000000522803ea5a9ff3c33d635c30338a"], 0x0, 0x33, 0x0, 0x40000000, 0x8, 0x10000}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="21000000c61d0000ffffffff0a00000000540000", @ANYRES32=r1, @ANYBLOB="01ffffff00000000000000000000000000000000e576afdb55bdf4a2d7e8d190e102fc031b0eb4d5312930a7496282b1194f0c8bd034ba51a1434e9d88e71f8431f582547da112bffbf7b4e4c3e1ec81570065983077a8f3f3483189da2cfaf509774d8b45f468f7b95e0e91b59f72a927ae7666cb2bfa4f84d49919db06dca6bf1bf2bb994ff23cb6a2399d2d16869c73d9ad548493c2d9bd6f7ee7de476ff86d8dde397d2916d8f000adf0be5a39b0d00a8f37181fbc6521a2197e115ffbcc714c", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="00000000050000000100"/28], 0x50)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000000c1431002dbd7000fbdbdf25080001000000000008003d00050000003cc4bcd7f472d57253c23257ddfa82e5ac417cd741095f322cc565f5b3"], 0x20}, 0x1, 0x0, 0x0, 0x4004400}, 0x0)
r4 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$int_in(r5, 0x5452, &(0x7f0000b28000)=0x20003)
pause()
fcntl$setsig(r5, 0xa, 0x12)
poll(&(0x7f0000b2c000)=[{r6}], 0x2c, 0xffffffffffbffff8)
futex(&(0x7f00000006c0)=0x2, 0x0, 0x2, &(0x7f0000000140)={0x77359400}, 0x0, 0x80000002)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
r7 = gettid()
rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000003, 0x0}, 0x0, 0x8, &(0x7f0000000200))
tkill(r7, 0x16)
dup2(r5, r6)
fcntl$setown(r5, 0x8, r4)
tkill(r4, 0x13)
fchdir(0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='mm_page_alloc\x00', r0, 0x0, 0x7}, 0x18)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)

222.269972ms ago: executing program 0 (id=124):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000007c0)='sched_switch\x00', r0}, 0x18)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sync()
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="5276e92500"/20, @ANYRES32=0x0, @ANYRES16=r1, @ANYBLOB="00000000020000000500000000000000000009000040000000000000"], 0x50)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x3, &(0x7f00000000c0)={@local, @broadcast}, &(0x7f0000000100)=0xc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00"/13], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
memfd_create(0x0, 0xe)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000040), 0x1, 0x775, &(0x7f0000001180)="$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")
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0)
pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b)
socket(0x28, 0x5, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fremovexattr(0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00'}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff56)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r6 = socket$pptp(0x18, 0x1, 0x2)
r7 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
ioctl$MON_IOCX_MFETCH(r7, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72})
close_range(r6, 0xffffffffffffffff, 0x0)

0s ago: executing program 1 (id=115):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00')
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket(0x840000000002, 0x3, 0xff)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r3, 0x0, 0xffffffffffffffff}, 0x18)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10)
sendmmsg$inet(r2, &(0x7f0000000440)=[{{&(0x7f0000000200)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000340)="5825be57aff935e67ca2746357d1787935589db15a23319e3f64fdf5", 0x1c}], 0x1}}], 0x1, 0x840)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "d1"}]}], {0x14}}, 0x74}}, 0x0)
pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a)
r4 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x8b7c, 0x800, 0x200007, 0x22}, &(0x7f0000000940)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r4, 0x47f9, 0x4db, 0x0, 0x0, 0x0)
clock_nanosleep(0x2, 0x37dc12502000000, &(0x7f00000000c0)={0x0, 0x989680}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r8=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f000001a3c0)={0x11, 0xb, &(0x7f000001a2c0)=ANY=[@ANYBLOB="180000000000000000000020646c2500770000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000072000000950000000000000000006ef84048e041b140662a1257199b773c1e86637a5d28fd39835af82240c6283f3e34a749003cba7da898596de476ff5c648e2e33c684975b86cdadb564cbf694c82a8d2de2a04381e60efde807dd4c7162d413f862c67b1656c2fd1f7064fad66e929095b6ce1c8e82d7d6c614d95e3060"], &(0x7f000001a480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r8, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='sys_enter\x00', r9}, 0x18)
process_mrelease(0xffffffffffffffff, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r10}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_generic(r0, &(0x7f000001a240)={&(0x7f0000019080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f000001a200)={&(0x7f00000190c0)={0x1114, 0x1b, 0x1, 0x70bd2b, 0x25dfdbfe, {0xa}, [@generic="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", @typed={0x100, 0x16, 0x0, 0x0, @binary="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"}]}, 0x1114}, 0x1, 0x0, 0x0, 0x40010}, 0x8001)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r11, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01dfffffff9a2600000021"], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.4' (ED25519) to the list of known hosts.
[   27.533881][   T29] audit: type=1400 audit(1753970108.044:62): avc:  denied  { mounton } for  pid=3290 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   27.535070][ T3290] cgroup: Unknown subsys name 'net'
[   27.557595][   T29] audit: type=1400 audit(1753970108.044:63): avc:  denied  { mount } for  pid=3290 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   27.585507][   T29] audit: type=1400 audit(1753970108.104:64): avc:  denied  { unmount } for  pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   27.762312][ T3290] cgroup: Unknown subsys name 'cpuset'
[   27.768570][ T3290] cgroup: Unknown subsys name 'rlimit'
[   27.901291][   T29] audit: type=1400 audit(1753970108.404:65): avc:  denied  { setattr } for  pid=3290 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   27.926757][   T29] audit: type=1400 audit(1753970108.414:66): avc:  denied  { create } for  pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   27.947280][   T29] audit: type=1400 audit(1753970108.414:67): avc:  denied  { write } for  pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   27.967689][   T29] audit: type=1400 audit(1753970108.414:68): avc:  denied  { read } for  pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   27.988145][   T29] audit: type=1400 audit(1753970108.424:69): avc:  denied  { mounton } for  pid=3290 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   27.997546][ T3293] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   28.012969][   T29] audit: type=1400 audit(1753970108.424:70): avc:  denied  { mount } for  pid=3290 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   28.044794][   T29] audit: type=1400 audit(1753970108.534:71): avc:  denied  { relabelto } for  pid=3293 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   28.080114][ T3290] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   29.232852][ T3300] chnl_net:caif_netlink_parms(): no params data found
[   29.323060][ T3307] chnl_net:caif_netlink_parms(): no params data found
[   29.334435][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.341513][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.348966][ T3300] bridge_slave_0: entered allmulticast mode
[   29.355497][ T3300] bridge_slave_0: entered promiscuous mode
[   29.362959][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.370036][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.377253][ T3300] bridge_slave_1: entered allmulticast mode
[   29.383804][ T3300] bridge_slave_1: entered promiscuous mode
[   29.420004][ T3302] chnl_net:caif_netlink_parms(): no params data found
[   29.452101][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.466518][ T3305] chnl_net:caif_netlink_parms(): no params data found
[   29.486091][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.528457][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.535696][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.542988][ T3307] bridge_slave_0: entered allmulticast mode
[   29.549539][ T3307] bridge_slave_0: entered promiscuous mode
[   29.556263][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.563381][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.570629][ T3307] bridge_slave_1: entered allmulticast mode
[   29.577063][ T3307] bridge_slave_1: entered promiscuous mode
[   29.608640][ T3300] team0: Port device team_slave_0 added
[   29.626760][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.636596][ T3300] team0: Port device team_slave_1 added
[   29.642409][ T3304] chnl_net:caif_netlink_parms(): no params data found
[   29.653449][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.660493][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.667699][ T3302] bridge_slave_0: entered allmulticast mode
[   29.674029][ T3302] bridge_slave_0: entered promiscuous mode
[   29.680781][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.687911][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.695119][ T3302] bridge_slave_1: entered allmulticast mode
[   29.701582][ T3302] bridge_slave_1: entered promiscuous mode
[   29.708725][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.757504][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.764512][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.790525][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.801642][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.808716][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.815872][ T3305] bridge_slave_0: entered allmulticast mode
[   29.822238][ T3305] bridge_slave_0: entered promiscuous mode
[   29.835592][ T3307] team0: Port device team_slave_0 added
[   29.842638][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.857050][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.864053][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.890063][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.900836][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.908001][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.915134][ T3305] bridge_slave_1: entered allmulticast mode
