last executing test programs:

7m7.334410015s ago: executing program 3 (id=242):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd13, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000780)='mm_page_free\x00', r1, 0x0, 0x8}, 0x18)
r2 = syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x3000006, &(0x7f0000000040)={[{@discard}, {@abort}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@usrjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@nobh}, {}, {@orlov}, {@user_xattr}, {@init_itable_val={'init_itable', 0x3d, 0x400}}]}, 0x1, 0x556, &(0x7f0000001100)="$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")
r3 = socket$pppoe(0x18, 0x1, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r4, 0x4004f506, &(0x7f00000004c0)=0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10)
chroot(&(0x7f0000000540)='./file1\x00')
fcntl$setstatus(r5, 0x4, 0x6000)
io_setup(0x200, &(0x7f0000000140)=<r7=>0x0)
io_submit(r7, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r5, &(0x7f0000000000), 0x77000, 0xfff0}])
sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="7ccb357a68f7b74ff8db687e2893dd835c78659e77271a7fff225284c2ddbf6008a77badc192e8e98e3b921a757495c11891a9e4601f5aceb3c4a1937184dfb62c91662a625ef19ed135be4389bc816487f55b8b4e7b5fe42c07ce940d70dbcbfe24e9e4b8489809141b481928503ea0b476f198", @ANYRES16=0x0, @ANYBLOB="00012dbd7000fedbdf254c00000008000300030000000c00a600f9ffffffffffffff0c00a60000040000000000000c00a7000300000000000000080001007063690011000200303030303a30303a31302e30000000000c00a7000200000000000000", @ANYRES16=r2, @ANYRESHEX=r6], 0x68}}, 0x800)
connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast, 'macvlan1\x00'}}, 0x1e)
write$binfmt_aout(r3, &(0x7f0000001640)=ANY=[], 0x5ea)
mmap(&(0x7f0000df1000/0x2000)=nil, 0x2000, 0x2000001, 0x31, r2, 0x0)
r8 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x0, 0x3)

7m6.893890137s ago: executing program 3 (id=248):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095", @ANYRESOCT, @ANYRES8, @ANYBLOB="f09935d45b461fc559c719578dee14a7140036f10dd1ebfdf098dacb6197dc0e3c8f5ee397a9aac7b5b22ba577177ec28566edb2a94f683249bec20ada163488458e46d84f3fabbc7c8587a9af8ab7b93d15d63086baf3cdbf29f5e7fabf8a6f46e91eb64c274b2b3c2d9e5bac8082f4be8729e0ee5abe2e86138d70710e6c67381ba67800a2b2496681fbf92a3eb1acc7e54b5da675397abcd06a5a945a1cf56d428e58ebbc30af4e5daa9cf1c636225534ebabdd4be86efb3a45189a12c16e8a2f9e0fb90f56027faa3608f0b93439c229"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x49, &(0x7f0000000040)=0x2, 0x4)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fb0800", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x40}}}}}}}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10)
r4 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x18a}, 0x401a, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000000)='cpu~=0||!')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
connect$l2tp6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x100, @empty, 0x5, 0x2}, 0x20)
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfff3}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x40}}}]}}]}, 0x45c}}, 0x0)

7m6.872034407s ago: executing program 4 (id=249):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa62e, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00', r0}, 0x10)
setpriority(0x2, 0xff, 0x0)
io_submit(0x0, 0x0, &(0x7f0000000d40))
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAPCLR(r1, 0x4b68, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x60}}, 0x0)
connect$vsock_stream(r2, &(0x7f0000000040), 0x10)
syz_mount_image$ext4(&(0x7f0000001140)='ext3\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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")
r4 = socket$inet6(0xa, 0x2, 0x3a)
bind$inet6(r4, &(0x7f0000000400)={0xa, 0x4e23, 0x80, @empty}, 0x1c)
r5 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00')
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="1b001f00000700000000000000000013af55c5886c0ac620eaf09d27dce0f4019a85f97dcdaffa", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61b67ddb2fb68fcf19f7807076430a00010071756f7461"], 0xc8}}, 0x0)
read$msr(r5, &(0x7f00000004c0)=""/4096, 0x1000)
prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\\x00')
gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001580)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022dbd7000fbdbdf25010000000000000007410000004c001800001f9d05715b916e1ae6e9b9736996a4000565746800"/113], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x8810)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x0)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f00000002c0)={0x0, 'veth0\x00', {0x2}, 0x3})
futex(&(0x7f000000cffc), 0x0, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)

7m6.774664348s ago: executing program 3 (id=251):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = open(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f0000010000"], 0x48)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x1}})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fd00000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10)
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000080)={[{@nolazytime}, {}]}, 0x6, 0x4eb, &(0x7f0000000a40)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
getpeername$packet(r1, &(0x7f0000000040), &(0x7f0000000180)=0x14)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000040c0)={0x200000, 0x200000, 0x1000, 0x200000})
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r8, 0x4b4a, &(0x7f0000000440)=""/252)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000680)=ANY=[@ANYBLOB="000100000100"], 0x10)
syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)

7m5.782763543s ago: executing program 3 (id=252):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x101)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400)
ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x2000000c)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f00000001c0), 0x74)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r4 = open(0x0, 0x181042, 0x0)
write$P9_RREADDIR(r4, 0x0, 0x0)
sendfile(r4, r4, 0x0, 0x7f03)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0xd0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', <r6=>0x0})
getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000700)={@private0, 0x47, r6})
preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000080)=""/3, 0x3}, {&(0x7f0000000300)=""/230, 0xe6}, {&(0x7f0000000400)=""/16, 0x10}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000000440)=""/30, 0x1e}, {&(0x7f0000000540)=""/231, 0xe7}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/141, 0x8d}, {&(0x7f0000000900)=""/134, 0x86}, {&(0x7f0000000480)=""/93, 0x5d}], 0xa, 0xff, 0x6)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001280)={&(0x7f0000000500)='percpu_free_percpu\x00', r7}, 0x10)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

7m5.744264293s ago: executing program 4 (id=253):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

7m5.575521654s ago: executing program 4 (id=254):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xae)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket(0x1e, 0x805, 0x0)
connect$tipc(r1, &(0x7f0000000000)=@id={0x1e, 0x3, 0x1}, 0x10)
close(r1)

7m5.204025686s ago: executing program 4 (id=256):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140))
write$ppp(r1, &(0x7f0000000380)="03f4", 0x2)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000280), &(0x7f0000000080)=r3}, 0x20)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x42008}, 0xc, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB='\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x248}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r6}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

7m4.622460138s ago: executing program 4 (id=262):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x19)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x2000480, &(0x7f00000002c0), 0x1, 0x78e, &(0x7f0000001480)="$eJzs3c1rHOUfAPDvbJKmSfv7JYKg9RQQNFC6MTW2Ch4qHkSwUNCz7bLZhppNtmQ3pQkBW0QQQVDxIOilZ1/qzasvV/0vPEhL1bRY8SCR2eym22Y33bTZ3WA+H5js88zM5nm++8w888zOsBPAnjWW/slEHIqID5OIkdr8JCIGqqn+iBPr691eXcmnUxJra6//nlTXubW6ko+G96QO1DKPR8QP70Yczmwut7y0PJsrFgsLtfxEZe78RHlp+ci5udxMYaYwf2xyauro8eeOH9u5WP/8efng9Y9eefrrE3+/89jVD35M4kQcrC1rjGOnjMVY7TMZSD/Cu7y804X1WNLrCvBA0l2zb30vj0MxEn3VVAtD3awZANApb0fEGgCwxySO/wCwx9S/B7i1upKvT739RqK7brwUEfvX469f31xf0l+7Zre/eh10+FZy15WRJCJGd6D8sYj4/Ns3v0yn6NB1SIBmLl2OiDOjY5v7/2TTPQvb9cxWC9cGqy9j98y+b//3/kNWCtjwXTr+eb7Z+C+zMf6JJuOfwSb77oO4//6fubYDxbSUjv9ebLi37XZD/DWjfbXc/6pjvoHk7LliIe3b/h8R4zEwmOYnq6s2vwtq/OY/N1uV3zj+++Pjt75Iy09f76yRudY/ePd7pnOV3MPGXXfjcsQT/c3iTzbaP2kx/j3VZhmvvvDeZ62WpfGn8danzfF31tqViKeatv+dtky2vD9xoro5TNQ3iia++eXT4VblN7Z/OqXl188FuiFt/+Gt4x9NGu/XLG+/jJ+ujHzfatn942++/e9L3qim99XmXcxVKguTEfuS1zbPP3rnvfV8ff00/vEnm+//W23/6TnhmTbj77/+21cPHn9npfFPb6v9t5+4enu2r1X57bX/VDU1XpvTTv/XbgUf5rMDAAAAAAAAAAAAAAAAAAAAAAAAgHZlIuJgJJnsRjqTyWbXn+H9aAxniqVy5fDZ0uL8dFSflT0aA5n6T12ONPwe6mTt9/Dr+aP35J+NiEci4pPBoWo+my8Vp3sdPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADUHGjx/P/Ur4O9rh0A0DH7W8zv63I9AIDuaXX8BwD+u7Z3/B/qWD0AgO5x/g8Ae0/bx/8zna0HANA9zv8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADosFMnT6bT2l+rK/k0P31haXG2dOHIdKE8m51bzGfzpYXz2ZlSaaZYyOZLcy3/0aX1l2KpdH4q5hcvTlQK5cpEeWn59Fxpcb5y+txcbqZwujDQtcgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoH3lpeXZXLFYWJDYMjG0O6qxaxL9sSuqIdGxRGMvMdS7DgoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgl/s3AAD//4fPK2Y=")
r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f00000006c0)={[{@grpjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000000000000001}}, {@nobh}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xff4d, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15)
r3 = fsopen(&(0x7f0000000280)='securityfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x8, 0x0, 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

7m4.597621308s ago: executing program 3 (id=263):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000008d00"/29], 0x50)
pread64(0xffffffffffffffff, &(0x7f0000000080)=""/237, 0xed, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x24)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$key(0xf, 0x3, 0x2)
clock_gettime(0x0, &(0x7f00000002c0)={<r4=>0x0, <r5=>0x0})
rt_sigtimedwait(&(0x7f0000000240)={[0x200]}, 0x0, &(0x7f0000000300)={r4, r5+10000000}, 0x8)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000340))
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a00"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r7=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0xffc3, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, r7}}, 0x48)

7m4.30876023s ago: executing program 4 (id=269):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', <r3=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @local}, 0x10)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000240)={r3, 0x1, 0x6, @broadcast}, 0x10)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10)
bind$tipc(r0, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$selinux_user(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$selinux_user(r7, 0x0, 0x0)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r9}, 0x10)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x16, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}}, 0x0)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000380)="fe", 0x1}], 0x1)

7m3.383699085s ago: executing program 3 (id=272):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140))
write$ppp(r1, &(0x7f0000000380)="03f4", 0x2)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000280), &(0x7f0000000080)=r3}, 0x20)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x42008}, 0xc, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB='\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x248}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r6}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

6m10.550140985s ago: executing program 32 (id=268):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa62e, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00', r0}, 0x10)
setpriority(0x2, 0xff, 0x0)
io_submit(0x0, 0x0, &(0x7f0000000d40))
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAPCLR(r1, 0x4b68, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x60}}, 0x0)
connect$vsock_stream(r2, &(0x7f0000000040), 0x10)
syz_mount_image$ext4(&(0x7f0000001140)='ext3\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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")
r4 = socket$inet6(0xa, 0x2, 0x3a)
bind$inet6(r4, &(0x7f0000000400)={0xa, 0x4e23, 0x80, @empty}, 0x1c)
r5 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00')
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="1b001f00000700000000000000000013af55c5886c0ac620eaf09d27dce0f4019a85f97dcdaffa", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61b67ddb2fb68fcf19f7807076430a00010071756f7461"], 0xc8}}, 0x0)
read$msr(r5, &(0x7f00000004c0)=""/4096, 0x1000)
prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\\x00')
gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001580)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022dbd7000fbdbdf25010000000000000007410000004c001800001f9d05715b916e1ae6e9b9736996a4000565746800"/113], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x8810)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x0)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f00000002c0)={0x0, 'veth0\x00', {0x2}, 0x3})
futex(&(0x7f000000cffc), 0x0, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)

6m8.163485567s ago: executing program 33 (id=271):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x2000480, &(0x7f00000002c0), 0x1, 0x78e, &(0x7f0000001480)="$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")
r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f00000006c0)={[{@grpjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000000000000001}}, {@nobh}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$sock(r3, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)='$', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000840)='\n', 0x1}], 0x1}}], 0x2, 0x40000)
shutdown(r3, 0x1)

6m8.133523297s ago: executing program 34 (id=270):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0)

6m7.740389389s ago: executing program 35 (id=272):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140))
write$ppp(r1, &(0x7f0000000380)="03f4", 0x2)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000280), &(0x7f0000000080)=r3}, 0x20)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x42008}, 0xc, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB='\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x248}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r6}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

6m7.63199755s ago: executing program 36 (id=269):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', <r3=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @local}, 0x10)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000240)={r3, 0x1, 0x6, @broadcast}, 0x10)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10)
bind$tipc(r0, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$selinux_user(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$selinux_user(r7, 0x0, 0x0)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r9}, 0x10)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x16, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}}, 0x0)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000380)="fe", 0x1}], 0x1)

5m49.412280869s ago: executing program 6 (id=304):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000440)='rpcgss_seqno\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18)
unshare(0x60400)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
read(r3, &(0x7f0000000040)=""/148, 0xffffff96)
r4 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r4, 0x200000000114, 0x271b, &(0x7f0000000580)=""/102385, &(0x7f0000000000)=0x18ff1)

5m49.093266971s ago: executing program 6 (id=311):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x101)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400)
ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x2000000c)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f00000001c0), 0x74)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$l2tp6(0xa, 0x2, 0x73)
preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000080)=""/3, 0x3}, {0x0}, {&(0x7f0000000400)=""/16, 0x10}, {0x0}, {&(0x7f0000000440)=""/30, 0x1e}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/141, 0x8d}, {0x0}], 0x8, 0xff, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

5m48.861080883s ago: executing program 6 (id=317):
r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
pipe2$9p(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r4 = dup(r3)
write$UHID_INPUT(r4, &(0x7f00000010c0)={0xc, {"a2e3ad21ed0d52f91b5d390987f70e06d038e7ff7fc6e5539b3247298b089b0708356d090890e0878f0e1ac6e7049b3350959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b31070d074b0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @rand_addr, @multicast2}, &(0x7f0000000180)=0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x81, 0x0, 0x3, 0x2a08, r4, 0x2, '\x00', 0x0, r0, 0x5, 0x5, 0x2, 0x3, @void, @value, @void, @value}, 0xfffffffffffffec8)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
ioctl$EVIOCGID(r4, 0x80084502, &(0x7f0000000580)=""/265)
r5 = dup(r2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x66}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x110d0)
write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r5])

5m48.735804013s ago: executing program 6 (id=321):
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x418484, &(0x7f0000000440), 0x1, 0x775, &(0x7f0000001180)="$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")
creat(&(0x7f0000000100)='./bus\x00', 0x0)
open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x18)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x21081a, &(0x7f0000000300), 0x1, 0x507, &(0x7f0000000c00)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x851800, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18)
r3 = io_uring_setup(0x60f7, &(0x7f0000000a40)={0x0, 0x0, 0x40, 0x0, 0x3bd})
r4 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24)
listen(r4, 0x4)
recvmmsg(r4, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
close_range(r3, r4, 0x0)

5m48.068223506s ago: executing program 6 (id=324):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
wait4(0x0, 0x0, 0x40000000, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
openat$bsg(0xffffffffffffff9c, 0x0, 0x700c0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2}, 0x10)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)

5m47.829879647s ago: executing program 6 (id=328):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x44d, &(0x7f0000000340)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0)
clock_adjtime(0xffffffd3, &(0x7f0000000440)={0x6, 0x0, 0x8c1f, 0x0, 0x0, 0x0, 0x651, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa, 0x0, 0xcc3, 0xfffffffffffffffc})
sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x8080}, 0x20000070)
socketpair(0x1, 0x1, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000040)}, 0x20)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x24, 0xe, &(0x7f00000008c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00'})
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b000000", @ANYRES32=r3], 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f00000000c0)={0x1, 'veth0\x00', {}, 0x7})
r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x141341)
ioctl$USBDEVFS_IOCTL(r6, 0xc00c5512, &(0x7f0000000200))
ioctl$USBDEVFS_BULK(r6, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x10, 0x0})
sendmsg$nl_route(r4, 0x0, 0x4000080)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000640)={0x0, 0x7, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011005704000000000000000010000000", @ANYRES32], 0x20}}, 0x0)

5m47.771520697s ago: executing program 37 (id=328):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x44d, &(0x7f0000000340)="$eJzs281vFGUYAPBnZrvFWrAV8Qv8qKKx8aOlgMrBgxpNPGBiogc9Nm0hyAKG1kQIiWAMnowx8W48+i940osxnky86t2QENOL4GnN7M60u8vu0pbdLrK/XzLwvPPR93125t19Z97dAIbWVPZPErEzIv6IiIl6sXmHqfp/11YvLFxfvbCQRLX67t9Jbb9/Vi8sFLsWx43nhek0Iv08iX1t6l0+d/7kfKWydDYvz66c+mh2+dz5F06cmj++dHzp9MEjRw4fmnv5pYMv9iTP8Ujz6K0Pvn776JdN+bfk0SNT3TY+Xa32uLrB2tUQJyMDbAibUoqI7HSVa/1/IkqxfvIm4s3PBto4oK+q1Wp1vPPmi1XgDpZEc1mXh2FRfNBn97/F0joIeLV/w4+Bu/pa/QYoy/tavtS3jKw9MSi33N/20lREvH/x32+zJfrzHAIAoMmP2fjn+Wy00zr+S+OBhv3uyeeGJiPi3ojYHRH3xenYExH3R9T2fTAiHtpk/a2TJDeOf9IrW0psg7Lx3yv53Fbz+K8Y/cVkKS/tquVfTo6dqCwdyF+T6SjvyMpzXer46Y3fv+q0rXH8ly1Z/cVYMG/HlZEdzccszq/M30rOja5eitg70i7/ZG0mIImIhyNi7xbrOPHs94902nbz/LvowTxT9buIZ+rn/2K05F9Ius9Pzt4VlaUDs8VVcaNff7v8Tqf6byn/HsjO/91tr/+1/CeTxvna5c3XcfnPLzre02z1+h9N3qvFo/m6T+ZXVs7ORYwmR+uNblx/cP3Yolzsn+U/vb99/98d66/EvojILuJHI+KxiHg8b/sTEfFkROzvkv8vrz/1Yeu6sQ3n319Z/oubOv/rwWi0rmkflE7+/ENTpZPrYZ7/9e7n/3Atms7XbOT9byPt2trVDAAAAP8/aUTsjCSdWYvTdGam/h3+PRFp5czyynPHznx8erH+G4HJKKfFk66Jhuehc/ltfb18KSLqXy0oth/Knxt/UxqrlWcWzlQWB508DLnxDv0/81dp0K0D+s7vtWB46f8wvPR/GF6b6/87+tYOYPu16f9jg2gHsP3aff5/OoB2ANuvpf+b9oMh4vkfDC/9H4aX/g9DaXksbv4j+a5B8Ze2ePgdG0T5tmhG34JIb4tmCPoUDPZ9CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoFf+CwAA//9kXt09")
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0)
clock_adjtime(0xffffffd3, &(0x7f0000000440)={0x6, 0x0, 0x8c1f, 0x0, 0x0, 0x0, 0x651, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa, 0x0, 0xcc3, 0xfffffffffffffffc})
sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x8080}, 0x20000070)
socketpair(0x1, 0x1, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000040)}, 0x20)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x24, 0xe, &(0x7f00000008c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00'})
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b000000", @ANYRES32=r3], 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f00000000c0)={0x1, 'veth0\x00', {}, 0x7})
r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x141341)
ioctl$USBDEVFS_IOCTL(r6, 0xc00c5512, &(0x7f0000000200))
ioctl$USBDEVFS_BULK(r6, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x10, 0x0})
sendmsg$nl_route(r4, 0x0, 0x4000080)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000640)={0x0, 0x7, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011005704000000000000000010000000", @ANYRES32], 0x20}}, 0x0)

4m37.768922004s ago: executing program 0 (id=1416):
r0 = socket$inet6(0xa, 0x3, 0x2)
setsockopt$inet6_buf(r0, 0x29, 0x7, &(0x7f00000001c0)="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", 0x118)
r1 = accept(r0, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x80)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0xf0b, 0x8000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x5, 0x11}}}}]}, 0x4c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=@deltfilter={0x1654, 0x2d, 0x20, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x8, 0x5}, {0xffe0, 0x5}, {0x0, 0x9}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x15bc, 0x2, [@TCA_CGROUP_POLICE={0x44c, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x80000000, 0x4, 0x2, 0xe, 0x7f, {0x1, 0x2, 0x4, 0x7, 0x80, 0x80000001}, {0x7, 0x0, 0xdbcc, 0xffff, 0xfb4, 0x5}, 0xfffffff7, 0x3ff, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x2000, 0x0, 0x8, 0xd181, 0xfb, 0x1, 0x3, 0x7913, 0x401, 0xb, 0xfa5, 0x7, 0xfffffffc, 0x1, 0x2, 0x800, 0x6, 0xc, 0x2, 0x6, 0x3, 0x4, 0x3, 0x7, 0x90f, 0x9, 0x6, 0x6, 0x1, 0x5, 0x2, 0x4, 0x88f92100, 0x5, 0x80, 0x5, 0xeab, 0x200, 0x9, 0xe83, 0x28, 0x2, 0x6, 0x4, 0x40, 0x10001, 0x10005, 0x10001, 0x6, 0x19a0c4fb, 0x0, 0x5, 0x8000, 0x2, 0x3, 0x7ff, 0x10, 0x8001, 0x9, 0x4, 0x9, 0x2, 0x1, 0x0, 0xd, 0xe, 0x3, 0x7, 0x5, 0xc4, 0x2, 0xe, 0x4c3323b8, 0x8, 0x200, 0x7, 0xd7, 0x5, 0x3ff, 0x14, 0x3, 0x8, 0xff, 0xfffffffe, 0x0, 0x4, 0x400, 0x203, 0x8, 0x8f2, 0x5, 0x8, 0xffffffff, 0x4, 0x6, 0x4ada1259, 0xe42a, 0x5, 0x8, 0x3, 0x200, 0x9, 0xabe, 0x7, 0x3, 0x9, 0x5, 0x4, 0x4, 0x10000, 0x7, 0x4, 0x10, 0x3ff, 0x6, 0xfffff006, 0xb31, 0x0, 0x8, 0x800, 0x369, 0x200, 0x1, 0x9, 0x4, 0x3, 0x4, 0xfffffff9, 0xa, 0xee, 0x8, 0xffffffff, 0xfff, 0xab, 0x1, 0xffff, 0x7, 0x1, 0x8, 0x1, 0xff5, 0x401, 0x10, 0x5, 0x8b50, 0x1, 0xce8, 0x6, 0x2, 0x20000, 0x6ba, 0xb8, 0x80000001, 0x6, 0xfffffffe, 0x3fd0, 0x8, 0xe7e, 0x4, 0x8913, 0x4, 0x7, 0x2, 0x2, 0x0, 0x3e4, 0x192, 0xae9, 0x0, 0x1000, 0x46, 0x0, 0x5, 0xe4, 0x5, 0x3, 0x7, 0x5, 0xe, 0x9, 0x9, 0xc14, 0x3, 0xb, 0x2, 0x9, 0x9, 0x801, 0x6, 0x4f, 0x7, 0x4, 0x7fffffff, 0x9, 0x6, 0x4b, 0x5, 0x7, 0x6, 0x5, 0x8, 0x2, 0xf28, 0x7, 0x4, 0x6, 0x4, 0xffffffff, 0xa, 0xf2, 0x1, 0x3, 0x6, 0x0, 0x4, 0xfffffffe, 0x5, 0xfffff001, 0xff, 0x7, 0x4, 0x4, 0x1, 0x8, 0xffffff9d, 0x7fff, 0x48000, 0x7, 0x0, 0x2, 0x1, 0x5, 0x6, 0x2, 0x4, 0x1ff, 0xe, 0x3, 0x10, 0xdd17, 0x7, 0x0, 0x2, 0x10000, 0xfffffc01, 0x125, 0x9, 0x3, 0x7, 0x400, 0x8, 0x7, 0x4, 0x1, 0xff]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x86}]}, @TCA_CGROUP_EMATCHES={0xbc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x46, 0x7, 0x2}, {{0x0, 0x0, 0x0, 0x1}, {0x2}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x2, 0x7, 0x80}, {{0x0, 0x1, 0x0, 0x1}, {0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x0, 0x7, 0x2c0}, {{0x0, 0x0, 0x1}, {0x2, 0x1, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x74, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x70, 0x1, 0x0, 0x0, {{0x866, 0x0, 0x5122}, "c86ab368f367dff14a0ea8439023d4ed6bfaf185db56779152599dffa97257d4b6c651bffb81ca2b3466737d2a0d387e19c1897ac5e8a87aa258005f6db975011cce03d60fe7d2ecd81f0af6db4356bb06ef77c1d44376bbcca24a35a4683f5b65"}}]}]}, @TCA_CGROUP_EMATCHES={0x10b0, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1044, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x4, 0x1, 0x789}, {0x5, 0x9, 0x7, 0x0, 0x9, 0x1}}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x67, 0x2, 0x3}, {0x7, 0xa, 0x1, "c9372f665be3bc82cc7e"}}}, @TCF_EM_CONTAINER={0x100c, 0x3, 0x0, 0x0, {{0x9, 0x0, 0x38}, "d1601de58b6e2cf23dfef9a5f69d6ee617d8e6b4663e510c3f53b57fb998436e4bee1ee1a69259e97db45db90a18530457535c0f5aa331f063a74c400a24b6cc9808773fb3007d41883099b5f037580f0c78291c8b30b292971ca249ae1fef07c8b4ec7c234be2af80cdadc530dd9c85847b4d09ef78ace1f522d262161b20c6ad6fde967e1e0162108316eccbb462d4bf9fd847cb992d77a1545cd9e9c83f7ac436e07ccd1791da456e071afdcdf29552ff5d5c40ceda69f68164186211e3d9d4e2091972b64859b41322799e832136f5f1fd7028d51776ca4c253fbcab5e60fb10e596d9875688bec4d4d081086dec74f9310c178a3b68b636052b56d026d17683088438ce3c1602567cee1d19b8976ca6804d7456d86bcc66f7fbf44f39cd5306169dfc499dee5767b523d2699bb301584c62463419896d3680a5533c2865dd3daa1a38661073ee61b32fd8da799768a6935462f282b59466e9835254a250d749f87aaaf7e72d93ec9bbd44ff3a896abaa62cc546c2349709910f8e9b910479eb5a3e54fe20f07118f7c0ce110ca6a203e66fe8d8bc010b82daeaa2910622d04069037b310daaa2af8cdbf2ab51ba40acde5a1e2618f148ffe40937cbd1c9a439d249355fd8d14439d81f1e5189a5ae1858c5e515017dfe1d527edf85819d706a150926e6f5bc087e254ff71f0f1bf8b3cdac43ad8507de15a62c252b737b5af352d06172b60bd72dac3db13d7db384bc00e743d0ca7fa20775f72a27e2af1f9f3ea8d2fc0604613050aa5bf7146fc42e4ff4fa8d6e2b1cd9e9888f644965ea30bea84602b7e6075620e5c58418f3dfb058447c2b9b6bc46fc33b30f6094af8868b1ec38fe5bfb38d0bdf21c03bba28bdfe5eb8fc042680496b5456876e8577899c4dbf1e303fe9f5c39b27e2a0e858d5fbb4e285ef8498be5902e484dda5ae1a429a6f661a4532a538cb22fba1129af95df4342dc3a5c744f83bfbe2b21a6f2d2902a600d598bef6c515e7d3515544f243c2c2e240cdf3169cef3b3f1836148caed7e4e777110114091e33425a413c48b1e0a3535d971165570f173799d351d92f9ac4d588cb76e62fa3f917c0c57bb84f929f3cdcad8d3c450e4e941752958ed5739e8b297e92c481137a4b5dd8a01d0f667eea73d051866f0d55ba570f80aac4297c51152df0f0aa6a91fc50bd5e1c3cd633816b6d1c0c8277b5eb558f77e7349013b8419ec1415ee055e88d75f178d400749bfab126ab88002e5b8e8ec03e5afaa856ea5b8e366d3ebef13a70dec4ece281d9a89d76699a16d74f487d2503ef331bf2f9dde54bed31dc5e1c464b426ea58cf21baeab1b298a20c54b785b937308eb1b5a579162023d3b356b1dd41559ee4968356da24f0553b178d8ca409e3197c0e2d3b2e6ead76a0148e5ba39fbfc97afa0e88394dcffacaf39642a82a54c2d11b0feff479e414abb69f2da8030334ec1dcc6d1ca5bef666fcae165ff4d0185f2770d20e6665c6460d839c66aee53bb88a009279be5436099fce8cd42b627354d74a67c4f77d6672c65d550c34d5708d70258f442971ccf950477abb0b1ed9e49e98d439ac94a33b5329fd94c77cf7760dd37e4a5363888073897ad152f21a7fd7aa05be17755e4f743cb53bd103355881682063577bffca3085625a09d6d33e539bfaff4974e5f9af043272d7d486b5fb65ebd4ca9861d28e5a915cdd760323471b2cf3bb7fa4b4b5b7f74365af22c04ef41dba1fdb758c5a9bbe3a67062190d79a81e6265ea2c355160319f3b53141caf676b703fecbbefdeed94d57c956cfdcae51a29cca721a8514bff24e09a805ad555c5443fd93c2c6e836107a933da4f967584c78f71d63ac01f2557420fc36833450037835597a3780e4e5319c537a3ffb20a3ca50376a3f33d2516f496ca89ab0bb8e1a787ee9fc6382729f3e81cde5fcdcfda723a15e756caf26300448cdb25961b7fe0d899c8cd84346821eb6e038a5ccaa8264ab3d4651038cb24969f91704bf1e25184ab9e4f534bfd8139afa69e4473f7dfe150f8f3c5b542dd73a0b551a6dcbc760e034bf080ba0f620d5b24a1541ffeaa89dc06b65b9a8ea2d7d5cd2f23d87ac3b729a6daea3fb290549a83ef4bd0110e3c7649ff1a99a89253e4f2b5171f88fc7cc27c7dcf86348f6f6e06168d4db75e70c81a0b2539d64421225e197890365257c7e6f3c9a79298e8869cb52de728467c1472988b587661977d42850417d4cde3224f128a60c488dad0a63be52beb0eee56e0883347494fb175d88b8346e63b52b3af071ec0cb6321a87a87aa525623f1425791a0b8575d41a9f9a431972acad8a9e0c8bbca4064863604e9467d81dc4438710293ef23bcdd730e0db2f8b0ec87e3afbd3253eef25ae31338ec9b69b8b9b110739f1698558a10b1fe92860a13af77556f9f7667307cbc8a429441a506aac436eac9cc32dfda6e395c85fa56373390149d6370caaf49d4506e8a0550cfa7af6c712da750e5e5ddb105f68047d10adf7ea025ba3615c5391db2650cb6d65c17b3c0a5fc047cfbcf2565d3daf63d7c98adc320f3113776569410e8b448319da2236667ff0184c5ed76de90cee5e09e41be2e7b32c9d97aa5f6eba3677dbffa1974b0442a9c179cf77f0da6566ad7cadd35cd1d08c3dfbbaf40bda6ac138e5cfa04fb0743a065e47c7dd04def922f601eb0dbf2a7618b3791406e29f8279ba0136a00ee130c4f28ee6949e97d01d774e7b17f50e609e8f48073c018ee9eb4622ad7ede2494785bce38e1ff0ce42f0a65878489ac809817168707ecd6df8452996cd1f620277abbc57e2215e14217d9f7391bb1f32ee1e4edef995272e21a1ea07f524d52e94614fda459b606d56d57b46febfbc2b298a948c7bf578ed60292102d344556898aab67b8ac48e2183c5daa807347bb55f12d71f707a85d2847f1a824f095eae95e80c4485b8e96278ff5a447c0da61a90561f48dcc1aea2dc2256e841d8c724c51dbe6d5a0e0b2c64f9827697433678b90c86a30d0d5a5eb4db9fe4e85b07f44ce5021ac8b94edcff6a5643edcea39adc89ec8031abb875360f44d2b63c346909f9087a164586fec60bbef026f460b29be71fce294f75d58cef2d5470e5c69a35bb5ecc0bf707ff29f0681232f5adadad692d376a397146f23332fee91801f2264b2b6a0da116f837d1ee0a5f89e9a367fee2c140289fdff065b6107524aa43eecb915cebab8ed71aa88499c42878c421ef4462123236c9260f868bb99dd65580b39b468b0e7b82010fa0777272bbbd98156740bd1e0534282d891093d101ae943980117cf574db09b80f2e1fb279295edebd5cb210bd3a3220aec7b5aab5f6ff7634d04dd242f673e602d4886793fe3a8b56dc1fc01ac203c01136373c403af5b5dbab08e1e7509c30744da8094e182bc23c962ab16d960d9d0c79aa55cea41fa176635ec2799d55d4510300326ffd43839ffe66baac03bdc02432a06a1ffdca38de9fdcd0a5e0ac57cc63228eee8a7af16a9e8ab2a31a8d86ea6d0e39394e1392e5ab07b82904765251e3dadcc0637d5ddc6cd9369a3e94d8e5590a4d9cf6f28fec4c0b2aa6a0b6644d6890c60ab42ce34b051d03992c8c7cd35b87a772c049ddd2d381030179bacd68ffd45466dfd7f21b0bc5587b74c72ba56e97d5753269556d49621c3326b2c8a01bcbb303efcce21779a6a423957cf4bf0553f5e10e8aadb803f8127e140fae66ad8771d5de819402b0c5c6c0a21f95e9d619decf2ca9f006e1a0aee19d88dd69186ab2f29f4dccd54b258eb36cd0b6b2c35707b8e3013806c24e1413e59668e1898650705ffb3ee952250d6555c0acbd93dbc856341b01f1fa0d71e610fd3f36bb76d6e3d90951dcebad372f5abc4c3cb5be29823a707c0b3358d98ea385e3cad83bb1d415d700121656bf2e5f13bb2508200f45c95c85d7f2b15f34604952c80b4e6b0038dd125e169c80ff328fe4b9be4d566040708aaf57fc2502c21cf48f06513554202976143d0df34af3adeccc5117d5468d2b025c28addb51b345b63505f78178dc304c16ad7101fb238c68d9163f76f6f2bb5e3f0225347b3d3e018e842ecbb902fdcf0fcb362fdca42496391f4b5dc756911cdb8dbe4149c1b1c00d5b48d49c68411031c400a5e20acb12eefde96b6086d9cddd51409a69bd24dfe4d276d03116c2bf95b9d20c4e4606452f97333b4770d52f0e37256703d83cc28146fa6fc790c071dd10ba2833e9d10e756ef8b611d88ee4fce5cd9488cb8a309ae4bf0d42adfdac1336e4c5709b41925d742e0a56f3b64d6371d9cf5d843465be263a8f0d884dfc843ead5d62f1216e8568766d68cb71bbb23ae74261ac895c48dc4c3ce1db31da293a09a0408f4906619d408a8368b20f211cf536f8c045ffd0a72ed838c4ea076e355f481ae58b2a0f3f5294776b6b1d9821d817a1b288dad169dd4a2b22d506635d06be6008ba125d152ba08c03e0d0a291ce37a996718c950e74b13d9e48ad28a0e63ab511ed572ea430be0705bdae5993e033cb94d36c2dbab0ed5b2d69f04784f56430e6b2e4e537c858dfbbc37bc28dcc50205ef46cf2b709081ac804d7dfd4fee60a226e25989a24ca9b7081c6537dbf9cc6bbc63a27e020ea565ea4632f2273810058813df4f1ec77f043e6046e624bf8ab0604231be4c49e695131a0a0887e3e251d30f1f89aef91c4288a3ef691af936e60315729fb3f5947721c4da75f72169c1df8c5110605cf7652573d0e81139744c57313de9d4e149f5b68c42578db23950b7c6b07f0b673a29549c2fa209594a9633854365eab53cd557eca3435a2d84a309741981fc03e8b9bad855e608208817cfc4918af4a80c0b579f40daf85182a56833edeade3bb3f68a1a5d5d57b37edfbc8225c2625a99a3851d35ccb94dc5658fdac836d31a6e0168ba9f36cb971a26ee840681303815add8ad346f8bda8f544f42e8c3d14d05eabe4df649e1648a8bbe37b81e16fc032dc81b28b5322a1a691cdb538114b81712f2c82b570bddd3e2538650f6ac11d8db3027bbe416e993fb14c33ba4e200b0e3e813fd8c6f0811761dfb137f309b622849a674fb0b9e37c3f6fa6c622b25131d556193274f4fae1264d92aad013487d74fe6b73f34783338557d0870ca7a50756a9cc36ff4739a7c9713a914280c3fcef91cd00a77ef886cad1bdbcaccb131e3e1130051b770385d48ddf1de55ba219bd76d6bf6701c398ca835de75839cee972c49b1003e57dd9705554e50c851c7f296f10da351e961d7926d861afbb9d140656eaf534e3358edf32cf1660b75cc9b51def06f92b197a5c80455594b38f853aad2d641530663f67d0893c00ef516ea7590c804bd8cb5995131120b29f76c6f08bdb456b86ee367afefa6fe8fea7aedb207407abd5edc4f0091d9dd7c2a1d8512ec5098a928ef8341d3feac3573ad313166114d7acfaa48587784c5cbea427a34bede50e4c7f9e437a9686e60d09afd639863ba6f5f553636342839748048b63796dcdbeecf28a38a872b44bab11f638f74955b43d6d57d8ba69d480d444ec872e875fb03bec58b722fbb8fc0512863b8bb990773213207d9a9ee623b4d2f470fa8558d3ff46880bdd62fb356dd92a5237ea14ec277b8955db5d459b8027b1c8ec6a3070c9c7fa55cd5c360d0288f292d08a1f980d2e662521cbeed79e43f8763b7b508902ad9676a699f4a0157444ff2fbbddea2e5bbcc3a5ae3620bb2eb90f4c2ee2fc82c6c721b76f38455b39af17"}}]}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0xe, 0x9, 0x3}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}]}}, @TCF_EM_IPT={0x20, 0x1, 0x0, 0x0, {{0xbb6, 0x9, 0x9}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x4, 0x7, 0x4b1b}, {{0x0, 0x1, 0x1, 0x1}, {0x4, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x16}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x7}, @TCA_FLOWER_KEY_ICMPV4_TYPE={0x5}, @TCA_FLOWER_KEY_VLAN_ID={0x6, 0x17, 0x956}, @TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0xf3c8035f}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x18, 0x2}}, @TCA_RATE={0x6, 0x5, {0x3, 0x99}}, @TCA_CHAIN={0x8, 0xb, 0xa000}]}, 0x1654}, 0x1, 0x0, 0x0, 0x1}, 0x8000)