[   29.921551][ T3305] bridge_slave_1: entered promiscuous mode
[   29.928400][ T3307] team0: Port device team_slave_1 added
[   29.935260][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.973525][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.993290][ T3302] team0: Port device team_slave_0 added
[   30.000342][ T3302] team0: Port device team_slave_1 added
[   30.009828][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.019113][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.026243][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.052193][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.082477][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.089491][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.115478][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.148740][ T3305] team0: Port device team_slave_0 added
[   30.155680][ T3305] team0: Port device team_slave_1 added
[   30.169932][ T3300] hsr_slave_0: entered promiscuous mode
[   30.176156][ T3300] hsr_slave_1: entered promiscuous mode
[   30.188489][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.195482][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.221443][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.232536][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.239614][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.248070][ T3304] bridge_slave_0: entered allmulticast mode
[   30.254493][ T3304] bridge_slave_0: entered promiscuous mode
[   30.276951][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.283961][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.310663][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.321434][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.328595][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.335759][ T3304] bridge_slave_1: entered allmulticast mode
[   30.342364][ T3304] bridge_slave_1: entered promiscuous mode
[   30.360031][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.367038][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.393034][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.423711][ T3307] hsr_slave_0: entered promiscuous mode
[   30.429706][ T3307] hsr_slave_1: entered promiscuous mode
[   30.435542][ T3307] debugfs: 'hsr0' already exists in 'hsr'
[   30.441272][ T3307] Cannot create hsr debugfs directory
[   30.447126][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.454178][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.480102][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.498099][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.536238][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.574627][ T3305] hsr_slave_0: entered promiscuous mode
[   30.580786][ T3305] hsr_slave_1: entered promiscuous mode
[   30.586751][ T3305] debugfs: 'hsr0' already exists in 'hsr'
[   30.592534][ T3305] Cannot create hsr debugfs directory
[   30.600248][ T3302] hsr_slave_0: entered promiscuous mode
[   30.606401][ T3302] hsr_slave_1: entered promiscuous mode
[   30.612305][ T3302] debugfs: 'hsr0' already exists in 'hsr'
[   30.618049][ T3302] Cannot create hsr debugfs directory
[   30.634708][ T3304] team0: Port device team_slave_0 added
[   30.647992][ T3304] team0: Port device team_slave_1 added
[   30.690389][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.697458][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.723540][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.747137][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.754207][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.780129][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.868865][ T3304] hsr_slave_0: entered promiscuous mode
[   30.875069][ T3304] hsr_slave_1: entered promiscuous mode
[   30.880837][ T3304] debugfs: 'hsr0' already exists in 'hsr'
[   30.886682][ T3304] Cannot create hsr debugfs directory
[   30.894588][ T3300] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   30.906007][ T3300] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   30.925736][ T3300] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   30.941284][ T3300] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   30.981498][ T3307] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   30.995861][ T3307] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   31.014598][ T3307] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   31.029548][ T3307] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   31.069419][ T3302] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   31.079964][ T3302] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   31.089111][ T3302] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   31.098616][ T3302] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   31.146592][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.165354][ T3305] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   31.175061][ T3305] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   31.189754][ T3305] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   31.201156][ T3305] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   31.212794][ T3300] 8021q: adding VLAN 0 to HW filter on device team0
[   31.228177][ T2539] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.235304][ T2539] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.253238][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.261241][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.268381][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.295827][ T3304] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   31.323567][ T3307] 8021q: adding VLAN 0 to HW filter on device team0
[   31.332334][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.339444][ T3304] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   31.352464][ T3304] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   31.361519][ T3304] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   31.387106][  T112] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.394193][  T112] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.408193][  T112] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.415296][  T112] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.442717][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.451320][ T3302] 8021q: adding VLAN 0 to HW filter on device team0
[   31.460764][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.467856][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.491469][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.498582][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.532866][ T3305] 8021q: adding VLAN 0 to HW filter on device team0
[   31.552453][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.559722][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.568576][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.575654][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.608067][ T3305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   31.618607][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.634083][ T3302] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   31.644565][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.671744][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.682067][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.721405][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.737670][ T3304] 8021q: adding VLAN 0 to HW filter on device team0
[   31.764359][  T112] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.771568][  T112] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.787535][  T112] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.794727][  T112] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.833573][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.856957][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.873630][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.920330][ T3307] veth0_vlan: entered promiscuous mode
[   31.953323][ T3307] veth1_vlan: entered promiscuous mode
[   31.997618][ T3307] veth0_macvtap: entered promiscuous mode
[   32.023446][ T3307] veth1_macvtap: entered promiscuous mode
[   32.050204][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.070435][ T3302] veth0_vlan: entered promiscuous mode
[   32.080121][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.088807][ T3305] veth0_vlan: entered promiscuous mode
[   32.096962][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.110411][   T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.120791][ T3300] veth0_vlan: entered promiscuous mode
[   32.131035][ T3300] veth1_vlan: entered promiscuous mode
[   32.141002][   T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.149951][   T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.159146][   T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.171572][ T3302] veth1_vlan: entered promiscuous mode
[   32.181294][ T3305] veth1_vlan: entered promiscuous mode
[   32.205976][ T3302] veth0_macvtap: entered promiscuous mode
[   32.225848][ T3300] veth0_macvtap: entered promiscuous mode
[   32.232654][ T3302] veth1_macvtap: entered promiscuous mode
[   32.239924][ T3300] veth1_macvtap: entered promiscuous mode
[   32.250492][ T3305] veth0_macvtap: entered promiscuous mode
[   32.267872][ T3305] veth1_macvtap: entered promiscuous mode
[   32.279332][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.292967][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.301331][ T3307] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   32.310611][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.330502][ T3304] veth0_vlan: entered promiscuous mode
[   32.340621][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.349970][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.376460][ T3304] veth1_vlan: entered promiscuous mode
[   32.385412][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.392837][   T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.410915][   T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.429102][   T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.438470][    C1] hrtimer: interrupt took 38273 ns
[   32.455865][ T3468] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3'.
[   32.472789][ T3468] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   32.475353][   T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.502365][ T3304] veth0_macvtap: entered promiscuous mode
[   32.528080][   T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.540341][ T3304] veth1_macvtap: entered promiscuous mode
[   32.551280][   T29] kauditd_printk_skb: 36 callbacks suppressed
[   32.551296][   T29] audit: type=1400 audit(1753970113.054:108): avc:  denied  { accept } for  pid=3467 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   32.594395][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.604991][   T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.614257][   T29] audit: type=1400 audit(1753970113.114:109): avc:  denied  { map_create } for  pid=3467 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   32.625036][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.633154][   T29] audit: type=1400 audit(1753970113.114:110): avc:  denied  { map_read map_write } for  pid=3467 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   32.662435][   T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.671505][   T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.698817][   T29] audit: type=1400 audit(1753970113.124:111): avc:  denied  { setopt } for  pid=3467 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   32.728797][  T291] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.759589][  T291] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.767006][ T3478] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2'.
[   32.784897][ T3475] bridge_slave_0: left allmulticast mode
[   32.790681][ T3475] bridge_slave_0: left promiscuous mode
[   32.796401][ T3475] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.808663][   T29] audit: type=1400 audit(1753970113.234:112): avc:  denied  { create } for  pid=3467 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   32.828977][   T29] audit: type=1400 audit(1753970113.234:113): avc:  denied  { write } for  pid=3467 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   32.849076][   T29] audit: type=1400 audit(1753970113.234:114): avc:  denied  { read } for  pid=3467 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   32.869052][   T29] audit: type=1400 audit(1753970113.234:115): avc:  denied  { tracepoint } for  pid=3476 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   32.888527][   T29] audit: type=1400 audit(1753970113.254:116): avc:  denied  { read write } for  pid=3474 comm="syz.0.1" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   32.911728][   T29] audit: type=1400 audit(1753970113.254:117): avc:  denied  { open } for  pid=3474 comm="syz.0.1" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   32.936552][ T3482] loop4: detected capacity change from 0 to 512
[   32.944256][ T3475] bridge_slave_1: left allmulticast mode
[   32.949921][ T3475] bridge_slave_1: left promiscuous mode
[   32.955729][ T3475] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.991941][ T3475] bond0: (slave bond_slave_0): Releasing backup interface
[   33.020176][ T3475] bond0: (slave bond_slave_1): Releasing backup interface
[   33.034461][ T3482] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.056279][ T3482] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   33.072842][ T3489] loop1: detected capacity change from 0 to 1024
[   33.079516][ T3489] =======================================================
[   33.079516][ T3489] WARNING: The mand mount option has been deprecated and
[   33.079516][ T3489]          and is ignored by this kernel. Remove the mand
[   33.079516][ T3489]          option from the mount to silence this warning.
[   33.079516][ T3489] =======================================================
[   33.120290][ T3475] team0: Port device team_slave_0 removed
[   33.133998][ T3489] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   33.175283][ T3475] team0: Port device team_slave_1 removed
[   33.182147][ T3475] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   33.189781][ T3475] batman_adv: batadv0: Removing interface: batadv_slave_0
[   33.198661][ T3475] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   33.206110][ T3475] batman_adv: batadv0: Removing interface: batadv_slave_1
[   33.235113][  T291] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.268923][  T291] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.292614][ T3494] netlink: 'syz.3.4': attribute type 1 has an invalid length.
[   33.323102][  T291] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.352108][  T291] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.372649][ T3479] syz.4.5 (3479) used greatest stack depth: 10816 bytes left
[   33.380474][  T291] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.392545][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.412552][  T291] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.477366][ T3494] netlink: 'syz.3.4': attribute type 9 has an invalid length.
[   33.502756][ T3498] loop2: detected capacity change from 0 to 1024
[   33.513554][ T3494] bond_slave_0: entered promiscuous mode
[   33.519263][ T3494] bond_slave_1: entered promiscuous mode
[   33.526377][ T3498] EXT4-fs: Ignoring removed oldalloc option
[   33.552854][ T3498] EXT4-fs: Ignoring removed orlov option
[   33.571925][ T3494] macvlan2: entered promiscuous mode
[   33.575498][ T3498] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   33.577284][ T3494] bond0: entered promiscuous mode
[   33.582541][ T3494] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   33.611999][ T3501] loop4: detected capacity change from 0 to 4096
[   33.617416][ T3503] loop0: detected capacity change from 0 to 512
[   33.631261][ T3503] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   33.650227][ T3501] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.671786][ T3498] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.684968][ T3501] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #15: comm syz.4.8: corrupted inode contents
[   33.707983][ T3501] EXT4-fs error (device loop4): ext4_dirty_inode:6454: inode #15: comm syz.4.8: mark_inode_dirty error
[   33.723006][ T3501] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #15: comm syz.4.8: corrupted inode contents
[   33.752902][ T3501] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #15: comm syz.4.8: mark_inode_dirty error
[   33.796370][ T3509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8'.
[   33.819938][ T3492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6'.
[   33.825794][ T3414] IPVS: starting estimator thread 0...
[   33.838295][ T3501] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #15: comm syz.4.8: corrupted inode contents
[   33.856646][ T3501] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #15: comm syz.4.8: mark_inode_dirty error
[   33.870467][ T3501] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #15: comm syz.4.8: corrupted inode contents
[   33.889421][ T3498] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt.
[   33.913938][ T3501] EXT4-fs error (device loop4): ext4_truncate:4592: inode #15: comm syz.4.8: mark_inode_dirty error
[   33.919559][ T3515] loop3: detected capacity change from 0 to 512
[   33.938838][ T3501] EXT4-fs error (device loop4) in ext4_setattr:5981: Corrupt filesystem
[   33.951667][ T3512] IPVS: using max 1968 ests per chain, 98400 per kthread
[   33.961923][ T3515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.055363][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.142491][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.357374][ T3501] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.401759][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.686888][ T3528] loop1: detected capacity change from 0 to 512
[   34.693790][ T3528] EXT4-fs: Ignoring removed mblk_io_submit option
[   34.700303][ T3528] EXT4-fs: Ignoring removed bh option
[   34.710411][ T3528] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   34.723485][ T3528] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   34.744841][ T3528] EXT4-fs (loop1): 1 truncate cleaned up
[   34.751372][ T3528] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.950801][ T3503] syz.0.9 (3503) used greatest stack depth: 10576 bytes left
[   35.002626][ T3536] loop4: detected capacity change from 0 to 128
[   35.047837][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.059327][ T3414] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   35.066984][ T3414] hid-generic 0000:0000:0000.0001: item fetching failed at offset 4/35
[   35.096104][ T3538] loop0: detected capacity change from 0 to 1024
[   35.111098][ T3538] EXT4-fs: Ignoring removed orlov option
[   35.144952][ T3414] hid-generic 0000:0000:0000.0001: probe with driver hid-generic failed with error -22
[   35.180264][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.189857][ T3538] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.372333][ T3548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15'.