4m37.707632384s ago: executing program 0 (id=1417):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000110000000c000980050001"], 0x20}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000440)=0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
getsockopt$bt_hci(r2, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f0000001340)=0xfec)

4m37.707441134s ago: executing program 0 (id=1418):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, 0x0, &(0x7f00000003c0)}, 0x20)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000400)='{\x05T\x82\x89\x98Yi:')
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b6fffec850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2, 0x0, 0x6}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
sysinfo(&(0x7f0000000140))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0xe, &(0x7f0000000780)={[{@jqfmt_vfsv0}, {@user_xattr}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@auto_da_alloc}, {@barrier}, {@quota}]}, 0x3, 0x44b, &(0x7f00000001c0)="$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")

4m37.639671414s ago: executing program 0 (id=1419):
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0x3, r2}]}, 0x28}, 0x1, 0x8}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x199100a, 0x0)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="0107000000000000000020"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10)
r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$selinux_load(r7, &(0x7f0000000340)={0xf97cff8c, 0x8}, 0x2000)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
umount2(&(0x7f00000001c0)='./file0\x00', 0x9)

4m37.570946895s ago: executing program 0 (id=1420):
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
open(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f0000010000"], 0x48)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1}})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fd00000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140))
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000440)=""/252)

4m37.363430456s ago: executing program 0 (id=1423):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES16=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b20000005c80000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

4m37.362950146s ago: executing program 38 (id=1423):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES16=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b20000005c80000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

23.647504734s ago: executing program 1 (id=6049):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
pipe(0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000800000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18799cb61cbe217da50000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r5}, 0x10)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
io_setup(0x3, &(0x7f0000000340))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
chmod(&(0x7f0000000080)='./file0\x00', 0x1)
r8 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}})
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}})
ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x1000})

23.551114144s ago: executing program 1 (id=6055):
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x73b, 0x200}, 0x280, 0x0, 0xfffffffe, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0xb8, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp(r1, r1, 0x6, 0xffffffffffffffff, 0xffffffffffffffff)
readv(r0, &(0x7f0000001ac0)=[{&(0x7f0000000240)=""/177, 0xb1}], 0x1)

22.576339499s ago: executing program 1 (id=6077):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
readv(r0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x23}], 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x418484, &(0x7f0000000440), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==")
r7 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
fallocate(r7, 0x0, 0x0, 0x1000f4)
io_setup(0x5ff, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r8}, 0x10)
write$sndseq(r1, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0xb, {0x0, 0x5a}, {}, @control={0x9, 0x0, 0xa}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x3ff}, {0x4, 0x4}, {0xff}, @connect={{0x6, 0x2}, {0x0, 0xc}}}], 0x38)

22.18752517s ago: executing program 1 (id=6081):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000080)={[{@nolazytime}, {}]}, 0x6, 0x4eb, &(0x7f0000000a40)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
open(&(0x7f0000000040)='./bus\x00', 0x46b42, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00')
preadv(r9, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)

20.998108527s ago: executing program 1 (id=6105):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0)

20.253955961s ago: executing program 1 (id=6120):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='mm_page_alloc\x00', r1}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/28], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x88008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_config_ext, 0x0, 0x19fbcc0a, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

20.25382428s ago: executing program 39 (id=6120):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='mm_page_alloc\x00', r1}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/28], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x88008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_config_ext, 0x0, 0x19fbcc0a, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

2.454990428s ago: executing program 2 (id=6433):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
remap_file_pages(&(0x7f0000ff8000/0x7000)=nil, 0x7000, 0x200000a, 0x4, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000841000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001"], 0x118}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x1, 0x0, 0x3ff}, 0x50)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
futex(&(0x7f0000000280)=0x1, 0x80, 0x0, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000300)=0x1, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x200)
syz_open_dev$usbfs(0x0, 0xb, 0x101301)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

2.2049886s ago: executing program 2 (id=6436):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
close(0xffffffffffffffff)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000400)=@gcm_128={{0x303, 0x38}, "be00", "00000c70423a000000000000ffff00", "99b65700", "df02000000000ece"}, 0x28)
setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000240)=0x4, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001040)={&(0x7f0000001100)='svcrdma_rq_post_err\x00', r2}, 0x18)
ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f0000000280)=0x13)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001180))
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_tables_targets\x00')
pread64(r3, &(0x7f0000000700)=""/199, 0xc7, 0xe0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r5, &(0x7f0000000000)={0x1f, @none}, 0x8)
listen(r5, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}})
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x44, 0x7, 0x0, 0x0, 0x9d670, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100987, 0x7ff, 0x7, 0x0, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000020c0)='mountinfo\x00')
preadv(r6, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096, 0x1000}], 0x1, 0x4000000, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r6, 0x0, 0x81, &(0x7f00000011c0)={'broute\x00', 0x0, 0x0, 0x0, [0x7ff, 0x7fffffffffffffff, 0x8000000000000000, 0x7, 0xd3f, 0x6876], 0x5, &(0x7f0000001000)=[{}, {}, {}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8)

1.544518482s ago: executing program 2 (id=6445):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002f40)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x230)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r2, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0], <r4=>0x0, 0x1f, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x22, 0x8, 0x8, &(0x7f0000000900)}}, 0x10)
r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000ac0)={0xffffffffffffffff, 0x68, 0x8}, 0xc)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@bloom_filter={0x1e, 0x5, 0x9, 0x7, 0x404, r1, 0xfab3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2, 0xd, @void, @value, @void, @value}, 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_lsm={0x1d, 0x14, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xc}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x567, 0x0, 0x0, 0x0, 0x6}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0x5, 0x4, 0x8, 0x3, 0x401}]}, &(0x7f0000000640)='GPL\x00', 0x0, 0xb7, &(0x7f0000000680)=""/183, 0x40f00, 0xc, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, r4, 0x0, 0x1, &(0x7f0000000b80)=[0xffffffffffffffff, r5, r0, r1, r0, r0, r6, r7, r1], &(0x7f0000000bc0)=[{0x0, 0x4, 0x2}], 0x10, 0x1, @void, @value}, 0x94)
r8 = add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffc)
keyctl$chown(0x4, r8, 0xee00, 0xffffffffffffffff)
keyctl$chown(0x4, r8, 0x0, 0x0)

1.432189653s ago: executing program 2 (id=6447):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socket$kcm(0x22, 0x2, 0x21) (async)
r1 = socket$kcm(0x22, 0x2, 0x21)
recvmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4001a050)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fcae68da850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000080)=0x9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x73b, 0x200}, 0x280, 0x0, 0xfffffffe, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x0)
wait4(0x0, 0x0, 0x40000000, 0x0)
name_to_handle_at(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f00000000c0), &(0x7f0000000140)}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f00000000c0), &(0x7f0000000140)}, 0x20)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x444, &(0x7f0000000ac0)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC=0x0, @ANYRESHEX], 0xfe, 0x667, &(0x7f00000002c0)="$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")
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'})

1.373111203s ago: executing program 9 (id=6450):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
readv(r0, &(0x7f0000000580)=[{0x0}], 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r3}, 0x10)
write$sndseq(r1, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0xb, {0x0, 0x5a}, {}, @control={0x9, 0x0, 0xa}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x3ff}, {0x4, 0x4}, {0xff}, @connect={{0x6, 0x2}, {0x0, 0xc}}}], 0x38)

1.309155934s ago: executing program 9 (id=6451):
r0 = syz_io_uring_setup(0x5c23, &(0x7f0000000240)={0x0, 0x17f6, 0x13290}, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x1, 0x0, 0x1, 0x0, 0x1000000)

1.183191644s ago: executing program 2 (id=6455):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000730000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
msgsnd(0x0, 0x0, 0x8, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000000500e50000070000001ffeff0001000003f1dc7f7c6e870200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0x0)

1.181512614s ago: executing program 5 (id=6456):
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
syz_clone(0x10eb22b000, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff6f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r3}, 0x10)
r4 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00'}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x3c, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
sendmmsg$inet(r2, &(0x7f0000004c40)=[{{&(0x7f0000000440)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000900)=[{&(0x7f00000007c0)="667bb4ff43f3bdf4152965c36e9c315082104ddc09b69a8f3d6b9dc5a3fc4a880e1d4d7b23185bda6c8e4024af1db2aefdb7f9531b8f08280ad7936a5094", 0x3e}, {&(0x7f0000000800)="a1d523c1a6cae68fc4824241323c8f88bbf28bfe5e99206c41ae156c38f9026971a7401d99a154297e9c3851406d5520e25579fc906e9bee698c6878aea96df2fa6460af258018faa8be6a48b1581d719e1544f7d48273b41f988ef7a06361aa609239f2fa82c212cac21c26a0a0b715346ce31c8ab0656cf7bd593966da111465418e4b6871575d09947f7f307694884a034835d67b5a3cad04398e72bd555d5acd1d321687a83efd40cc5e526203024717ec285ea7bdac1f1de1ae4839ecae38ec025493f6cce7d51c4e8833651b92755b27b9a707953241846a1e17001f2ee60924ad169eb49a", 0xe8}, {&(0x7f00000014c0)="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", 0xa13}], 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="14000000000000000000000002000000010000000000000010000000000000000000000007000000140000000000000000000000010000000900000000000000380000000000000000000000070000000002891fddac1e0001ac1414bb64010102ac14141eac14143e64010100ac1414aa440419510000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00b96a0000000000516f8a58008360d7fd18dbd27e406e7f11d278768d3c2501d5e0b75a7c88a2ea4025d5b61ecb0724c97b68bfcb721ce0a12763357bc35213921243fc00fd465163fbfa0a6b4cd8e8633222258c904b02c7804c334baacd53b16ec4d24f04cf52ef22f4de80b647303829783722bba2db3c274bdaf2791f334acc07f7636cd26756fae67f3ad3b7db721283f11f26237c9da7080629137352d272361aa392288d503c57d08651d2522aa703928d9c9c583dd1ad9991bc9642c70cff1fd2e3778ffd95a5c0a39d4b6ea9cb81fb626fd74b"], 0x98}}], 0x1, 0x0)

1.154845854s ago: executing program 9 (id=6457):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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")
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8f41c288d409ef0e169a340295f36d4b4", &(0x7f0000000280), 0x5, r1}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r5, 0x800448d2, 0x0)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000010000000000000000000002018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
close_range(r3, 0xffffffffffffffff, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000040)="1a87dccd341a5d", 0x7, 0xc0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$sock(r0, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)='$', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000840)='\n', 0x1}], 0x1}}], 0x2, 0x40000)
shutdown(r0, 0x1)
truncate(&(0x7f0000000140)='./file2\x00', 0x5c00)
statfs(&(0x7f0000000180)='./file0/file0\x00', 0x0)

857.473416ms ago: executing program 9 (id=6463):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002f40)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r2, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0], <r4=>0x0, 0x1f, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x22, 0x8, 0x8, &(0x7f0000000900)}}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@bloom_filter={0x1e, 0x5, 0x9, 0x7, 0x404, r1, 0xfab3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2, 0xd, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_lsm={0x1d, 0x14, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xc}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x567, 0x0, 0x0, 0x0, 0x6}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0x5, 0x4, 0x8, 0x3, 0x401}]}, &(0x7f0000000640)='GPL\x00', 0x0, 0xb7, &(0x7f0000000680)=""/183, 0x40f00, 0xc, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, r4, 0x0, 0x1, &(0x7f0000000b80)=[0xffffffffffffffff, 0xffffffffffffffff, r0, r1, r0, r0, r5, 0xffffffffffffffff, r1], &(0x7f0000000bc0)=[{0x0, 0x4, 0x2}], 0x10, 0x1, @void, @value}, 0x94)
r6 = add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffc)
keyctl$chown(0x4, r6, 0xee00, 0xffffffffffffffff)
keyctl$chown(0x4, r6, 0x0, 0x0)

736.407826ms ago: executing program 9 (id=6465):
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x400002, 0x0)
mq_timedreceive(r0, &(0x7f0000000040)=""/58, 0x3a, 0x9, &(0x7f0000000080)={0x77359400}) (async, rerun: 64)
r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x1010, r0, 0x10000000) (async, rerun: 64)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x40, 0x4007, @fd_index=0x4, 0xc, 0x0, 0x0, 0x17, 0x1, {0x1, r2}}) (async, rerun: 32)
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) (rerun: 32)
r5 = socket$inet_udp(0x2, 0x2, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r2) (async, rerun: 64)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000140)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x0, 0x0, 0x0, 0xb4, 0x3}, 0x20) (rerun: 64)
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x787878e51ad5de0e, 0x1)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x440000, 0x1b8)
renameat2(r6, &(0x7f0000000200)='./file0\x00', r3, &(0x7f0000000240)='./file0\x00', 0x4)
lseek(r5, 0xe4, 0x3) (async)
setrlimit(0x0, &(0x7f0000000280)={0x4}) (async, rerun: 64)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f00000002c0)={0x1, 0x9, 0xffffffffffff52a9}) (rerun: 64)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='rpcgss_bad_seqno\x00', r4, 0x0, 0x7}, 0x18)
setsockopt$inet_tcp_int(r3, 0x6, 0x10, &(0x7f0000000380)=0x5, 0x4)
ioctl$SNAPSHOT_S2RAM(r3, 0x330b) (async)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
ioctl$BTRFS_IOC_FS_INFO(r7, 0x8400941f, &(0x7f00000003c0)) (async)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a85321, &(0x7f00000007c0)={{0x37, 0x4}, 'port0\x00', 0x0, 0x120020, 0x0, 0x4f0, 0xfffffc00, 0x8000, 0x4, 0x0, 0x3, 0x1})
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000880)=0x4, 0x4) (async)
r8 = open(&(0x7f0000000900)='./file0\x00', 0x20880, 0x28)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000008c0)='f2fs_bmap\x00', r8, 0x0, 0xfb}, 0x18) (async)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x412000, 0x0)
splice(r9, &(0x7f00000009c0)=0x3, r0, &(0x7f0000000a00)=0x3, 0x101, 0x0) (async)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)) (async)
prctl$PR_SET_NAME(0xf, &(0x7f0000000b00)='}\x00')
accept4$inet6(r4, 0x0, &(0x7f0000000b40), 0x800)

675.057367ms ago: executing program 9 (id=6467):
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000003, 0x10010, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000300000000000000"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x248, &(0x7f0000000100), 0xfd, 0x48f, &(0x7f0000000940)="$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")
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r7=>0x0, 0x38, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000680)={r7, 0x8}, 0x14)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40)
r8 = inotify_init1(0x0)
inotify_add_watch(r8, &(0x7f0000000040)='.\x00', 0x140002d2)
read(r8, 0x0, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)

503.575348ms ago: executing program 7 (id=6470):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0xb8, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
kcmp(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff)
readv(r0, 0x0, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x2)

500.516838ms ago: executing program 7 (id=6471):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002640)=@newtaction={0xe78, 0x30, 0x25, 0x0, 0x0, {}, [{0xe64, 0x1, [@m_pedit={0xe60, 0x1, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x9c9da7c515094f87}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x1}, [{}, {}, {}, {}, {}, {0x0, 0x2}, {}, {0x3, 0x0, 0x0, 0x0, 0xffffffff}, {0x2}, {}, {}, {}, {}, {}, {0x6}, {}, {0xffffffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x5e808077}, {}, {0x80000000, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x67d4}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x1}, {}, {}, {}, {0x7, 0x0, 0x0, 0x4b}, {0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x20000000}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5e7b27ec, 0x0, 0x101}, {0x81, 0x0, 0x0, 0x0, 0x1}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4000000}, {0x0, 0x0, 0xd}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}, {}, {0x0, 0x4}, {0x0, 0x0, 0x6, 0x0, 0xec23}, {0x0, 0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x100}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x3}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe78}}, 0x0)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffc, @empty}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, &(0x7f0000000040))
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080)=0x8, 0x4)

484.523678ms ago: executing program 8 (id=6472):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x12, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@cb_func, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x6, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10)

448.479498ms ago: executing program 5 (id=6473):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1f, 0xf9, 0x7ffc1ff4}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20)
r2 = epoll_create(0xa)
epoll_pwait2(r2, &(0x7f0000000240)=[{}], 0x1, &(0x7f0000000000), 0x0, 0x0)

412.872728ms ago: executing program 8 (id=6474):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
pipe(0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000800000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18799cb61cbe217da50000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r5}, 0x10)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r7}, 0x10)
io_setup(0x3, &(0x7f0000000340))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10)
chmod(&(0x7f0000000080)='./file0\x00', 0x1)
r9 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}})
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}})
ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x1000})

382.157518ms ago: executing program 5 (id=6475):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
readv(r0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x23}], 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r3}, 0x10)
write$sndseq(r1, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0xb, {0x0, 0x5a}, {}, @control={0x9, 0x0, 0xa}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x3ff}, {0x4, 0x4}, {0xff}, @connect={{0x6, 0x2}, {0x0, 0xc}}}], 0x38)

254.879629ms ago: executing program 7 (id=6476):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="18ed1935e71e6601000000ffffffffff1832d3a6778263bf1789e915fa56ff019a000000f851b77098530018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400894fb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000ea020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_dccp(0xa, 0x6, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x648403)
socket(0x10, 0x803, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x20c, &(0x7f0000000b80)='cgroup\x00~m\xa3\xc8x4\x9bg\xcc\x80\xa5\xfe+)\x15\x1eDX\xa5\xa5\xde\xd0\x02\xbe\xa7k\xa2G%\x0f?.\x1e\x81\xe0J\x19\x87\xf3!\x9f\xc2#8\x98:\x13\x8b0Q\x05u\x1c^\xb1T?\x03\xd3\x03\x8f\xdc\xf0\xb8\x82\xf9$n7\x84\\\x019-\x91U\xfa\xc4\xd9J\xde\xbe\x8fF\x1e}\xdf\v\xe7\xc3~FN\xc9\xc8\xf2G\xbd\x93h\x04\xa2\xb4\xa6\xde\x85\xc4\xd8\xbb\xb5O\xa4\xd3\xc4\xcf\xabp\x86\'/\xd3\xdb?V(\x00\xf08\xbf\xf7\x90\xca\xb2\fmt\xac\x00b\xfc2\v\x8e\xab\x1c\xff\xd3?C\xba\x92\xbf0\xe1xy\x0ejmGA-\xf0?\a3mNa\xae\x0f\xcb\x01\tv\xf5#KV\x8e\xe7M[\xda \x1a%$\x8fQH\xda\xfb\x1c\xaa\xf9\xddb3\xff\x0f\\\xad4?uo\xae\x8d\xea\b\x15`K5\f5\xb2\x1f\x19\x92\x04W\xe6\x9ek\xc9\xa9\x17$\xb3\x912V#\xf1r\xcb5\x8c\x00s\x0e|\xb7\xde\xb5\xd1\xa2\x12\xa0\xfa\xd6\x8b[A\xeb\t\x95O\xa8X6/5x\x84\x88\x9b\x9d\x9a\x84\xe3l\xfe\x84v\xfb\n\xed\x17\xfcB\x19\xec]\xcd\xf4\x06\xee\x9aF!$\xe2\xd7\xd4\xe5\xcb\xe1?\x01\xcc\xbe\x910\xe8Z\xe1\x1fz\x18I\x94\xf7\xb8]\x1a\xa0\x85M\xb4Q\x93\xf7\x1a\'\xc1y\x8fy\xc0\x0eH\x10GZ\x8c\xafpJ\x88\x13\x8e\x02FW\xa6\x94\x8f8\n\xe0\xb2\x9b\x9a}\x0e\x06\x13c\x17\x1f!\xa1\xaf\xe9\x94m\aD/C\xca\x87\xca\xe0\xc6\xf3\x1a\xb1\x90\x9eU\xdc7\xc9U\x8d\xdd9b\x0fN\x0eU\xae7\xcc\xca+>\xbd\x14\xb1J`\xfax}H#\v\x94\x1eab1\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf4D\xd2\r\xb1D\x84#\xa6\x890;\xab\x11w\xd1\xd8\x0f\x81P\xf7\x9b\xbd\v\xd1V\x8c\x83\x11\xfb\a\xac\x85\xee\xb6\xe7\xa9[B\x03\xc3-\x98\x030\xab\xceu\xc8\xba \x1b\x8d\x8b\xc0\x9f~QRcn#\x1d\xf1\xab\xf1r\xed6\xfb\xecy\xd0\xf2\x93\x19x\xc8l\xfbs]\x90\xfe\xff\xc2\xcb'}, 0xffffffffffffffe6)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8b, 0x76}, [@call={0x27}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
write$binfmt_script(r2, &(0x7f0000000180), 0xb)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x10012, r2, 0x0)
copy_file_range(r2, &(0x7f0000000080), r1, 0x0, 0xfffffffffffffff8, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)={'#! ', '', [{0x20, '#! '}, {}, {0x20, '^'}, {0x20, '+\x00'/15}, {0x20, ')*]'}], 0xa, "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"}, 0x1fb)
unshare(0x22020600)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x100000, @dev={0xfe, 0x80, '\x00', 0x2d}}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xffeffffe}, 0x1c)
socket$netlink(0x10, 0x3, 0x8000000004)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x20900, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)

254.420268ms ago: executing program 2 (id=6477):
epoll_create1(0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x2)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001200)=@nat={'nat\x00', 0x1b, 0x5, 0x408, 0x2f8, 0x1d0, 0xffffffff, 0x1d0, 0x2f8, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, &(0x7f00000001c0), {[{{@ip={@remote, @empty, 0xff, 0xff000000, 'ip6_vti0\x00', 'geneve1\x00', {0xff}, {0xff}, 0xe7, 0x0, 0x20}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28}, {0x3, "fa7c"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0x6, {0x4a}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x2b7391f786e993fa, "99f6", 0x1}}, @common=@unspec=@connlabel={{0x28}, {0x1000, 0x2}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x1, @dev={0xac, 0x14, 0x14, 0x12}, @private=0xa010102, @port=0x4e22, @port=0x4e22}}}}, {{@ip={@multicast1, @loopback, 0xff, 0xffffffff, 'rose0\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x5, 0x6, 0x2}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x1, 0x0, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x19, @loopback, @empty, @gre_key=0x9017, @port=0x4e21}}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0xff, 'nr0\x00', 'pimreg1\x00', {}, {}, 0x89, 0x3, 0xf43ab658282afd63}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x5, @rand_addr=0x64010101, @local, @port=0x4e23, @port=0x4e21}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x1808002, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0xcd0}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
creat(&(0x7f0000000240)='./bus\x00', 0x0)
sigaltstack(0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r4, &(0x7f0000004200)='t', 0x1)
sendfile(r4, r3, 0x0, 0x3ffff)
sendfile(r4, r3, 0x0, 0x7ffff000)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x13, &(0x7f0000000500)={[{@dax_inode}, {@journal_dev={'journal_dev', 0x3d, 0x100000000}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noblock_validity}, {@noload}, {@data_writeback}]}, 0xfe, 0x631, &(0x7f0000001940)="$eJzs3c1vVFUbAPDn3k6/3/edQt6ouJBGYyBRWlrAEGMC3bgiBD92riotBBkooTVaJLFNcGNi3LgwceVC/C+UxK0Lty7cuDIkxBgWYlDG3Jk7ZTrt9Hs6pf39kmnvmTNzzrlNnzlnzpxzJ4A9azD7kUYciIhrSUSxLq8QeeZg9XH3/7h5PrslUS6/9XsSNz9O5urLSvLf/fmT/ylG8lMasb9jab3Tszcuj5dKk9fz9PDMlWvD07M3jly6Mn5x8uLk1dFXRk+eOH7i5MjRTZ1fXvXf2Y8zt977oPjp2Xe++ephMvLtL2eTOB2P8gdk59X43O5N1Zz9zQajXPVgUUYacXKTZe8UfxZr/ycV3dk/RFJoZ4tYjzQiTkVEZ0Q8HcXoiMfBWoxP3mhr44CWKidR6aMGy8Dek0TTrEs9+YvEUj0tbROwHWrjgNp7++XeBy+VtnJIAmyTe2PVubpq7HdGRC3+C9W5weipzA303U/q53kqc32bm5mryur48Yezt7JbNJmHA1pjbr42y93Y/yeV2ByI6nuAvvvpovgfy0cBaf45wZuNBa9x8nywIS3+YfvMzUfEM3n/3xVrjv80j91a/L+7wfrFPwAAAAAAAGydO2MR8fJy6//ShfU/Xcus/+mPiNNbUP/qn/+ld/ODZAuqA+rcG4t4bdn1vwtrfAc68tR/K+sBOpMLl0qTRyPifxFxODq7s/RIQ7n1K4SPfLb/y2b116//y25Z/bW1gHlJdwsNa4kmxmfGN3veQMS9+YhnK+t/D+b3LF7/k/X/yTL9fxbf19ZYx/4Xb59rlrd6/AOtUv464tCy/f/j4Xay8vU5hivjgeHaqGCp5z76/Ltm9Yt/aJ+s/+9bOf67k/rr9Uyvr/yuiDg2Wyg3y9/o+L8rebujVn7mw/GZmesjEV3JmaX3j66vzbBb1eKhFi9Z/B9+YeX5v4Xxf10c9kbE3BrrfOpR/6/N8vT/0D5Z/E+s3P8XF/f/6z8YvT3wfbP6z62p/z9e6dMP5/eY/4N6S6/HsdYAbUtzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAJl0bEfyJJhxaO03RoKKI/Iv4ffWlpanrmpQtT71+dyPIq3/+f1r7pt1hNJ7Xv/x+oS482pI9FxL6I+KKjt5IeOj9Vmmj3yQMAAAAAAAAAAAAAAAAAAMAO0V/Z81/ubtz/n/mto92tA1qukP8W77D3FDb8zHL3ljYE2HYbj3/gSTa/rvjvbGlbgO3XPP4fPCxXNNz9+vMtbxOwPYz/Ye/aYPz7uAB2Af0/7FVrnNPraXU7gHbQ/wMAAAAAwK6y7+Cdn5OImHu1t3LLdOV5vW1tGdBqabsbALSNNbywdxWm2t0CoF1s6AeShaO/Gjf7VzRf/Z+0pkEAAAAAAAAAAAAAwBKHDjTf/29vAOxuK+//t7YfdrMV9v8vF/wuFwC7SPOv/tD3w27nPT6wWm9v/z8AAAAAAAAAAAAA7AA9Ny6Pl0qT16dnn7yDUzujGes7mBvfXDnl7p1wFosPHrWm5M6I2BknuAUHWbCVSpPlcsTqD65dgqONbW7vyxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDYvwEAAP//9HcgKQ==")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)

254.176278ms ago: executing program 8 (id=6478):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r0, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0], 0x0, 0x1f, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x22, 0x8, 0x8, &(0x7f0000000900)}}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000ac0)={0xffffffffffffffff, 0x68, 0x8}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='kfree\x00', r0}, 0x18)
add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffc)

233.213219ms ago: executing program 5 (id=6479):
r0 = syz_io_uring_setup(0x5c23, &(0x7f0000000240)={0x0, 0x17f6, 0x13290}, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x1, 0x0, 0x1, 0x0, 0x1000000)

232.859539ms ago: executing program 8 (id=6480):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, 0x0, &(0x7f0000000280)='%pS    \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x80, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x104}}, 0x0)

190.768688ms ago: executing program 5 (id=6481):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0xb8, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
kcmp(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff)
readv(r0, 0x0, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x2)

175.121699ms ago: executing program 8 (id=6482):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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")
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8f41c288d409ef0e169a340295f36d4b4", &(0x7f0000000280), 0x5, r1}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, 0x0)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000010000000000000000000002018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
close_range(r3, 0xffffffffffffffff, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000040)="1a87dccd341a5d", 0x7, 0xc0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$sock(r0, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)='$', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000840)='\n', 0x1}], 0x1}}], 0x2, 0x40000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x3, 0x0, 0x0, 0x5, 0x142dcd662a0b6cf3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x5dd8, 0xffff, 0x5, 0xff, 0x8, 0xfffc, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
shutdown(r0, 0x1)
truncate(&(0x7f0000000140)='./file2\x00', 0x5c00)
statfs(&(0x7f0000000180)='./file0/file0\x00', 0x0)

132.770349ms ago: executing program 5 (id=6483):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'macvtap0\x00', <r1=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x1, 0x6, @random="eace7e3f39a0"}, 0x14)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x8, 0x803, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r0], 0x0, 0x26, 0x0, 0x40000000, 0x0, 0x0, @void, @value}, 0x28)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000229bd7004fedbdf2520000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x10)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, <r4=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2c62d072e92708f0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, r3, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, 0x0)
r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setsig(r6, 0xa, 0x13)
fcntl$setlease(r6, 0x400, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280))
socket(0x10, 0x3, 0xfffffffd)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setlease(r7, 0x400, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
truncate(&(0x7f0000000080)='./file0\x00', 0x7)
fcntl$setlease(r7, 0x400, 0x2)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x3938700}}, 0x0)
truncate(&(0x7f00000002c0)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setxattr$security_selinux(&(0x7f0000000340)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000400)='system_u:object_r:system_dbusd_var_run_t:s0\x00', 0x2c, 0x2)

113.600949ms ago: executing program 7 (id=6484):
r0 = syz_io_uring_setup(0x5c23, &(0x7f0000000240)={0x0, 0x17f6, 0x13290}, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x1, 0x0, 0x1, 0x0, 0x1000000)