[   35.416427][ T3550] vhci_hcd: invalid port number 65
[   35.456873][ T3543] infiniband syz1: set active
[   35.461649][ T3543] infiniband syz1: added syz_tun
[   35.500563][ T3556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17'.
[   35.510951][ T3543] RDS/IB: syz1: added
[   35.521505][ T3543] smc: adding ib device syz1 with port count 1
[   35.612990][ T3543] smc:    ib device syz1 port 1 has pnetid 
[   35.845261][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.086895][ T3522] syz.2.11 (3522) used greatest stack depth: 9104 bytes left
[   36.121766][ T3525] syz.2.11 (3525) used greatest stack depth: 8376 bytes left
[   36.467575][ T3520] syz.2.11 (3520) used greatest stack depth: 7160 bytes left
[   36.567019][ T3587] 9pnet_fd: Insufficient options for proto=fd
[   36.856033][ T3556] infiniband syz!: set active
[   36.856058][ T3556] infiniband syz!: added team_slave_0
[   36.856399][ T3556] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[   36.856642][ T3556] infiniband syz!: Couldn't open port 1
[   36.866760][ T3556] RDS/IB: syz!: added
[   36.866779][ T3556] smc: adding ib device syz! with port count 1
[   36.866793][ T3556] smc:    ib device syz! port 1 has pnetid 
[   37.030415][ T3587] tipc: Started in network mode
[   37.035452][ T3587] tipc: Node identity d2ce05e32879, cluster identity 4711
[   37.042830][ T3587] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   37.071163][ T3587] tipc: Disabling bearer <eth:syzkaller0>
[   37.286874][ T3551] Set syz1 is full, maxelem 65536 reached
[   37.327005][ T3598] process 'syz.3.22' launched '/dev/fd/11' with NULL argv: empty string added
[   37.453843][ T3605] netlink: 'syz.2.24': attribute type 27 has an invalid length.
[   37.504218][ T3605] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.511466][ T3605] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.523367][ T3611] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   37.546892][ T3611] SELinux: security_context_str_to_sid (÷ÿ) failed with errno=-22
[   37.605539][ T3605] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   37.627234][ T3615] netlink: 3 bytes leftover after parsing attributes in process `syz.1.26'.
[   37.634008][ T3605] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   37.704058][   T29] kauditd_printk_skb: 289 callbacks suppressed
[   37.704131][   T29] audit: type=1400 audit(1753970118.214:407): avc:  denied  { mount } for  pid=3608 comm="syz.1.26" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   37.761846][   T29] audit: type=1326 audit(1753970118.264:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3606 comm="syz.3.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9205c0e9a9 code=0x7ffc0000
[   37.785253][   T29] audit: type=1326 audit(1753970118.264:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3606 comm="syz.3.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9205c0e9a9 code=0x7ffc0000
[   37.841696][ T3615] 0ªX¹¦À: renamed from caif0
[   37.863276][ T3615] 0ªX¹¦À: entered allmulticast mode
[   37.868527][ T3615] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[   37.884290][   T51] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   37.897381][   T51] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   37.912801][   T51] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   37.930781][   T51] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   37.941134][ T3621] loop0: detected capacity change from 0 to 1024
[   37.948380][ T3619] loop3: detected capacity change from 0 to 512
[   37.950503][   T29] audit: type=1400 audit(1753970118.454:410): avc:  denied  { unmount } for  pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   37.968496][ T3621] EXT4-fs: Ignoring removed bh option
[   37.981355][ T3609] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[   37.987863][   T29] audit: type=1400 audit(1753970118.494:411): avc:  denied  { remount } for  pid=3608 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   38.009595][ T3621] EXT4-fs: inline encryption not supported
[   38.035734][   T29] audit: type=1400 audit(1753970118.524:412): avc:  denied  { append } for  pid=3608 comm="syz.1.26" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   38.058572][ T3619] EXT4-fs error (device loop3): ext4_iget_extra_inode:5030: inode #15: comm syz.3.27: corrupted in-inode xattr: invalid ea_ino
[   38.067332][ T3621] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   38.087043][ T3619] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.27: couldn't read orphan inode 15 (err -117)
[   38.100692][ T3627] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38913 sclass=netlink_route_socket pid=3627 comm=syz.2.30
[   38.134440][ T3626] loop4: detected capacity change from 0 to 128
[   38.144510][ T3621] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[   38.160831][ T3619] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.162197][ T3621] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 2: comm syz.0.28: lblock 2 mapped to illegal pblock 2 (length 1)
[   38.185106][   T29] audit: type=1400 audit(1753970118.694:413): avc:  denied  { mount } for  pid=3618 comm="syz.3.27" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   38.205282][ T3621] Quota error (device loop0): qtree_write_dquot: dquota write failed
[   38.208254][   T29] audit: type=1326 audit(1753970118.694:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3618 comm="syz.3.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9205c0e9a9 code=0x7ffc0000
[   38.239382][   T29] audit: type=1326 audit(1753970118.694:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3618 comm="syz.3.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9205c0e9a9 code=0x7ffc0000
[   38.251695][ T3621] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 48: comm syz.0.28: lblock 0 mapped to illegal pblock 48 (length 1)
[   38.284556][ T3621] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.28: Failed to acquire dquot type 0
[   38.321466][ T3631] loop1: detected capacity change from 0 to 2048
[   38.367718][ T3621] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6250: Corrupt filesystem
[   38.378433][ T3621] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.28: mark_inode_dirty error
[   38.391419][ T3634] loop4: detected capacity change from 0 to 2048
[   38.399325][ T3621] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[   38.411825][ T3631]  loop1: p1 < > p4
[   38.413986][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.426897][ T3631] loop1: p4 size 8388608 extends beyond EOD, truncated
[   38.443511][ T3634] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.458602][ T3621] EXT4-fs (loop0): 1 orphan inode deleted
[   38.464911][ T3621] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.477665][   T51] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1)
[   38.487540][ T3639] mmap: syz.2.30 (3639) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   38.504778][   T51] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0
[   38.505086][ T3634] tipc: Started in network mode
[   38.521474][ T3634] tipc: Node identity 4, cluster identity 4711
[   38.527690][ T3634] tipc: Node number set to 4
[   38.539327][ T2992]  loop1: p1 < > p4
[   38.543731][ T2992] loop1: p4 size 8388608 extends beyond EOD, truncated
[   38.606295][ T3631] batman_adv: batadv0: Adding interface: dummy0
[   38.612772][ T3631] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.640781][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.641787][ T3631] batman_adv: batadv0: Interface activated: dummy0
[   38.672610][ T3631] batadv0: mtu less than device minimum
[   38.678700][ T3631] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   38.689633][ T3631] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   38.700493][ T3631] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   38.711360][ T3631] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   38.722234][ T3631] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   38.732955][ T3631] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   38.743776][ T3631] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   38.831047][ T3642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28'.