55.247919ms ago: executing program 7 (id=6485):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r1) (async)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="1a23ad1a0c284c3e9d1a306722c136c37297cd7eeab9b72d9f2882ce3d8e57f7596036007609a5ea57c333c104a44df9548606de63568f", @ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf2507000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20004440) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x716, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', <r5=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYRESDEC=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 64)
r6 = getpid() (rerun: 64)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x6) (async)
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}) (rerun: 64)
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70200001400894fb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x2d) (async, rerun: 64)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000041, 0x0, 0x0, 0x0, &(0x7f0000000040)) (rerun: 64)
pipe2$9p(&(0x7f0000000240)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff}, 0x0)
r13 = dup(r12)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r8, @ANYRESHEX=r11, @ANYBLOB=',wfdno=', @ANYRESHEX=r13]) (async, rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) (async, rerun: 32)
perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1370a}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x9ea8b980, 0x0, 0x0, 0x0, 0x0, 0x0)

578.07µs ago: executing program 7 (id=6486):
semtimedop(0x0, &(0x7f0000000180)=[{0x0, 0xfff}], 0x1, 0x0)

0s ago: executing program 8 (id=6487):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000730000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
msgsnd(0x0, 0x0, 0x8, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000000500e50000070000001ffeff0001000003f1dc7f7c6e870200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0x0)

kernel console output (not intermixed with test programs):

 Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  468.567178][T23057] Call Trace:
[  468.570474][T23057]  <TASK>
[  468.573414][T23057]  dump_stack_lvl+0xf2/0x150
[  468.578053][T23057]  dump_stack+0x15/0x1a
[  468.582259][T23057]  should_fail_ex+0x223/0x230
[  468.586992][T23057]  should_failslab+0x8f/0xb0
[  468.591706][T23057]  __kmalloc_node_track_caller_noprof+0xa8/0x410
[  468.598153][T23057]  ? v9fs_session_init+0x79/0xda0
[  468.603205][T23057]  kstrdup+0x38/0x80
[  468.607145][T23057]  v9fs_session_init+0x79/0xda0
[  468.612061][T23057]  ? should_fail_ex+0xd7/0x230
[  468.616896][T23057]  ? v9fs_mount+0x53/0x570
[  468.621330][T23057]  ? should_failslab+0x8f/0xb0
[  468.626234][T23057]  ? __kmalloc_cache_noprof+0x186/0x320
[  468.631814][T23057]  v9fs_mount+0x69/0x570
[  468.636153][T23057]  ? __pfx_v9fs_mount+0x10/0x10
[  468.641062][T23057]  legacy_get_tree+0x77/0xd0
[  468.645689][T23057]  vfs_get_tree+0x56/0x1e0
[  468.650230][T23057]  do_new_mount+0x227/0x690
[  468.654781][T23057]  path_mount+0x49b/0xb30
[  468.659158][T23057]  __se_sys_mount+0x27c/0x2d0
[  468.663872][T23057]  __x64_sys_mount+0x67/0x80
[  468.668556][T23057]  x64_sys_call+0x2c84/0x2dc0
[  468.673334][T23057]  do_syscall_64+0xc9/0x1c0
[  468.677882][T23057]  ? clear_bhb_loop+0x55/0xb0
[  468.682567][T23057]  ? clear_bhb_loop+0x55/0xb0
[  468.687269][T23057]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.693232][T23057] RIP: 0033:0x7f2d1287ff19
[  468.697680][T23057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  468.717347][T23057] RSP: 002b:00007f2d10ef7058 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  468.725814][T23057] RAX: ffffffffffffffda RBX: 00007f2d12a45fa0 RCX: 00007f2d1287ff19
[  468.733832][T23057] RDX: 00000000200002c0 RSI: 0000000020000080 RDI: 0000000000000000
[  468.741839][T23057] RBP: 00007f2d10ef70a0 R08: 0000000020000400 R09: 0000000000000000
[  468.749817][T23057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  468.757791][T23057] R13: 0000000000000000 R14: 00007f2d12a45fa0 R15: 00007ffcdf524668
[  468.765877][T23057]  </TASK>
[  469.095785][T23077] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5859'.
[  469.115314][T23077] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5859'.
[  469.124466][T23077] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5859'.
[  469.133600][T23077] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5859'.
[  469.180047][T23082] loop1: detected capacity change from 0 to 512
[  469.196098][T23082] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  469.200326][T23089] FAULT_INJECTION: forcing a failure.
[  469.200326][T23089] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  469.214678][T23082] ext4 filesystem being mounted at /293/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  469.221707][T23089] CPU: 0 UID: 0 PID: 23089 Comm: syz.8.5863 Tainted: G        W          6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0
[  469.244536][T23089] Tainted: [W]=WARN
[  469.248351][T23089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  469.258423][T23089] Call Trace:
[  469.261716][T23089]  <TASK>
[  469.264661][T23089]  dump_stack_lvl+0xf2/0x150
[  469.269288][T23089]  dump_stack+0x15/0x1a
[  469.273588][T23089]  should_fail_ex+0x223/0x230
[  469.278379][T23089]  should_fail+0xb/0x10
[  469.282574][T23089]  should_fail_usercopy+0x1a/0x20
[  469.287777][T23089]  _copy_from_user+0x1e/0xb0
[  469.292379][T23089]  do_replace+0x7b/0x2d0
[  469.296732][T23089]  do_ebt_set_ctl+0x1bd/0xb80
[  469.301411][T23089]  ? _parse_integer+0x27/0x30
[  469.306124][T23089]  ? kstrtoull+0x110/0x140
[  469.310543][T23089]  ? tcp_release_cb+0xfe/0x380
[  469.315359][T23089]  ? _raw_spin_unlock_bh+0x36/0x40
[  469.320513][T23089]  ? release_sock+0x117/0x150
[  469.325199][T23089]  ? sockopt_release_sock+0x42/0x50
[  469.330438][T23089]  ? do_ip_setsockopt+0x1fcf/0x2340
[  469.335745][T23089]  nf_setsockopt+0x195/0x1b0
[  469.340413][T23089]  ip_setsockopt+0xea/0x100
[  469.344927][T23089]  tcp_setsockopt+0x93/0xb0
[  469.349501][T23089]  sock_common_setsockopt+0x64/0x80
[  469.354721][T23089]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  469.360738][T23089]  __sys_setsockopt+0x187/0x200
[  469.365668][T23089]  __x64_sys_setsockopt+0x66/0x80
[  469.371141][T23089]  x64_sys_call+0x282e/0x2dc0
[  469.375877][T23089]  do_syscall_64+0xc9/0x1c0
[  469.380422][T23089]  ? clear_bhb_loop+0x55/0xb0
[  469.385173][T23089]  ? clear_bhb_loop+0x55/0xb0
[  469.389873][T23089]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.395780][T23089] RIP: 0033:0x7f992aaeff19
[  469.400218][T23089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  469.419828][T23089] RSP: 002b:00007f9929167058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  469.428324][T23089] RAX: ffffffffffffffda RBX: 00007f992acb5fa0 RCX: 00007f992aaeff19
[  469.436309][T23089] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000004
[  469.444296][T23089] RBP: 00007f99291670a0 R08: 0000000000000298 R09: 0000000000000000
[  469.452284][T23089] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001
[  469.460273][T23089] R13: 0000000000000000 R14: 00007f992acb5fa0 R15: 00007fff43878278
[  469.468258][T23089]  </TASK>
[  469.475066][T18988] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  469.478861][T23084] vhci_hcd: invalid port number 157
[  469.489329][T23084] vhci_hcd: default hub control req: c1ef v21ba i009d l29779
[  469.506924][T23084] ip6t_rpfilter: unknown options
[  469.526288][T23084] x_tables: duplicate underflow at hook 2
[  469.541338][T23097] FAULT_INJECTION: forcing a failure.
[  469.541338][T23097] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  469.554625][T23097] CPU: 0 UID: 0 PID: 23097 Comm: syz.8.5866 Tainted: G        W          6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0
[  469.562132][T23099] IPv6: Can't replace route, no match found
[  469.567022][T23097] Tainted: [W]=WARN
[  469.567032][T23097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  469.567049][T23097] Call Trace:
[  469.567057][T23097]  <TASK>
[  469.567066][T23097]  dump_stack_lvl+0xf2/0x150
[  469.597906][T23097]  dump_stack+0x15/0x1a
[  469.602124][T23097]  should_fail_ex+0x223/0x230
[  469.606891][T23097]  should_fail+0xb/0x10
[  469.611104][T23097]  should_fail_usercopy+0x1a/0x20
[  469.616179][T23097]  _copy_from_user+0x1e/0xb0
[  469.620788][T23097]  do_seccomp+0x15b/0xa60
[  469.625166][T23097]  ? ksys_write+0x176/0x1b0
[  469.629730][T23097]  __x64_sys_seccomp+0x40/0x50
[  469.634515][T23097]  x64_sys_call+0x27fc/0x2dc0
[  469.639197][T23097]  do_syscall_64+0xc9/0x1c0
[  469.643758][T23097]  ? clear_bhb_loop+0x55/0xb0
[  469.648557][T23097]  ? clear_bhb_loop+0x55/0xb0
[  469.653240][T23097]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.659224][T23097] RIP: 0033:0x7f992aaeff19
[  469.663677][T23097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  469.683393][T23097] RSP: 002b:00007f9929167058 EFLAGS: 00000246 ORIG_RAX: 000000000000013d
[  469.691812][T23097] RAX: ffffffffffffffda RBX: 00007f992acb5fa0 RCX: 00007f992aaeff19
[  469.699836][T23097] RDX: 0000000020002140 RSI: 000000000000001b RDI: 0000000000000001
[  469.707883][T23097] RBP: 00007f99291670a0 R08: 0000000000000000 R09: 0000000000000000
[  469.715973][T23097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  469.723950][T23097] R13: 0000000000000000 R14: 00007f992acb5fa0 R15: 00007fff43878278
[  469.731987][T23097]  </TASK>
[  469.836601][T23114] netlink: 'syz.5.5874': attribute type 10 has an invalid length.
[  469.856401][T23114] batman_adv: batadv0: Adding interface: team0
[  469.862604][T23114] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560.
[  469.882188][T23114] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  469.953964][T23121] FAULT_INJECTION: forcing a failure.
[  469.953964][T23121] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  469.967322][T23121] CPU: 0 UID: 0 PID: 23121 Comm: syz.5.5877 Tainted: G        W          6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0
[  469.979647][T23121] Tainted: [W]=WARN
[  469.983463][T23121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  469.993545][T23121] Call Trace:
[  469.996958][T23121]  <TASK>
[  469.999930][T23121]  dump_stack_lvl+0xf2/0x150
[  470.004651][T23121]  dump_stack+0x15/0x1a
[  470.008854][T23121]  should_fail_ex+0x223/0x230
[  470.013576][T23121]  should_fail+0xb/0x10
[  470.017783][T23121]  should_fail_usercopy+0x1a/0x20
[  470.022889][T23121]  _copy_to_user+0x20/0xa0
[  470.027341][T23121]  simple_read_from_buffer+0xa0/0x110
[  470.032829][T23121]  proc_fail_nth_read+0xf9/0x140
[  470.037817][T23121]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  470.043486][T23121]  vfs_read+0x1a2/0x700
[  470.047667][T23121]  ? __rcu_read_unlock+0x4e/0x70
[  470.052713][T23121]  ? __fget_files+0x17c/0x1c0
[  470.057486][T23121]  ksys_read+0xe8/0x1b0
[  470.061667][T23121]  __x64_sys_read+0x42/0x50
[  470.066209][T23121]  x64_sys_call+0x2874/0x2dc0
[  470.070910][T23121]  do_syscall_64+0xc9/0x1c0
[  470.075432][T23121]  ? clear_bhb_loop+0x55/0xb0
[  470.080207][T23121]  ? clear_bhb_loop+0x55/0xb0
[  470.084917][T23121]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.090844][T23121] RIP: 0033:0x7f5fefc3e92c
[  470.095304][T23121] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  470.114936][T23121] RSP: 002b:00007f5fee2b7050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  470.123432][T23121] RAX: ffffffffffffffda RBX: 00007f5fefe05fa0 RCX: 00007f5fefc3e92c
[  470.131503][T23121] RDX: 000000000000000f RSI: 00007f5fee2b70b0 RDI: 0000000000000004
[  470.139479][T23121] RBP: 00007f5fee2b70a0 R08: 0000000000000000 R09: 0000000000000000
[  470.147511][T23121] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000002
[  470.155515][T23121] R13: 0000000000000000 R14: 00007f5fefe05fa0 R15: 00007ffd4475b518
[  470.163504][T23121]  </TASK>
[  470.175212][T23119] SELinux: syz.9.5876 (23119) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  470.191020][T23124] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=23124 comm=syz.1.5878
[  470.229785][T23130] IPv6: Can't replace route, no match found
[  470.247381][T23128] vhci_hcd: invalid port number 157
[  470.252630][T23128] vhci_hcd: default hub control req: c1ef v21ba i009d l29779
[  470.261364][T23128] ip6t_rpfilter: unknown options
[  470.267765][T23128] x_tables: duplicate underflow at hook 2
[  470.296030][T23137] __nla_validate_parse: 1 callbacks suppressed
[  470.296051][T23137] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5878'.
[  470.326889][T23141] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5885'.
[  470.337827][T23141] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5885'.
[  470.346871][T23141] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5885'.
[  470.355903][T23141] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5885'.
[  470.365215][T23141] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5885'.
[  470.415883][T23139] bond0: (slave netdevsim1): Releasing backup interface
[  470.436090][T23149] FAULT_INJECTION: forcing a failure.
[  470.436090][T23149] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  470.449380][T23149] CPU: 0 UID: 0 PID: 23149 Comm: syz.5.5889 Tainted: G        W          6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0
[  470.461725][T23149] Tainted: [W]=WARN
[  470.465534][T23149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  470.475727][T23149] Call Trace:
[  470.479005][T23149]  <TASK>
[  470.482023][T23149]  dump_stack_lvl+0xf2/0x150
[  470.486704][T23149]  dump_stack+0x15/0x1a
[  470.490878][T23149]  should_fail_ex+0x223/0x230
[  470.495580][T23149]  should_fail_alloc_page+0xfd/0x110
[  470.500887][T23149]  __alloc_pages_noprof+0x109/0x340
[  470.506154][T23149]  alloc_pages_mpol_noprof+0xb1/0x1e0
[  470.511600][T23149]  folio_alloc_mpol_noprof+0x36/0x70
[  470.517009][T23149]  shmem_get_folio_gfp+0x3d1/0xd90
[  470.522209][T23149]  shmem_write_begin+0xa2/0x180
[  470.527127][T23149]  generic_perform_write+0x1a8/0x4a0
[  470.532504][T23149]  shmem_file_write_iter+0xc2/0xe0
[  470.537829][T23149]  vfs_write+0x77f/0x920
[  470.542110][T23149]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  470.548100][T23149]  ksys_write+0xe8/0x1b0
[  470.552351][T23149]  __x64_sys_write+0x42/0x50
[  470.556959][T23149]  x64_sys_call+0x287e/0x2dc0
[  470.561669][T23149]  do_syscall_64+0xc9/0x1c0
[  470.566195][T23149]  ? clear_bhb_loop+0x55/0xb0
[  470.570952][T23149]  ? clear_bhb_loop+0x55/0xb0
[  470.575708][T23149]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.581658][T23149] RIP: 0033:0x7f5fefc3e9cf
[  470.586072][T23149] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  470.605729][T23149] RSP: 002b:00007f5fee2b6d60 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  470.614162][T23149] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007f5fefc3e9cf
[  470.622266][T23149] RDX: 0000000000100000 RSI: 00007f5fe5e97000 RDI: 0000000000000006
[  470.630258][T23149] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000599
[  470.638233][T23149] R10: 0000000020000002 R11: 0000000000000293 R12: 0000000000000006
[  470.646223][T23149] R13: 00007f5fee2b6e0c R14: 00007f5fee2b6e10 R15: 00007f5fe5e97000
[  470.654241][T23149]  </TASK>
[  470.660274][T23150] rdma_op ffff88810a84ad80 conn xmit_rdma 0000000000000000
[  470.854735][T23166] vhci_hcd: invalid port number 157
[  470.860181][T23166] vhci_hcd: default hub control req: c1ef v21ba i009d l29779
[  470.868336][T23172] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5898'.
[  470.872455][T23170] siw: device registration error -23
[  470.886413][T23166] ip6t_rpfilter: unknown options
[  470.891857][T23166] x_tables: duplicate underflow at hook 2
[  470.914090][T23172] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5898'.
[  470.923195][T23172] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5898'.
[  470.932193][T23172] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5898'.
[  471.022211][T23184] batadv_slave_1: entered promiscuous mode
[  471.032161][T23187] x_tables: ip_tables: udp match: only valid for protocol 17
[  471.040701][T23183] batadv_slave_1: left promiscuous mode
[  471.071648][T23195] siw: device registration error -23
[  471.103753][T23199] netlink: 'syz.8.5906': attribute type 8 has an invalid length.
[  471.111582][T23199] net_ratelimit: 30 callbacks suppressed
[  471.111598][T23199] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  471.258773][T23212] vhci_hcd: invalid port number 157
[  471.264065][T23212] vhci_hcd: default hub control req: c1ef v21ba i009d l29779
[  471.276690][T23212] ip6t_rpfilter: unknown options
[  471.282092][T23212] x_tables: duplicate underflow at hook 2
[  471.316316][    C0] ------------[ cut here ]------------
[  471.321819][    C0] refcount_t: underflow; use-after-free.
[  471.327705][    C0] WARNING: CPU: 0 PID: 23221 at lib/refcount.c:28 refcount_warn_saturate+0x1c6/0x230
[  471.337254][    C0] Modules linked in:
[  471.341294][    C0] CPU: 0 UID: 0 PID: 23221 Comm: syz.8.5919 Tainted: G        W          6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0
[  471.353595][    C0] Tainted: [W]=WARN
[  471.357446][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  471.365943][T23223] lo speed is unknown, defaulting to 1000
[  471.367535][    C0] RIP: 0010:refcount_warn_saturate+0x1c6/0x230
[  471.375001][T23223] lo speed is unknown, defaulting to 1000
[  471.379446][    C0] Code: 72 ff ff ff e8 bb 28 70 ff 48 c7 c7 eb ce b2 86 e8 3f 76 89 ff c6 05 b3 4c f0 04 01 90 48 c7 c7 f3 04 1c 86 e8 db b8 51 ff 90 <0f> 0b 90 90 e9 43 ff ff ff e8 8c 28 70 ff 48 c7 c7 e8 ce b2 86 e8
[  471.386589][T23223] lo speed is unknown, defaulting to 1000
[  471.404836][    C0] RSP: 0018:ffffc90000003b60 EFLAGS: 00010246
[  471.404870][    C0] RAX: ea0ecfda9d39f500 RBX: ffff88810d731fe4 RCX: ffff888107d83180
[  471.404887][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  471.404904][    C0] RBP: 0000000000000003 R08: ffffffff81143c87 R09: 0000000000000000
[  471.404919][    C0] R10: 0001ffffffffffff R11: ffff888107d83180 R12: ffff88811811e668
[  471.404935][    C0] R13: ffff888156166000 R14: ffff88810d731fe4 R15: 0000000000000000
[  471.404952][    C0] FS:  00007f99291466c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000
[  471.404988][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  471.405005][    C0] CR2: 0000000020003e40 CR3: 0000000141d44000 CR4: 00000000003506f0
[  471.405025][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  471.405039][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 00000000000d0602
[  471.405056][    C0] Call Trace:
[  471.405064][    C0]  <IRQ>
[  471.405072][    C0]  ? __warn+0x141/0x350
[  471.405112][    C0]  ? report_bug+0x315/0x420
[  471.405150][    C0]  ? refcount_warn_saturate+0x1c6/0x230
[  471.405201][    C0]  ? handle_bug+0x60/0x90
[  471.405224][    C0]  ? exc_invalid_op+0x1a/0x50
[  471.405245][    C0]  ? asm_exc_invalid_op+0x1a/0x20
[  471.405303][    C0]  ? __warn_printk+0x167/0x1b0
[  471.405338][    C0]  ? refcount_warn_saturate+0x1c6/0x230
[  471.405389][    C0]  sk_skb_reason_drop+0xe9/0x290
[  471.405417][    C0]  j1939_session_put+0x157/0x2a0
[  471.405447][    C0]  j1939_xtp_rx_eoma+0x1f0/0x260
[  471.405473][    C0]  j1939_tp_recv+0x651/0xa80
[  471.405498][    C0]  j1939_can_recv+0x45f/0x550
[  471.405548][    C0]  ? __pfx_j1939_can_recv+0x10/0x10
[  471.571152][    C0]  can_rcv_filter+0x225/0x4c0
[  471.575923][    C0]  can_receive+0x182/0x1f0
[  471.580372][    C0]  ? __pfx_ip_rcv+0x10/0x10
[  471.585023][    C0]  can_rcv+0xe7/0x180
[  471.589068][    C0]  ? __pfx_can_rcv+0x10/0x10
[  471.593732][    C0]  __netif_receive_skb+0x123/0x280
[  471.598884][    C0]  process_backlog+0x22e/0x440
[  471.603699][    C0]  __napi_poll+0x63/0x3c0
[  471.608058][    C0]  ? net_rx_action+0x376/0x7f0
[  471.612881][    C0]  net_rx_action+0x3a1/0x7f0
[  471.617513][    C0]  handle_softirqs+0xbf/0x280
[  471.622236][    C0]  __irq_exit_rcu+0x3a/0xc0
[  471.626817][    C0]  sysvec_apic_timer_interrupt+0x73/0x80
[  471.632499][    C0]  </IRQ>
[  471.635469][    C0]  <TASK>
[  471.638427][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  471.644492][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x3d/0x60
[  471.650964][    C0] Code: 86 e8 f7 bd 19 fc 48 83 3d 07 03 32 01 00 74 2b 48 89 df e8 05 07 00 00 90 41 f7 c6 00 02 00 00 74 01 fb 65 ff 0d 6b 99 d0 7a <74> 08 5b 41 5e c3 cc cc cc cc 0f 1f 44 00 00 eb f1 90 0f 0b 66 2e
[  471.670630][    C0] RSP: 0018:ffffc9000320ba20 EFLAGS: 00000286
[  471.676739][    C0] RAX: 0000000000000001 RBX: ffff888237c1ff80 RCX: ffffffff853246f9
[  471.684774][    C0] RDX: 000000000000022d RSI: 0000000000000000 RDI: ffff888237c1ff80
[  471.692790][    C0] RBP: ffff888237c1ff80 R08: 0001ffff86644a0f R09: 0000000000000000
[  471.700807][    C0] R10: 0001ffffffffffff R11: ffffffff810e5270 R12: ffff888117d356e8
[  471.708838][    C0] R13: 0000000000000246 R14: 0000000000000246 R15: ffff888117d356b8
[  471.716826][    C0]  ? __pfx_lapic_next_event+0x10/0x10
[  471.722217][    C0]  ? _raw_spin_unlock_irqrestore+0x19/0x60
[  471.728069][    C0]  hrtimer_start_range_ns+0x53d/0x580
[  471.733475][    C0]  j1939_tp_schedule_txtimer+0x67/0xa0
[  471.739047][    C0]  j1939_sk_sendmsg+0x954/0xc00
[  471.743954][    C0]  ? __pfx_j1939_sk_sendmsg+0x10/0x10
[  471.749345][    C0]  __sock_sendmsg+0x140/0x180
[  471.754048][    C0]  ____sys_sendmsg+0x312/0x410
[  471.758854][    C0]  __sys_sendmmsg+0x227/0x4b0
[  471.763635][    C0]  __x64_sys_sendmmsg+0x57/0x70
[  471.768571][    C0]  x64_sys_call+0x29aa/0x2dc0
[  471.773308][    C0]  do_syscall_64+0xc9/0x1c0
[  471.777876][    C0]  ? clear_bhb_loop+0x55/0xb0
[  471.782674][    C0]  ? clear_bhb_loop+0x55/0xb0
[  471.787388][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.793320][    C0] RIP: 0033:0x7f992aaeff19
[  471.797751][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  471.817421][    C0] RSP: 002b:00007f9929146058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  471.825874][    C0] RAX: ffffffffffffffda RBX: 00007f992acb6080 RCX: 00007f992aaeff19
[  471.833919][    C0] RDX: 0000000000000001 RSI: 0000000020003e40 RDI: 0000000000000008
[  471.841932][    C0] RBP: 00007f992ab63986 R08: 0000000000000000 R09: 0000000000000000
[  471.849948][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  471.857979][    C0] R13: 0000000000000000 R14: 00007f992acb6080 R15: 00007fff43878278
[  471.866010][    C0]  </TASK>
[  471.869047][    C0] ---[ end trace 0000000000000000 ]---
[  471.945327][T23247] IPv6: Can't replace route, no match found
[  471.960156][T23243] FAULT_INJECTION: forcing a failure.
[  471.960156][T23243] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  471.973460][T23243] CPU: 0 UID: 0 PID: 23243 Comm: syz.8.5926 Tainted: G        W          6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0
[  471.985734][T23243] Tainted: [W]=WARN
[  471.989540][T23243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  471.999626][T23243] Call Trace:
[  472.002940][T23243]  <TASK>
[  472.005911][T23243]  dump_stack_lvl+0xf2/0x150
[  472.010565][T23243]  dump_stack+0x15/0x1a
[  472.014770][T23243]  should_fail_ex+0x223/0x230
[  472.019486][T23243]  should_fail+0xb/0x10
[  472.023689][T23243]  should_fail_usercopy+0x1a/0x20
[  472.028781][T23243]  copy_page_from_iter_atomic+0x228/0xf80
[  472.034519][T23243]  ? noop_dirty_folio+0x5d/0x70
[  472.039391][T23243]  ? shmem_write_begin+0xa2/0x180
[  472.044426][T23243]  ? shmem_write_begin+0xda/0x180
[  472.049545][T23243]  generic_perform_write+0x2f1/0x4a0
[  472.054850][T23243]  shmem_file_write_iter+0xc2/0xe0
[  472.059998][T23243]  vfs_write+0x77f/0x920
[  472.064256][T23243]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  472.070143][T23243]  ksys_write+0xe8/0x1b0
[  472.074401][T23243]  __x64_sys_write+0x42/0x50
[  472.079078][T23243]  x64_sys_call+0x287e/0x2dc0
[  472.083766][T23243]  do_syscall_64+0xc9/0x1c0
[  472.088342][T23243]  ? clear_bhb_loop+0x55/0xb0
[  472.093093][T23243]  ? clear_bhb_loop+0x55/0xb0
[  472.097788][T23243]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.103744][T23243] RIP: 0033:0x7f992aaeff19
[  472.108164][T23243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  472.127829][T23243] RSP: 002b:00007f9929167058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  472.136294][T23243] RAX: ffffffffffffffda RBX: 00007f992acb5fa0 RCX: 00007f992aaeff19
[  472.144279][T23243] RDX: 000000000000f000 RSI: 0000000020000200 RDI: 0000000000000004
[  472.152311][T23243] RBP: 00007f99291670a0 R08: 0000000000000000 R09: 0000000000000000
[  472.160287][T23243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  472.168265][T23243] R13: 0000000000000000 R14: 00007f992acb5fa0 R15: 00007fff43878278
[  472.176247][T23243]  </TASK>
[  472.212411][T23253] FAULT_INJECTION: forcing a failure.
[  472.212411][T23253] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  472.226318][T23253] CPU: 1 UID: 0 PID: 23253 Comm: syz.7.5930 Tainted: G        W          6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0
[  472.238686][T23253] Tainted: [W]=WARN
[  472.242502][T23253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  472.252613][T23253] Call Trace:
[  472.255935][T23253]  <TASK>
[  472.258920][T23253]  dump_stack_lvl+0xf2/0x150
[  472.263561][T23253]  dump_stack+0x15/0x1a
[  472.267818][T23253]  should_fail_ex+0x223/0x230
[  472.272561][T23253]  should_fail+0xb/0x10
[  472.276724][T23253]  should_fail_usercopy+0x1a/0x20
[  472.281764][T23253]  _copy_from_iter+0xd5/0xd00