[   38.840435][ T3642] IPVS: Error joining to the multicast group
[   38.924488][ T3645] loop4: detected capacity change from 0 to 512
[   38.935386][ T3532] udevd[3532]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   39.077305][ T3645] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   39.131511][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.161479][ T3645] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal
[   39.191808][ T3305] EXT4-fs error (device loop0): __ext4_get_inode_loc:4787: comm syz-executor: Invalid inode table block 1 in block_group 0
[   39.271813][ T3305] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6250: Corrupt filesystem
[   39.281401][ T3305] EXT4-fs error (device loop0): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error
[   39.374686][ T3627] loop2: detected capacity change from 0 to 128
[   39.381134][ T3652] wireguard0: entered promiscuous mode
[   39.386796][ T3652] wireguard0: entered allmulticast mode
[   39.415191][ T3627] EXT4-fs: Ignoring removed nobh option
[   39.457908][ T3627] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   39.522730][ T3627] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   39.562919][ T3661] vhci_hcd: invalid port number 65
[   39.746443][ T3307] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   39.796311][ T3659] loop1: detected capacity change from 0 to 32768
[   39.864914][ T3659]  loop1: p1 p2 p3 < >
[   39.869845][ T3655] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[   39.870038][ T3659] loop1: p1 size 242222080 extends beyond EOD, truncated
[   39.889223][ T3659] loop1: p2 start 4294967295 is beyond EOD, truncated
[   39.976698][ T3532] udevd[3532]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[   40.014939][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[   40.088612][ T3679] loop1: detected capacity change from 0 to 2048
[   42.304486][ T3693] loop3: detected capacity change from 0 to 128
[   42.321866][ T3690] 9pnet_virtio: no channels available for device 127.0.0.1
[   42.335224][ T3695] netlink: 104 bytes leftover after parsing attributes in process `syz.0.48'.
[   42.363767][ T3690] loop2: detected capacity change from 0 to 256
[   42.449693][ T3699] SELinux: security_context_str_to_sid (÷ÿ) failed with errno=-22
[   42.520626][ T3703] loop2: detected capacity change from 0 to 1024
[   42.548089][ T3703] EXT4-fs: Ignoring removed nomblk_io_submit option
[   42.595903][ T3703] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.602935][ T3702] loop0: detected capacity change from 0 to 164
[   42.682547][ T3702] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   42.700612][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.719164][   T29] kauditd_printk_skb: 514 callbacks suppressed
[   42.719180][   T29] audit: type=1400 audit(1754494411.213:928): avc:  denied  { mount } for  pid=3700 comm="syz.0.51" name="/" dev="loop0" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[   42.790392][   T29] audit: type=1400 audit(1754494411.290:929): avc:  denied  { create } for  pid=3710 comm="syz.2.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   42.824026][   T29] audit: type=1400 audit(1754494411.319:930): avc:  denied  { bind } for  pid=3710 comm="syz.2.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   43.261481][ T3722] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[   43.297811][   T29] audit: type=1400 audit(1754494411.775:931): avc:  denied  { create } for  pid=3715 comm="syz.4.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   43.416849][ T3720] net_ratelimit: 12 callbacks suppressed
[   43.416913][ T3720] netlink: zone id is out of range
[   43.547198][ T3720] netlink: zone id is out of range
[   43.580016][   T29] audit: type=1400 audit(1754494412.046:932): avc:  denied  { connect } for  pid=3723 comm="syz.2.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   43.667676][ T3720] netlink: zone id is out of range
[   43.672969][ T3720] netlink: zone id is out of range
[   43.788236][ T3720] netlink: zone id is out of range
[   43.800144][ T3726] netlink: 256 bytes leftover after parsing attributes in process `syz.2.55'.
[   43.830978][ T3720] netlink: zone id is out of range
[   43.844463][ T3720] netlink: zone id is out of range
[   43.867253][ T3720] netlink: zone id is out of range
[   43.897477][ T3720] netlink: zone id is out of range
[   43.917965][   T29] audit: type=1400 audit(1754494412.376:933): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   43.959888][ T3720] netlink: zone id is out of range
[   43.968307][   T29] audit: type=1400 audit(1754494412.425:934): avc:  denied  { relabelfrom } for  pid=3729 comm="syz.3.56" name="" dev="pipefs" ino=6444 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[   43.990674][   T29] audit: type=1400 audit(1754494412.434:935): avc:  denied  { create } for  pid=3729 comm="syz.3.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   44.029123][   T29] audit: type=1400 audit(1754494412.434:936): avc:  denied  { read } for  pid=3729 comm="syz.3.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   44.048370][   T29] audit: type=1400 audit(1754494412.434:937): avc:  denied  { search } for  pid=3031 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   44.082788][ T3732] loop4: detected capacity change from 0 to 2048
[   44.089589][ T3732] SELinux: security_context_str_to_sid (root) failed with errno=-22
[   44.145081][ T3732] batman_adv: batadv0: Adding interface: dummy0
[   44.151390][ T3732] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.180034][ T3732] batman_adv: batadv0: Interface activated: dummy0
[   44.202570][ T3737] tipc: Started in network mode
[   44.207669][ T3737] tipc: Node identity ac14140f, cluster identity 4711
[   44.217374][ T3737] tipc: New replicast peer: 255.255.255.255
[   44.223541][ T3737] tipc: Enabled bearer <udp:syz2>, priority 10
[   44.255242][ T3739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.59'.
[   44.265265][ T3741] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   44.273975][ T3732] bond1: entered promiscuous mode
[   44.279353][ T3732] bond1: entered allmulticast mode
[   44.285125][ T3732] 8021q: adding VLAN 0 to HW filter on device bond1
[   44.296257][ T3732] bond1 (unregistering): Released all slaves
[   44.312711][ T3744] loop0: detected capacity change from 0 to 1764
[   44.408000][ T3744] siw: device registration error -23
[   44.483820][ T3763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.64'.
[   44.512991][ T3763] Zero length message leads to an empty skb
[   44.668839][ T3780] netlink: 'syz.1.67': attribute type 3 has an invalid length.
[   44.780835][ T3788] Falling back ldisc for ttyS3.
[   44.816154][ T3792] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   45.264003][   T10] tipc: Node number set to 2886997007
[   45.811639][ T3806] lo speed is unknown, defaulting to 1000
[   45.835352][ T3806] lo speed is unknown, defaulting to 1000
[   45.858397][ T3806] lo speed is unknown, defaulting to 1000
[   45.885413][ T3806] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   45.901883][ T3806] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   45.910030][ T3812] loop0: detected capacity change from 0 to 1024
[   45.921932][ T3806] lo speed is unknown, defaulting to 1000
[   45.931361][ T3819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.71'.
[   45.944063][ T3806] lo speed is unknown, defaulting to 1000
[   45.950149][ T3806] lo speed is unknown, defaulting to 1000
[   45.952213][ T3819] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   45.971353][ T3819] batman_adv: batadv0: Removing interface: batadv_slave_0
[   45.986217][ T3812] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.016887][ T3819] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   46.031867][ T3819] batman_adv: batadv0: Removing interface: batadv_slave_1
[   46.046069][ T3812] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.72: Allocating blocks 385-513 which overlap fs metadata
[   46.061539][ T3819] batman_adv: batadv0: Interface deactivated: dummy0
[   46.068325][ T3819] batman_adv: batadv0: Removing interface: dummy0
[   46.078634][ T3812] EXT4-fs (loop0): pa ffff8881059d3070: logic 16, phys. 129, len 24
[   46.086840][ T3812] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8
[   46.098917][ T3809] netlink: 'syz.4.71': attribute type 1 has an invalid length.