[  472.286807][T23253]  ? kmalloc_reserve+0x16e/0x190
[  472.291794][T23253]  ? __build_skb_around+0x196/0x1f0
[  472.297045][T23253]  ? __alloc_skb+0x21f/0x310
[  472.301707][T23253]  ? __virt_addr_valid+0x1ed/0x250
[  472.306831][T23253]  ? __check_object_size+0x364/0x520
[  472.312169][T23253]  netlink_sendmsg+0x460/0x6e0
[  472.316946][T23253]  ? __pfx_netlink_sendmsg+0x10/0x10
[  472.322272][T23253]  __sock_sendmsg+0x140/0x180
[  472.326995][T23253]  ____sys_sendmsg+0x312/0x410
[  472.331767][T23253]  __sys_sendmsg+0x19d/0x230
[  472.336372][T23253]  __x64_sys_sendmsg+0x46/0x50
[  472.341143][T23253]  x64_sys_call+0x2734/0x2dc0
[  472.345820][T23253]  do_syscall_64+0xc9/0x1c0
[  472.350331][T23253]  ? clear_bhb_loop+0x55/0xb0
[  472.355022][T23253]  ? clear_bhb_loop+0x55/0xb0
[  472.359717][T23253]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.365660][T23253] RIP: 0033:0x7f2d1287ff19
[  472.370084][T23253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  472.389729][T23253] RSP: 002b:00007f2d10ef7058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  472.398161][T23253] RAX: ffffffffffffffda RBX: 00007f2d12a45fa0 RCX: 00007f2d1287ff19
[  472.406203][T23253] RDX: 0000000000000000 RSI: 0000000020001200 RDI: 0000000000000003
[  472.414212][T23253] RBP: 00007f2d10ef70a0 R08: 0000000000000000 R09: 0000000000000000
[  472.422184][T23253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  472.430154][T23253] R13: 0000000000000000 R14: 00007f2d12a45fa0 R15: 00007ffcdf524668
[  472.438167][T23253]  </TASK>
[  472.512121][   T29] kauditd_printk_skb: 357 callbacks suppressed
[  472.512144][   T29] audit: type=1400 audit(1733302333.678:25871): avc:  denied  { compute_member } for  pid=23262 comm="syz.7.5936" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  472.554733][T23263] vhci_hcd: invalid port number 157
[  472.559961][T23263] vhci_hcd: default hub control req: c1ef v21ba i009d l29779
[  472.571645][T23263] ip6t_rpfilter: unknown options
[  472.576498][T23265] @: renamed from bond0
[  472.602786][T23263] x_tables: duplicate underflow at hook 2
[  472.637894][T23270] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[  472.650381][T23270] SELinux: failed to load policy
[  472.712814][   T29] audit: type=1326 audit(1733302333.878:25872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23285 comm="syz.9.5943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f039488ff19 code=0x7ffc0000
[  472.736647][   T29] audit: type=1326 audit(1733302333.878:25873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23285 comm="syz.9.5943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f039488ff19 code=0x7ffc0000
[  472.760350][   T29] audit: type=1326 audit(1733302333.878:25874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23285 comm="syz.9.5943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f039488ff19 code=0x7ffc0000
[  472.784215][   T29] audit: type=1326 audit(1733302333.878:25875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23285 comm="syz.9.5943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f039488ff19 code=0x7ffc0000
[  472.807918][   T29] audit: type=1326 audit(1733302333.878:25876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23285 comm="syz.9.5943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f039488ff19 code=0x7ffc0000
[  472.831556][   T29] audit: type=1326 audit(1733302333.878:25877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23285 comm="syz.9.5943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f039488ff19 code=0x7ffc0000
[  472.855240][   T29] audit: type=1326 audit(1733302333.878:25878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23285 comm="syz.9.5943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f039488ff19 code=0x7ffc0000
[  472.878934][   T29] audit: type=1326 audit(1733302333.878:25879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23285 comm="syz.9.5943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f039488ff19 code=0x7ffc0000
[  472.902617][   T29] audit: type=1326 audit(1733302333.878:25880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23285 comm="syz.9.5943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f039488ff19 code=0x7ffc0000
[  473.220401][T23310] vhci_hcd: invalid port number 157
[  473.226471][T23310] vhci_hcd: default hub control req: c1ef v21ba i009d l29779
[  473.247403][T23310] ip6t_rpfilter: unknown options
[  473.259976][T23310] x_tables: duplicate underflow at hook 2
[  474.383325][T23360] batadv_slave_0: entered promiscuous mode
[  474.391139][T23360] netem: change failed
[  474.569463][T23380] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  474.615881][T23380] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  474.665129][T23380] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  474.726803][T23380] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  474.790380][T23393] loop1: detected capacity change from 0 to 8192
[  474.826941][T23380] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  474.849068][T23380] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  474.875304][T23380] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  474.897431][T23380] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  474.916873][T23400] syz.1.5985: attempt to access beyond end of device
[  474.916873][T23400] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  474.948016][T23403] vhci_hcd: invalid port number 157
[  474.953384][T23403] vhci_hcd: default hub control req: c1ef v21ba i009d l29779
[  474.957593][T23400] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1)
[  474.969362][T23400] FAT-fs (loop1): Filesystem has been set read-only
[  474.974683][T23403] ip6t_rpfilter: unknown options
[  474.983579][T23403] x_tables: duplicate underflow at hook 2
[  474.997790][T23400] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1)
[  475.019937][T23400] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1)
[  475.065226][T23405] vhci_hcd: invalid port number 157
[  475.070480][T23405] vhci_hcd: default hub control req: c1ef v21ba i009d l29779
[  475.106982][T23405] ip6t_rpfilter: unknown options
[  475.122331][T23405] x_tables: duplicate underflow at hook 2
[  475.247975][T23414] loop1: detected capacity change from 0 to 8192
[  475.409933][T23427] lo speed is unknown, defaulting to 1000
[  475.419966][T23427] lo speed is unknown, defaulting to 1000
[  475.426262][T23427] lo speed is unknown, defaulting to 1000
[  475.759374][T23440] vhci_hcd: invalid port number 157
[  475.764718][T23440] vhci_hcd: default hub control req: c1ef v21ba i009d l29779
[  475.788065][T23440] ip6t_rpfilter: unknown options
[  475.801253][T23440] x_tables: duplicate underflow at hook 2
[  475.848736][T23445] loop1: detected capacity change from 0 to 164
[  475.857874][T23445] Unable to read rock-ridge attributes
[  475.952946][T23445] IPv6: Can't replace route, no match found
[  476.057281][T23451] lo speed is unknown, defaulting to 1000
[  476.072661][T23451] lo speed is unknown, defaulting to 1000
[  476.081094][T23451] lo speed is unknown, defaulting to 1000
[  476.093905][T23455] bridge4: entered promiscuous mode
[  476.099249][T23455] bridge4: entered allmulticast mode
[  476.360922][T23471] netlink: 'syz.7.6011': attribute type 1 has an invalid length.
[  476.772415][T23478] pim6reg1: entered promiscuous mode
[  476.777921][T23478] pim6reg1: entered allmulticast mode
[  476.816883][T23481] IPv6: Can't replace route, no match found
[  477.465442][T23505] IPv6: Can't replace route, no match found
[  477.543754][T23512] __nla_validate_parse: 6 callbacks suppressed
[  477.543775][T23512] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6025'.
[  477.595991][T23515] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6025'.
[  477.605715][T23515] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6025'.
[  477.614835][T23515] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6025'.
[  477.626730][T23515] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6025'.
[  477.664590][   T29] kauditd_printk_skb: 361 callbacks suppressed
[  477.664607][   T29] audit: type=1326 audit(1733302338.838:26242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23516 comm="syz.7.6028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1287ff19 code=0x7ffc0000
[  477.694888][   T29] audit: type=1326 audit(1733302338.868:26243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23516 comm="syz.7.6028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1287ff19 code=0x7ffc0000
[  477.734305][   T29] audit: type=1326 audit(1733302338.888:26244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23516 comm="syz.7.6028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f2d1287ff19 code=0x7ffc0000
[  477.758037][   T29] audit: type=1326 audit(1733302338.888:26245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23516 comm="syz.7.6028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1287ff19 code=0x7ffc0000
[  477.781731][   T29] audit: type=1326 audit(1733302338.888:26246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23516 comm="syz.7.6028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1287ff19 code=0x7ffc0000
[  477.815563][   T29] audit: type=1326 audit(1733302338.988:26247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23520 comm="syz.5.6029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fefc3ff19 code=0x7ffc0000
[  477.839332][   T29] audit: type=1326 audit(1733302338.988:26248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23520 comm="syz.5.6029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f5fefc3ff19 code=0x7ffc0000
[  477.862888][   T29] audit: type=1326 audit(1733302338.988:26249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23520 comm="syz.5.6029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fefc3ff19 code=0x7ffc0000
[  477.886641][   T29] audit: type=1326 audit(1733302339.048:26250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23520 comm="syz.5.6029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5fefc3ff19 code=0x7ffc0000
[  477.910507][   T29] audit: type=1326 audit(1733302339.048:26251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23520 comm="syz.5.6029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fefc3ff19 code=0x7ffc0000
[  478.119318][T23547] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6038'.
[  478.148825][T23551] loop1: detected capacity change from 0 to 164
[  478.178368][T23551] Unable to read rock-ridge attributes
[  478.195109][T23551] IPv6: Can't replace route, no match found
[  478.772368][T23598] Cannot find del_set index 0 as target
[  478.779672][T23598] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6060'.
[  478.797124][T23598] bond0: (slave xfrm1): The slave device specified does not support setting the MAC address
[  478.813474][T23598] bond0: (slave xfrm1): Error -95 calling set_mac_address
[  478.847117][T23604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  478.855738][T23604] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  478.878394][T23598] bond0 (unregistering): Released all slaves
[  479.156801][T23624] ip6gre1: entered allmulticast mode
[  479.176008][T23624] futex_wake_op: syz.5.6070 tries to shift op by 144; fix this program
[  479.204531][T23624] xt_hashlimit: max too large, truncated to 1048576
[  479.385083][T23633] syz.9.6071[23633] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  479.385153][T23633] syz.9.6071[23633] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  479.396885][T23633] syz.9.6071[23633] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  479.755313][T23644] loop1: detected capacity change from 0 to 2048
[  479.808304][T23644] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  479.999679][T23655] FAULT_INJECTION: forcing a failure.
[  479.999679][T23655] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  480.013515][T23655] CPU: 1 UID: 0 PID: 23655 Comm: syz.7.6080 Tainted: G        W          6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0
[  480.025832][T23655] Tainted: [W]=WARN
[  480.029723][T23655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  480.039792][T23655] Call Trace:
[  480.043086][T23655]  <TASK>
[  480.046030][T23655]  dump_stack_lvl+0xf2/0x150
[  480.050693][T23655]  dump_stack+0x15/0x1a
[  480.054908][T23655]  should_fail_ex+0x223/0x230
[  480.059606][T23655]  should_fail+0xb/0x10
[  480.063854][T23655]  should_fail_usercopy+0x1a/0x20
[  480.068910][T23655]  copy_to_user_nofault+0x7d/0x110
[  480.074100][T23655]  bpf_probe_write_user+0x80/0xc0
[  480.079230][T23655]  bpf_prog_6303d92f98284ad8+0x44/0x48
[  480.084708][T23655]  bpf_trace_run2+0x104/0x1d0
[  480.089416][T23655]  ? kernelmode_fixup_or_oops+0x58/0xb0
[  480.095107][T23655]  ? ucma_query+0x925/0x9e0
[  480.099718][T23655]  ? ucma_query+0x925/0x9e0
[  480.104249][T23655]  __traceiter_kfree+0x2b/0x50
[  480.109032][T23655]  ? ucma_query+0x925/0x9e0
[  480.113562][T23655]  kfree+0x247/0x2f0
[  480.117479][T23655]  ucma_query+0x925/0x9e0
[  480.121840][T23655]  ? rb_next+0x4f/0x80
[  480.123423][T18988] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  480.125969][T23655]  ? _parse_integer+0x27/0x30
[  480.139597][T23655]  ? kstrtoull+0x110/0x140
[  480.144028][T23655]  ? kstrtouint+0x77/0xc0
[  480.148387][T23655]  ? kstrtouint_from_user+0xb0/0xe0
[  480.153786][T23655]  ? should_fail_ex+0xd7/0x230
[  480.158569][T23655]  ucma_write+0x1a4/0x240
[  480.162917][T23655]  ? __pfx_ucma_write+0x10/0x10
[  480.167789][T23655]  vfs_write+0x281/0x920
[  480.172098][T23655]  ? __fget_files+0x17c/0x1c0
[  480.176928][T23655]  ksys_write+0xe8/0x1b0
[  480.181190][T23655]  __x64_sys_write+0x42/0x50
[  480.185797][T23655]  x64_sys_call+0x287e/0x2dc0
[  480.190523][T23655]  do_syscall_64+0xc9/0x1c0
[  480.195035][T23655]  ? clear_bhb_loop+0x55/0xb0
[  480.199781][T23655]  ? clear_bhb_loop+0x55/0xb0
[  480.204469][T23655]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.210384][T23655] RIP: 0033:0x7f2d1287ff19
[  480.214856][T23655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  480.234548][T23655] RSP: 002b:00007f2d10ef7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  480.243022][T23655] RAX: ffffffffffffffda RBX: 00007f2d12a45fa0 RCX: 00007f2d1287ff19
[  480.251032][T23655] RDX: 0000000000000018 RSI: 00000000200000c0 RDI: 0000000000000004
[  480.259010][T23655] RBP: 00007f2d10ef70a0 R08: 0000000000000000 R09: 0000000000000000
[  480.267077][T23655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  480.275085][T23655] R13: 0000000000000000 R14: 00007f2d12a45fa0 R15: 00007ffcdf524668
[  480.283115][T23655]  </TASK>
[  480.309112][T23657] loop1: detected capacity change from 0 to 512
[  480.365215][T23657] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  480.379416][T23657] ext4 filesystem being mounted at /329/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  480.810325][T23708] FAULT_INJECTION: forcing a failure.
[  480.810325][T23708] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  480.823645][T23708] CPU: 0 UID: 0 PID: 23708 Comm: syz.5.6099 Tainted: G        W          6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0
[  480.835909][T23708] Tainted: [W]=WARN
[  480.839716][T23708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  480.849848][T23708] Call Trace:
[  480.853139][T23708]  <TASK>
[  480.856086][T23708]  dump_stack_lvl+0xf2/0x150
[  480.860747][T23708]  dump_stack+0x15/0x1a
[  480.864982][T23708]  should_fail_ex+0x223/0x230
[  480.869710][T23708]  should_fail_alloc_page+0xfd/0x110
[  480.875023][T23708]  __alloc_pages_noprof+0x109/0x340
[  480.880244][T23708]  alloc_pages_mpol_noprof+0xb1/0x1e0
[  480.885638][T23708]  folio_alloc_mpol_noprof+0x36/0x70
[  480.891152][T23708]  shmem_get_folio_gfp+0x3d1/0xd90
[  480.896295][T23708]  shmem_write_begin+0xa2/0x180
[  480.901174][T23708]  generic_perform_write+0x1a8/0x4a0
[  480.906533][T23708]  shmem_file_write_iter+0xc2/0xe0
[  480.911670][T23708]  do_iter_readv_writev+0x394/0x450
[  480.916950][T23708]  vfs_writev+0x2d4/0x880
[  480.921399][T23708]  ? proc_fail_nth_write+0x12a/0x150
[  480.926723][T23708]  __se_sys_pwritev2+0x100/0x1c0
[  480.931691][T23708]  __x64_sys_pwritev2+0x78/0x90
[  480.936590][T23708]  x64_sys_call+0x2afe/0x2dc0
[  480.941284][T23708]  do_syscall_64+0xc9/0x1c0
[  480.945870][T23708]  ? clear_bhb_loop+0x55/0xb0
[  480.950556][T23708]  ? clear_bhb_loop+0x55/0xb0
[  480.955257][T23708]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.961177][T23708] RIP: 0033:0x7f5fefc3ff19
[  480.965637][T23708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  480.985258][T23708] RSP: 002b:00007f5fee2b7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[  480.993771][T23708] RAX: ffffffffffffffda RBX: 00007f5fefe05fa0 RCX: 00007f5fefc3ff19
[  481.001841][T23708] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000004
[  481.009824][T23708] RBP: 00007f5fee2b70a0 R08: 0000000000000000 R09: 0000000000000003
[  481.017801][T23708] R10: 0000000000001200 R11: 0000000000000246 R12: 0000000000000002
[  481.025778][T23708] R13: 0000000000000000 R14: 00007f5fefe05fa0 R15: 00007ffd4475b518
[  481.033765][T23708]  </TASK>
[  481.179353][T23713] lo speed is unknown, defaulting to 1000
[  481.189108][T23725] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  481.191198][T18988] EXT4-fs error (device loop1): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  481.202160][T23713] lo speed is unknown, defaulting to 1000
[  481.214253][T18988] EXT4-fs error (device loop1): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  481.233425][T18988] EXT4-fs error (device loop1): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  481.239937][T23713] lo speed is unknown, defaulting to 1000
[  481.249470][T18988] EXT4-fs error (device loop1): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  481.270793][T18988] EXT4-fs error (device loop1): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  481.299258][T18988] EXT4-fs error (device loop1): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  481.313531][T18988] EXT4-fs error (device loop1): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  481.329830][T18988] EXT4-fs error (device loop1): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  481.360765][T18988] EXT4-fs error (device loop1): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  481.379693][T23713] chnl_net:caif_netlink_parms(): no params data found
[  481.392589][T18988] EXT4-fs error (device loop1): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  481.494772][T23751] FAULT_INJECTION: forcing a failure.
[  481.494772][T23751] name failslab, interval 1, probability 0, space 0, times 0
[  481.508019][T23751] CPU: 0 UID: 0 PID: 23751 Comm: syz.9.6114 Tainted: G        W          6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0
[  481.520307][T23751] Tainted: [W]=WARN
[  481.524123][T23751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  481.534200][T23751] Call Trace:
[  481.537488][T23751]  <TASK>
[  481.540429][T23751]  dump_stack_lvl+0xf2/0x150
[  481.545096][T23751]  dump_stack+0x15/0x1a
[  481.549386][T23751]  should_fail_ex+0x223/0x230
[  481.554185][T23751]  should_failslab+0x8f/0xb0
[  481.558905][T23751]  __kmalloc_node_track_caller_noprof+0xa8/0x410
[  481.565325][T23751]  ? v9fs_session_init+0x79/0xda0
[  481.570530][T23751]  kstrdup+0x38/0x80
[  481.574462][T23751]  v9fs_session_init+0x79/0xda0
[  481.579344][T23751]  ? should_fail_ex+0xd7/0x230
[  481.584221][T23751]  ? v9fs_mount+0x53/0x570
[  481.588724][T23751]  ? should_failslab+0x8f/0xb0
[  481.593520][T23751]  ? __kmalloc_cache_noprof+0x186/0x320
[  481.599142][T23751]  v9fs_mount+0x69/0x570
[  481.603536][T23751]  ? __pfx_v9fs_mount+0x10/0x10
[  481.608472][T23751]  legacy_get_tree+0x77/0xd0
[  481.613173][T23751]  vfs_get_tree+0x56/0x1e0
[  481.617657][T23751]  do_new_mount+0x227/0x690
[  481.622199][T23751]  path_mount+0x49b/0xb30
[  481.626586][T23751]  __se_sys_mount+0x27c/0x2d0
[  481.631436][T23751]  __x64_sys_mount+0x67/0x80
[  481.636089][T23751]  x64_sys_call+0x2c84/0x2dc0
[  481.640789][T23751]  do_syscall_64+0xc9/0x1c0
[  481.645356][T23751]  ? clear_bhb_loop+0x55/0xb0
[  481.650047][T23751]  ? clear_bhb_loop+0x55/0xb0
[  481.654768][T23751]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  481.660746][T23751] RIP: 0033:0x7f039488ff19
[  481.665258][T23751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  481.685032][T23751] RSP: 002b:00007f0392f07058 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  481.693482][T23751] RAX: ffffffffffffffda RBX: 00007f0394a55fa0 RCX: 00007f039488ff19
[  481.701566][T23751] RDX: 00000000200002c0 RSI: 0000000020000080 RDI: 0000000000000000
[  481.709563][T23751] RBP: 00007f0392f070a0 R08: 0000000020000400 R09: 0000000000000000
[  481.717567][T23751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  481.725573][T23751] R13: 0000000000000000 R14: 00007f0394a55fa0 R15: 00007ffff601fed8
[  481.733586][T23751]  </TASK>
[  481.795275][T23713] bridge0: port 1(bridge_slave_0) entered blocking state
[  481.802428][T23713] bridge0: port 1(bridge_slave_0) entered disabled state
[  481.809745][T23713] bridge_slave_0: entered allmulticast mode
[  481.816597][T23713] bridge_slave_0: entered promiscuous mode
[  481.823453][T23713] bridge0: port 2(bridge_slave_1) entered blocking state
[  481.830575][T23713] bridge0: port 2(bridge_slave_1) entered disabled state
[  481.837758][T23713] bridge_slave_1: entered allmulticast mode
[  481.844415][T23713] bridge_slave_1: entered promiscuous mode
[  481.869240][T18988] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  481.902236][T23713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  481.916877][T23713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  481.956641][T23713] team0: Port device team_slave_0 added
[  481.966712][T23713] team0: Port device team_slave_1 added
[  482.003163][T23713] batman_adv: batadv0: Adding interface: batadv_slave_0
[  482.010152][T23713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  482.036945][T23713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  482.062626][T23713] batman_adv: batadv0: Adding interface: batadv_slave_1
[  482.070445][T23713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  482.096713][T23713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  482.199697][T23713] hsr_slave_0: entered promiscuous mode
[  482.221263][T23713] hsr_slave_1: entered promiscuous mode
[  482.229746][T23713] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  482.239398][T23713] Cannot create hsr debugfs directory
[  482.348893][T23770] lo speed is unknown, defaulting to 1000
[  482.357434][T23770] lo speed is unknown, defaulting to 1000
[  482.363863][T23770] lo speed is unknown, defaulting to 1000
[  482.514652][T23770] chnl_net:caif_netlink_parms(): no params data found
[  482.552270][T23814] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6134'.
[  482.609299][T23770] bridge0: port 1(bridge_slave_0) entered blocking state
[  482.616621][T23770] bridge0: port 1(bridge_slave_0) entered disabled state
[  482.627916][T23770] bridge_slave_0: entered allmulticast mode
[  482.634897][T23770] bridge_slave_0: entered promiscuous mode
[  482.642122][T23770] bridge0: port 2(bridge_slave_1) entered blocking state
[  482.649346][T23770] bridge0: port 2(bridge_slave_1) entered disabled state
[  482.659107][T23770] bridge_slave_1: entered allmulticast mode
[  482.667831][T23770] bridge_slave_1: entered promiscuous mode
[  482.701449][T23770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  482.712717][   T29] kauditd_printk_skb: 493 callbacks suppressed