[   46.106597][ T3809] netlink: 224 bytes leftover after parsing attributes in process `syz.4.71'.
[   46.163197][ T3806] lo speed is unknown, defaulting to 1000
[   46.178094][ T3806] lo speed is unknown, defaulting to 1000
[   46.217886][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.266821][ T3849] loop0: detected capacity change from 0 to 164
[   46.392407][ T3858] loop0: detected capacity change from 0 to 512
[   46.403371][ T3859] loop4: detected capacity change from 0 to 1024
[   46.438875][ T3845] lo speed is unknown, defaulting to 1000
[   46.445916][ T3868] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.78'.
[   46.487301][ T3870] loop1: detected capacity change from 0 to 512
[   46.495075][ T3859] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   46.497252][ T3870] EXT4-fs: Ignoring removed i_version option
[   46.535199][ T3870] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   46.548735][ T3858] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   46.564229][ T3859] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.77: Invalid block bitmap block 0 in block_group 0
[   46.596362][ T3858] EXT4-fs (loop0): mount failed
[   46.606156][ T3870] EXT4-fs (loop1): orphan cleanup on readonly fs
[   46.628782][ T3859] EXT4-fs (loop4): Remounting filesystem read-only
[   46.635887][ T3859] EXT4-fs (loop4): 1 orphan inode deleted
[   46.647856][ T3870] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.79: bg 0: block 248: padding at end of block bitmap is not set
[   46.649573][ T3886] netlink: 5 bytes leftover after parsing attributes in process `syz.3.81'.
[   46.690773][ T3870] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.79: Failed to acquire dquot type 1
[   46.694915][ T3886] 0ªX¹¦D: renamed from gretap0 (while UP)
[   46.710815][ T3859] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.725068][ T3858] loop0: detected capacity change from 0 to 1024
[   46.731402][ T3870] EXT4-fs (loop1): 1 truncate cleaned up
[   46.732242][ T3858] EXT4-fs: Ignoring removed nobh option
[   46.746283][ T3886] 0ªX¹¦D: entered allmulticast mode
[   46.758607][ T3870] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   46.759632][ T3858] EXT4-fs: Ignoring removed bh option
[   46.776978][ T3895] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60113 sclass=netlink_route_socket pid=3895 comm=syz.3.81
[   46.792360][ T3883] loop2: detected capacity change from 0 to 1024
[   46.809087][ T3883] EXT4-fs: Ignoring removed orlov option
[   46.822077][ T3858] EXT4-fs (loop0): stripe (32769) is not aligned with cluster size (16), stripe is disabled
[   46.853300][ T3870] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[   46.867510][ T3883] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.887674][ T3858] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.896434][ T3870] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[   46.915049][ T3870] ext4 filesystem being remounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   46.933485][ T3870] netlink: 16 bytes leftover after parsing attributes in process `syz.1.79'.
[   46.960246][ T3858] lo: entered promiscuous mode
[   46.967210][ T3858] tunl0: entered promiscuous mode
[   46.976367][ T3858] gre0: entered promiscuous mode
[   46.994385][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.004052][ T3858] gretap0: entered promiscuous mode
[   47.013936][ T3858] erspan0: entered promiscuous mode
[   47.034053][ T3858] ip_vti0: entered promiscuous mode
[   47.038550][ T3883] EXT4-fs (loop2): shut down requested (0)
[   47.047133][ T3858] ip6_vti0: entered promiscuous mode
[   47.058159][ T3858] sit0: entered promiscuous mode
[   47.065675][ T3883] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop2 ino=15
[   47.073450][ T3858] ip6tnl0: entered promiscuous mode
[   47.082305][ T3858] ip6gre0: entered promiscuous mode
[   47.091053][ T3883] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop2 ino=15
[   47.102401][ T3883] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop2 ino=15
[   47.125684][ T3858] syz_tun: entered promiscuous mode
[   47.133227][ T3858] ip6gretap0: entered promiscuous mode
[   47.151184][ T3858] bridge0: entered promiscuous mode
[   47.154979][   T10] kernel write not supported for file /53/attr/exec (pid: 10 comm: kworker/0:1)
[   47.158513][ T3858] vcan0: entered promiscuous mode
[   47.189628][ T3923] loop1: detected capacity change from 0 to 2048
[   47.197107][ T3858] bond0: entered promiscuous mode
[   47.210499][ T3858] team0: entered promiscuous mode
[   47.217646][ T3858] dummy0: entered promiscuous mode
[   47.225025][ T3858] nlmon0: entered promiscuous mode
[   47.231755][ T3858] caif0: entered promiscuous mode
[   47.232747][ T3923] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.237182][ T3858] vxcan0: entered promiscuous mode
[   47.255439][ T3858] vxcan1: entered promiscuous mode
[   47.261524][ T3858] veth0: entered promiscuous mode
[   47.268347][ T3858] veth1: entered promiscuous mode
[   47.277155][ T3858] wg0: entered promiscuous mode
[   47.297552][ T3858] wg1: entered promiscuous mode
[   47.314493][ T3858] wg2: entered promiscuous mode
[   47.321165][ T3858] veth0_to_bridge: entered promiscuous mode
[   47.328867][ T3858] bridge_slave_0: entered promiscuous mode
[   47.335849][ T3858] veth1_to_bridge: entered promiscuous mode
[   47.343566][ T3858] bridge_slave_1: entered promiscuous mode
[   47.405604][ T3927] loop3: detected capacity change from 0 to 1024
[   47.412607][ T3927] EXT4-fs: Ignoring removed mblk_io_submit option
[   47.419427][ T3858] veth0_to_bond: entered promiscuous mode
[   47.439248][ T3858] bond_slave_0: entered promiscuous mode
[   47.445442][ T3927] EXT4-fs: Ignoring removed nobh option
[   47.451477][ T3927] EXT4-fs: Ignoring removed bh option
[   47.470808][ T3858] veth1_to_bond: entered promiscuous mode
[   47.489022][ T3927] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.512331][ T3858] bond_slave_1: entered promiscuous mode
[   47.518755][ T3858] veth0_to_team: entered promiscuous mode
[   47.533272][ T3858] team_slave_0: entered promiscuous mode
[   47.541866][ T3858] veth1_to_team: entered promiscuous mode
[   47.551737][ T3858] team_slave_1: entered promiscuous mode
[   47.571235][ T3858] veth0_to_batadv: entered promiscuous mode
[   47.591069][ T3858] batadv_slave_0: entered promiscuous mode
[   47.598331][ T3858] veth1_to_batadv: entered promiscuous mode
[   47.606526][ T3858] batadv_slave_1: entered promiscuous mode
[   47.613654][ T3858] xfrm0: entered promiscuous mode
[   47.619916][ T3858] veth0_to_hsr: entered promiscuous mode
[   47.628626][ T3858] veth1_to_hsr: entered promiscuous mode
[   47.636310][ T3858] hsr0: entered promiscuous mode
[   47.642602][ T3858] veth1_virt_wifi: entered promiscuous mode
[   47.651075][ T3858] veth0_virt_wifi: entered promiscuous mode
[   47.664863][ T3858] macvtap0: entered promiscuous mode
[   47.678093][ T3858] macsec0: entered promiscuous mode
[   47.689295][ T3858] geneve0: entered promiscuous mode
[   47.700165][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.717299][ T3858] geneve1: entered promiscuous mode
[   47.727552][ T3858] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   47.760725][ T3935] loop2: detected capacity change from 0 to 1024
[   47.769672][ T3858] netdevsim netdevsim0 netdevsim1: entered promiscuous mode
[   47.798120][ T3935] EXT4-fs: Ignoring removed nobh option
[   47.803818][ T3935] EXT4-fs: inline encryption not supported
[   47.809859][ T3858] netdevsim netdevsim0 netdevsim2: entered promiscuous mode
[   47.825405][ T3858] netdevsim netdevsim0 netdevsim3: entered promiscuous mode
[   47.834759][   T31] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   47.846181][   T31] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   47.857947][ T3935] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.871656][   T31] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   47.882582][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.894642][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.895920][ T3935] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.84: Allocating blocks 385-513 which overlap fs metadata
[   47.910110][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   47.947732][ T3935] EXT4-fs (loop2): pa ffff8881059d3070: logic 16, phys. 129, len 24
[   47.955847][ T3935] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8
[   47.979491][ T3941] loop3: detected capacity change from 0 to 1024
[   47.988349][ T3941] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   47.994642][ T3935] netlink: 'syz.2.84': attribute type 1 has an invalid length.
[   47.999359][ T3941] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   48.021816][ T3941] JBD2: no valid journal superblock found
[   48.027631][ T3941] EXT4-fs (loop3): Could not load journal inode
[   48.045918][   T29] kauditd_printk_skb: 352 callbacks suppressed
[   48.045934][   T29] audit: type=1400 audit(1754494416.408:1285): avc:  denied  { name_bind } for  pid=3940 comm="syz.3.86" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   48.076768][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.083679][ T3944] loop8: detected capacity change from 0 to 16384
[   48.096922][   T29] audit: type=1400 audit(1754494416.457:1286): avc:  denied  { ioctl } for  pid=3938 comm="syz.0.85" path="socket:[5871]" dev="sockfs" ino=5871 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   48.224753][   T29] audit: type=1400 audit(1754494416.486:1287): avc:  denied  { wake_alarm } for  pid=3940 comm="syz.3.86" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   48.289900][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.323325][   T29] audit: type=1400 audit(1754494416.672:1288): avc:  denied  { create } for  pid=3955 comm="syz.2.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[   48.345928][ T3956] syz.2.88 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   48.385972][ T3956] loop2: detected capacity change from 0 to 1024
[   48.410380][ T3957] loop1: detected capacity change from 0 to 512
[   48.417244][ T3957] EXT4-fs: Ignoring removed i_version option
[   48.426204][ T3956] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   48.462721][ T3944] loop8: detected capacity change from 16384 to 16383
[   48.471589][ T3957] EXT4-fs (loop1): orphan cleanup on readonly fs
[   48.479374][ T3957] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.87: bg 0: block 131: padding at end of block bitmap is not set
[   48.495148][ T3957] EXT4-fs (loop1): Remounting filesystem read-only
[   48.502010][ T3957] EXT4-fs (loop1): 1 truncate cleaned up
[   48.508425][ T3957] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   48.588606][ T3956] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.88: bg 0: block 10: padding at end of block bitmap is not set
[   48.686368][ T3956] Quota error (device loop2): write_blk: dquota write failed
[   48.693940][ T3956] Quota error (device loop2): find_free_dqentry: Can't write quota data block 2
[   48.734216][ T3956] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[   48.744468][ T3956] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.88: Failed to acquire dquot type 0
[   48.770378][ T3956] Quota error (device loop2): write_blk: dquota write failed
[   48.777865][ T3956] Quota error (device loop2): find_free_dqentry: Can't write quota data block 2
[   48.787053][ T3956] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[   48.797007][ T3956] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.88: Failed to acquire dquot type 0
[   48.823714][ T3956] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.88: Freeing blocks not in datazone - block = 0, count = 4096
[   48.853991][ T3956] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.88: Failed to acquire dquot type 0
[   48.866042][ T3956] EXT4-fs (loop2): 1 orphan inode deleted
[   48.872689][ T3956] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.891699][ T3956] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.967423][ T3968] loop2: detected capacity change from 0 to 4096
[   49.050362][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.071618][ T3978] loop1: detected capacity change from 0 to 764
[   49.083025][ T3978] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   49.107308][ T3973] netlink: 12 bytes leftover after parsing attributes in process `syz.3.92'.
[   49.145075][ T3981] netlink: 'syz.3.94': attribute type 6 has an invalid length.
[   49.233002][ T3985] batadv_slave_0: entered promiscuous mode
[   49.246743][ T3985] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[   49.255804][ T3985] batadv_slave_0 (unregistering): left promiscuous mode
[   49.263009][ T3985] batman_adv: batadv0: Removing interface: batadv_slave_0
[   49.280558][ T3980] delete_channel: no stack
[   49.299337][ T3989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.96'.
[   49.308118][ T3989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.96'.
[   49.411394][ T3997] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   49.443429][ T3999] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.97'.
[   49.463868][ T4003] 9pnet_fd: Insufficient options for proto=fd
[   49.472225][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.508018][ T4006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.101'.
[   49.520582][ T4006] bridge0: port 3(macvlan2) entered blocking state
[   49.527350][ T4006] bridge0: port 3(macvlan2) entered disabled state
[   49.534143][ T4006] macvlan2: entered allmulticast mode
[   49.539581][ T4006] bridge0: entered allmulticast mode
[   49.545402][ T4006] macvlan2: left allmulticast mode
[   49.550585][ T4006] bridge0: left allmulticast mode
[   49.587588][ T4009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.102'.
[   49.613514][ T4009] netlink: 'syz.2.102': attribute type 10 has an invalid length.
[   49.622997][ T4009] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   49.681292][ T4006] loop4: detected capacity change from 0 to 512
[   49.701135][ T4006] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.732887][ T4014] loop2: detected capacity change from 0 to 2364
[   49.757135][ T4006] ext4 filesystem being mounted at /15/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   49.772529][ T4006] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #4: comm syz.4.101: corrupted inode contents
[   49.791658][ T4006] EXT4-fs error (device loop4): ext4_dirty_inode:6454: inode #4: comm syz.4.101: mark_inode_dirty error
[   49.810189][ T4006] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #4: comm syz.4.101: corrupted inode contents
[   49.829533][ T4006] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #4: comm syz.4.101: mark_inode_dirty error
[   49.842317][ T4006] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.101: Failed to acquire dquot type 1
[   49.853970][ T4019] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #4: comm syz.4.101: corrupted inode contents
[   49.868552][ T4019] EXT4-fs error (device loop4): ext4_dirty_inode:6454: inode #4: comm syz.4.101: mark_inode_dirty error
[   49.880037][ T4019] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #4: comm syz.4.101: corrupted inode contents
[   49.892258][ T4019] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #4: comm syz.4.101: mark_inode_dirty error
[   49.916716][ T4019] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.101: Failed to acquire dquot type 1
[   49.928361][ T4022] syz.0.104 uses obsolete (PF_INET,SOCK_PACKET)
[   49.966362][ T4021] netlink: 16 bytes leftover after parsing attributes in process `syz.2.105'.
[   50.046063][ T4025] loop2: detected capacity change from 0 to 164
[   50.120442][ T4027] net_ratelimit: 65 callbacks suppressed
[   50.120458][ T4027] openvswitch: netlink: Message has 6 unknown bytes.
[   50.229466][ T4025] rock: directory entry would overflow storage
[   50.235991][ T4025] rock: sig=0x4f50, size=4, remaining=3
[   50.241676][ T4025] iso9660: Corrupted directory entry in block 4 of inode 1792
[   50.256372][ T4034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.109'.
[   50.265266][ T4034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.109'.
[   50.328849][ T4029] netlink: 'syz.0.108': attribute type 13 has an invalid length.
[   50.367480][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.380072][ T4029] 8021q: adding VLAN 0 to HW filter on device bond0
[   50.402671][ T4029] 8021q: adding VLAN 0 to HW filter on device team0
[   50.414213][ T4029] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   50.447294][ T4044] loop4: detected capacity change from 0 to 512
[   50.473922][ T4044] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.485273][ T4037] bridge_slave_0: left allmulticast mode
[   50.491615][ T4037] bridge_slave_0: left promiscuous mode
[   50.497522][ T4037] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.568998][ T4049] loop2: detected capacity change from 0 to 1024
[   50.579940][ T4049] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   50.592442][ T4037] bridge_slave_1: left allmulticast mode
[   50.598144][ T4037] bridge_slave_1: left promiscuous mode
[   50.603890][ T4037] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.615139][ T4037] bond0: (slave bond_slave_0): Releasing backup interface
[   50.638423][ T4049] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.112: Invalid block bitmap block 0 in block_group 0
[   50.655799][ T4049] EXT4-fs (loop2): Remounting filesystem read-only
[   50.662889][ T4049] EXT4-fs (loop2): 1 orphan inode deleted
[   50.679886][ T4049] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.703310][ T4037] bond_slave_0: left promiscuous mode
[   50.712137][ T4037] bond0: (slave bond_slave_1): Releasing backup interface
[   50.723397][ T4037] bond_slave_1: left promiscuous mode
[   50.739672][ T4037] team0: Port device team_slave_0 removed
[   50.751956][ T4037] team0: Port device team_slave_1 removed
[   50.759054][ T4037] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   50.766488][ T4037] batman_adv: batadv0: Removing interface: batadv_slave_0
[   50.781882][ T4037] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   50.789308][ T4037] batman_adv: batadv0: Removing interface: batadv_slave_1
[   51.050102][ T4063] loop0: detected capacity change from 0 to 2048
[   51.068676][ T4063] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.202187][ T4050] ==================================================================
[   51.210333][ T4050] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark
[   51.218273][ T4050] 
[   51.220616][ T4050] write to 0xffff888106e7d3ec of 4 bytes by task 4044 on cpu 0:
[   51.228267][ T4050]  xas_set_mark+0x12b/0x140
[   51.232816][ T4050]  __folio_start_writeback+0x1dd/0x440
[   51.238307][ T4050]  ext4_bio_write_folio+0x5ad/0x9f0
[   51.243529][ T4050]  mpage_submit_folio+0xe4/0x170
[   51.248498][ T4050]  mpage_process_page_bufs+0x39b/0x4a0
[   51.253984][ T4050]  mpage_prepare_extent_to_map+0x741/0xaa0
[   51.259824][ T4050]  ext4_do_writepages+0x6ea/0x21c0
[   51.264956][ T4050]  ext4_writepages+0x176/0x300
[   51.269725][ T4050]  do_writepages+0x1c3/0x310
[   51.274328][ T4050]  file_write_and_wait_range+0x156/0x2c0
[   51.279990][ T4050]  generic_buffers_fsync_noflush+0x45/0x120
[   51.286000][ T4050]  ext4_sync_file+0x1ab/0x690
[   51.290695][ T4050]  vfs_fsync_range+0x10a/0x130
[   51.295475][ T4050]  ext4_buffered_write_iter+0x34f/0x3c0
[   51.301033][ T4050]  ext4_file_write_iter+0x383/0xf00
[   51.306259][ T4050]  iter_file_splice_write+0x5f2/0x970
[   51.311647][ T4050]  direct_splice_actor+0x156/0x2a0
[   51.316806][ T4050]  splice_direct_to_actor+0x312/0x680
[   51.322198][ T4050]  do_splice_direct+0xda/0x150
[   51.327012][ T4050]  do_sendfile+0x380/0x650
[   51.331438][ T4050]  __x64_sys_sendfile64+0x105/0x150
[   51.336672][ T4050]  x64_sys_call+0x2bb0/0x2ff0
[   51.341403][ T4050]  do_syscall_64+0xd2/0x200
[   51.345959][ T4050]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   51.351867][ T4050] 
[   51.354207][ T4050] read to 0xffff888106e7d3ec of 4 bytes by task 4050 on cpu 1:
[   51.361762][ T4050]  __writeback_single_inode+0x1f9/0x7c0
[   51.367332][ T4050]  writeback_single_inode+0x167/0x3e0
[   51.372718][ T4050]  sync_inode_metadata+0x5b/0x90
[   51.377716][ T4050]  generic_buffers_fsync_noflush+0xd9/0x120
[   51.383615][ T4050]  ext4_sync_file+0x1ab/0x690
[   51.388309][ T4050]  vfs_fsync_range+0x10a/0x130
[   51.393077][ T4050]  ext4_buffered_write_iter+0x34f/0x3c0
[   51.398660][ T4050]  ext4_file_write_iter+0x383/0xf00
[   51.403907][ T4050]  iter_file_splice_write+0x5f2/0x970
[   51.409308][ T4050]  direct_splice_actor+0x156/0x2a0
[   51.414431][ T4050]  splice_direct_to_actor+0x312/0x680
[   51.419849][ T4050]  do_splice_direct+0xda/0x150
[   51.424648][ T4050]  do_sendfile+0x380/0x650
[   51.429087][ T4050]  __x64_sys_sendfile64+0x105/0x150
[   51.434296][ T4050]  x64_sys_call+0x2bb0/0x2ff0
[   51.438986][ T4050]  do_syscall_64+0xd2/0x200
[   51.443498][ T4050]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   51.449398][ T4050] 
[   51.451712][ T4050] value changed: 0x0a000021 -> 0x04000021
[   51.457418][ T4050] 
[   51.459738][ T4050] Reported by Kernel Concurrency Sanitizer on:
[   51.465911][ T4050] CPU: 1 UID: 0 PID: 4050 Comm: syz.4.113 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(voluntary) 
[   51.477898][ T4050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   51.487953][ T4050] ==================================================================
[   51.665159][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.846311][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.519949][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.