[  482.712736][   T29] audit: type=1326 audit(1733302343.878:26745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23803 comm="syz.5.6133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fefc3ff19 code=0x7ffc0000
[  482.742487][   T29] audit: type=1326 audit(1733302343.878:26746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23803 comm="syz.5.6133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fefc3ff19 code=0x7ffc0000
[  482.757248][T23770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  482.800525][T23770] team0: Port device team_slave_0 added
[  482.807291][T23770] team0: Port device team_slave_1 added
[  482.837038][T23770] batman_adv: batadv0: Adding interface: batadv_slave_0
[  482.837692][T23821] netlink: 44 bytes leftover after parsing attributes in process `syz.9.6136'.
[  482.844109][T23770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  482.844149][T23770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  482.844995][T23770] batman_adv: batadv0: Adding interface: batadv_slave_1
[  482.898016][T23770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  482.924606][T23770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  482.956338][   T29] audit: type=1326 audit(1733302344.128:26747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23830 comm="syz.5.6138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fefc3ff19 code=0x7ffc0000
[  482.980095][   T29] audit: type=1326 audit(1733302344.128:26748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23830 comm="syz.5.6138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fefc3ff19 code=0x7ffc0000
[  483.003791][   T29] audit: type=1326 audit(1733302344.128:26749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23830 comm="syz.5.6138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f5fefc3ff19 code=0x7ffc0000
[  483.028099][   T29] audit: type=1326 audit(1733302344.128:26750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23830 comm="syz.5.6138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fefc3ff19 code=0x7ffc0000
[  483.051786][   T29] audit: type=1326 audit(1733302344.128:26751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23830 comm="syz.5.6138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fefc3ff19 code=0x7ffc0000
[  483.081791][T23770] hsr_slave_0: entered promiscuous mode
[  483.088371][T23770] hsr_slave_1: entered promiscuous mode
[  483.096917][T23770] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  483.105172][T23770] Cannot create hsr debugfs directory
[  483.119947][T23835] netlink: 'syz.9.6140': attribute type 3 has an invalid length.
[  483.168320][   T29] audit: type=1326 audit(1733302344.338:26752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23839 comm="syz.5.6142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fefc3ff19 code=0x7ffc0000
[  483.192248][   T29] audit: type=1326 audit(1733302344.338:26753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23839 comm="syz.5.6142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5fefc3ff19 code=0x7ffc0000
[  483.216505][   T29] audit: type=1326 audit(1733302344.338:26754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23839 comm="syz.5.6142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fefc3ff19 code=0x7ffc0000
[  483.247728][T23713] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  483.268174][T23713] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  483.286628][T23713] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  483.332368][T23713] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  483.609659][T23713] 8021q: adding VLAN 0 to HW filter on device bond0
[  483.622531][T23713] 8021q: adding VLAN 0 to HW filter on device team0
[  483.646799][T23713] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  483.657254][T23713] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  483.675528][ T4544] bridge0: port 1(bridge_slave_0) entered blocking state
[  483.682643][ T4544] bridge0: port 1(bridge_slave_0) entered forwarding state
[  483.712423][ T4544] bridge0: port 2(bridge_slave_1) entered blocking state
[  483.719555][ T4544] bridge0: port 2(bridge_slave_1) entered forwarding state
[  483.957100][T23891] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6151'.
[  483.967277][T23713] 8021q: adding VLAN 0 to HW filter on device batadv0
[  483.978558][T23891] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=23891 comm=syz.5.6151
[  483.999330][T23891] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6151'.
[  484.015577][T23770] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  484.024769][T23770] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  484.052163][T23770] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  484.077450][T23770] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  484.211222][T23921] vhci_hcd: invalid port number 157
[  484.216629][T23921] vhci_hcd: default hub control req: c1ef v21ba i009d l29779
[  484.238462][T23770] 8021q: adding VLAN 0 to HW filter on device bond0
[  484.246617][T23921] ip6t_rpfilter: unknown options
[  484.252793][T23921] x_tables: duplicate underflow at hook 2
[  484.268984][T23770] 8021q: adding VLAN 0 to HW filter on device team0
[  484.279860][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  484.286954][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  484.326865][ T4544] bridge0: port 2(bridge_slave_1) entered blocking state
[  484.334011][ T4544] bridge0: port 2(bridge_slave_1) entered forwarding state
[  484.355366][T23713] veth0_vlan: entered promiscuous mode
[  484.406689][T23713] veth1_vlan: entered promiscuous mode
[  484.449600][T23713] veth0_macvtap: entered promiscuous mode
[  484.457506][T23713] veth1_macvtap: entered promiscuous mode
[  484.467723][T23713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  484.478979][T23713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  484.488962][T23713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  484.499517][T23713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  484.510121][T23713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  484.520608][T23713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  484.530662][T23713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  484.541860][T23713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  484.553433][T23713] batman_adv: batadv0: Interface activated: batadv_slave_0
[  484.561887][T23713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  484.573030][T23713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  484.582924][T23713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  484.593460][T23713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  484.604057][T23713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  484.614612][T23713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  484.624500][T23713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  484.635729][T23713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  484.645594][T23713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  484.656138][T23713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  484.667844][T23713] batman_adv: batadv0: Interface activated: batadv_slave_1
[  484.706905][T23713] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  484.715773][T23713] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  484.725247][T23713] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  484.734051][T23713] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  484.763682][T23770] 8021q: adding VLAN 0 to HW filter on device batadv0
[  485.001618][T23770] veth0_vlan: entered promiscuous mode
[  485.022237][T23770] veth1_vlan: entered promiscuous mode
[  485.084929][T23770] veth0_macvtap: entered promiscuous mode
[  485.098842][T23770] veth1_macvtap: entered promiscuous mode
[  485.123391][T23770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  485.134029][T23770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  485.143942][T23770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  485.154568][T23770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  485.164479][T23770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  485.174980][T23770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  485.184883][T23770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  485.195424][T23770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  485.205356][T23770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  485.209851][T24013] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6168'.
[  485.215828][T23770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  485.327088][T23770] batman_adv: batadv0: Interface activated: batadv_slave_0
[  485.357175][T23770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  485.367669][T23770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  485.377568][T23770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  485.388065][T23770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  485.397956][T23770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  485.408496][T23770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  485.418531][T23770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  485.429225][T23770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  485.439173][T23770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  485.449647][T23770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  485.459509][T23770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  485.470051][T23770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  485.526211][T23770] batman_adv: batadv0: Interface activated: batadv_slave_1
[  485.544345][T23770] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  485.553166][T23770] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  485.561954][T23770] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  485.571390][T23770] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  485.825644][T24062] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6180'.
[  486.152099][T24106] vhci_hcd: invalid port number 157
[  486.157424][T24106] vhci_hcd: default hub control req: c1ef v21ba i009d l29779
[  486.188000][T24106] ip6t_rpfilter: unknown options
[  486.199342][T24106] x_tables: duplicate underflow at hook 2
[  486.219824][T24119] netlink: 'syz.9.6191': attribute type 13 has an invalid length.
[  486.244908][T24119] gretap0: refused to change device tx_queue_len
[  486.255820][T24119] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  486.271703][T24122] veth0_to_team: entered promiscuous mode
[  486.277627][T24122] veth0_to_team: entered allmulticast mode
[  486.308392][T24126] serio: Serial port ttyS3
[  486.513438][T24165] Invalid ELF header magic: != ELF
[  486.580448][T16468] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  486.588651][T16468] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  486.595341][T24175] program syz.7.6205 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  486.596223][T16468] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  486.613503][T16468] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  486.620976][T16468] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  486.628451][T16468] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  486.635883][T16468] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  486.643973][T16468] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  486.651437][T16468] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  486.659022][T16468] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  486.666462][T16468] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  486.674663][T16468] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  486.682095][T16468] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  486.689528][T16468] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  486.696948][T16468] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  486.705057][T16468] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  486.712516][T16468] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  486.720022][T16468] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  486.727524][T16468] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  486.735607][T16468] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  486.743107][T16468] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  486.750526][T16468] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  486.758149][T16468] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  486.766283][T16468] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  486.773783][T16468] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  486.781230][T16468] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  486.788665][T16468] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  486.796862][T16468] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  486.804283][T16468] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  486.811789][T16468] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  486.819498][T16468] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  486.827704][T16468] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  486.835328][T16468] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  486.842869][T16468] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  486.850356][T16468] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  486.858640][T16468] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  486.866183][T16468] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  486.873692][T16468] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  486.881172][T16468] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  486.889426][T16468] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  486.896926][T16468] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  486.904390][T16468] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  486.911804][T16468] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  486.925570][T16468] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  487.547114][T24282] syzkaller0: entered promiscuous mode
[  487.552642][T24282] syzkaller0: entered allmulticast mode
[  487.747232][   T29] kauditd_printk_skb: 486 callbacks suppressed
[  487.747308][   T29] audit: type=1326 audit(1733302348.918:27241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24304 comm="syz.8.6230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992aaeff19 code=0x7ffc0000
[  487.789789][   T29] audit: type=1326 audit(1733302348.918:27242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24304 comm="syz.8.6230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f992aaeff19 code=0x7ffc0000
[  487.813653][   T29] audit: type=1326 audit(1733302348.918:27243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24304 comm="syz.8.6230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992aaeff19 code=0x7ffc0000
[  487.837337][   T29] audit: type=1326 audit(1733302348.918:27244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24304 comm="syz.8.6230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f992aaeff19 code=0x7ffc0000
[  487.861092][   T29] audit: type=1326 audit(1733302348.918:27245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24304 comm="syz.8.6230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992aaeff19 code=0x7ffc0000
[  487.884757][   T29] audit: type=1326 audit(1733302348.918:27246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24304 comm="syz.8.6230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f992aaeff19 code=0x7ffc0000
[  487.908458][   T29] audit: type=1326 audit(1733302348.918:27247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24304 comm="syz.8.6230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992aaeff19 code=0x7ffc0000
[  487.932116][   T29] audit: type=1326 audit(1733302348.918:27248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24304 comm="syz.8.6230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f992aaeff19 code=0x7ffc0000
[  487.955925][   T29] audit: type=1326 audit(1733302348.918:27249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24304 comm="syz.8.6230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992aaeff19 code=0x7ffc0000
[  487.979624][   T29] audit: type=1326 audit(1733302348.918:27250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24304 comm="syz.8.6230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f992aaeff19 code=0x7ffc0000
[  488.151820][T24346] netlink: 'syz.9.6237': attribute type 10 has an invalid length.
[  488.159742][T24346] netlink: 2 bytes leftover after parsing attributes in process `syz.9.6237'.
[  488.178702][T24350] siw: device registration error -23
[  488.212854][T24346] team0: entered promiscuous mode
[  488.217997][T24346] team_slave_0: entered promiscuous mode
[  488.220242][T24354] FAULT_INJECTION: forcing a failure.
[  488.220242][T24354] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  488.223735][T24346] team_slave_1: entered promiscuous mode
[  488.237600][T24354] CPU: 1 UID: 0 PID: 24354 Comm: syz.2.6240 Tainted: G        W          6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0
[  488.254878][T24354] Tainted: [W]=WARN
[  488.258723][T24354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  488.268920][T24354] Call Trace:
[  488.272281][T24354]  <TASK>
[  488.275225][T24354]  dump_stack_lvl+0xf2/0x150
[  488.279858][T24354]  dump_stack+0x15/0x1a
[  488.284096][T24354]  should_fail_ex+0x223/0x230
[  488.288827][T24354]  should_fail_alloc_page+0xfd/0x110
[  488.294218][T24354]  __alloc_pages_noprof+0x109/0x340
[  488.299482][T24354]  alloc_pages_mpol_noprof+0xb1/0x1e0
[  488.304910][T24354]  vma_alloc_folio_noprof+0x1a0/0x2f0
[  488.310344][T24354]  do_wp_page+0x64b/0x2340
[  488.314820][T24354]  ? __rcu_read_lock+0x36/0x50
[  488.319628][T24354]  handle_mm_fault+0xc63/0x2ac0
[  488.324582][T24354]  exc_page_fault+0x3b9/0x650
[  488.329383][T24354]  asm_exc_page_fault+0x26/0x30
[  488.334347][T24354] RIP: 0033:0x7efd38311990
[  488.338782][T24354] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41
[  488.358470][T24354] RSP: 002b:00007efd36ac64c0 EFLAGS: 00010202
[  488.364588][T24354] RAX: 0000000000004005 RBX: 00007efd36ac6560 RCX: 000000000000000f
[  488.372661][T24354] RDX: 00000000000001ff RSI: 0000000000000400 RDI: 00007efd36ac6600
[  488.380654][T24354] RBP: 0000000000000010 R08: 00007efd2e6a7000 R09: 0000000000000004
[  488.388755][T24354] R10: 0000000020000402 R11: 0000000000000448 R12: 0000000000000301
[  488.396757][T24354] R13: 00007efd384d8300 R14: 0000000000000013 R15: 00007efd36ac6600
[  488.404801][T24354]  </TASK>
[  488.407938][T24354] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  488.421200][T24354] loop2: detected capacity change from 0 to 512
[  488.441633][T24354] EXT4-fs: Ignoring removed oldalloc option
[  488.591289][T24357] lo speed is unknown, defaulting to 1000
[  488.598360][T24357] lo speed is unknown, defaulting to 1000
[  488.606297][T24357] lo speed is unknown, defaulting to 1000
[  488.663106][T24354] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.6240: Parent and EA inode have the same ino 15
[  488.685731][T24354] EXT4-fs (loop2): Remounting filesystem read-only
[  488.692303][T24354] EXT4-fs warning (device loop2): ext4_evict_inode:259: couldn't mark inode dirty (err -5)
[  488.733084][T24354] EXT4-fs (loop2): 1 orphan inode deleted
[  488.748434][T24354] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  488.762106][T24354] SELinux: (dev loop2, type ext4) getxattr errno 5
[  488.777911][T24354] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  488.817884][T24357] chnl_net:caif_netlink_parms(): no params data found
[  488.980411][T24357] bridge0: port 1(bridge_slave_0) entered blocking state
[  488.987580][T24357] bridge0: port 1(bridge_slave_0) entered disabled state
[  489.032550][T24357] bridge_slave_0: entered allmulticast mode
[  489.061380][T24357] bridge_slave_0: entered promiscuous mode
[  489.082132][T24357] bridge0: port 2(bridge_slave_1) entered blocking state
[  489.089317][T24357] bridge0: port 2(bridge_slave_1) entered disabled state
[  489.096532][T24357] bridge_slave_1: entered allmulticast mode
[  489.103435][T24357] bridge_slave_1: entered promiscuous mode
[  489.133690][T24357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  489.145160][T24442] FAULT_INJECTION: forcing a failure.
[  489.145160][T24442] name failslab, interval 1, probability 0, space 0, times 0
[  489.157892][T24442] CPU: 0 UID: 0 PID: 24442 Comm: syz.2.6252 Tainted: G        W          6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0
[  489.170187][T24442] Tainted: [W]=WARN
[  489.174002][T24442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  489.184223][T24442] Call Trace:
[  489.187525][T24442]  <TASK>
[  489.190498][T24442]  dump_stack_lvl+0xf2/0x150
[  489.195129][T24442]  dump_stack+0x15/0x1a
[  489.199382][T24442]  should_fail_ex+0x223/0x230
[  489.204146][T24442]  should_failslab+0x8f/0xb0
[  489.208788][T24442]  kmem_cache_alloc_noprof+0x52/0x320
[  489.214210][T24442]  ? security_inode_alloc+0x37/0x100
[  489.215185][T24357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  489.219529][T24442]  security_inode_alloc+0x37/0x100
[  489.233687][T24442]  inode_init_always_gfp+0x4a2/0x4f0
[  489.239016][T24442]  ? __pfx_proc_alloc_inode+0x10/0x10
[  489.244461][T24442]  alloc_inode+0x82/0x160
[  489.248809][T24442]  new_inode+0x1e/0x100
[  489.253006][T24442]  proc_pid_make_inode+0x1d/0xd0
[  489.258068][T24442]  proc_ns_dir_lookup+0x138/0x220
[  489.263139][T24442]  ? __pfx_proc_ns_dir_lookup+0x10/0x10
[  489.268759][T24442]  path_openat+0xd40/0x1fa0
[  489.273334][T24442]  do_filp_open+0x107/0x230
[  489.277941][T24442]  ? __pfx_kfree_link+0x10/0x10
[  489.282845][T24442]  do_sys_openat2+0xab/0x120
[  489.287513][T24442]  __x64_sys_openat+0xf3/0x120
[  489.292312][T24442]  x64_sys_call+0x2b30/0x2dc0
[  489.297046][T24442]  do_syscall_64+0xc9/0x1c0
[  489.301618][T24442]  ? clear_bhb_loop+0x55/0xb0
[  489.306303][T24442]  ? clear_bhb_loop+0x55/0xb0
[  489.310990][T24442]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  489.316925][T24442] RIP: 0033:0x7efd3844e880
[  489.321373][T24442] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44
[  489.341081][T24442] RSP: 002b:00007efd36ac6f80 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  489.349566][T24442] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007efd3844e880
[  489.357543][T24442] RDX: 0000000000000000 RSI: 00007efd384c3a9e RDI: 00000000ffffff9c
[  489.365591][T24442] RBP: 00007efd384c3a9e R08: 0000000000000000 R09: 0000000000000000
[  489.373619][T24442] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[  489.381655][T24442] R13: 0000000000000000 R14: 00007efd38615fa0 R15: 00007ffcda1ac488
[  489.389649][T24442]  </TASK>
[  489.406074][T24357] team0: Port device team_slave_0 added
[  489.415047][T24357] team0: Port device team_slave_1 added
[  489.462382][T24357] batman_adv: batadv0: Adding interface: batadv_slave_0
[  489.469441][T24357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  489.495413][T24357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  489.516581][T24357] batman_adv: batadv0: Adding interface: batadv_slave_1
[  489.523633][T24357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  489.552184][T24357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  489.589100][T24463] IPVS: Error connecting to the multicast addr
[  489.603932][T24357] hsr_slave_0: entered promiscuous mode
[  489.610134][T24357] hsr_slave_1: entered promiscuous mode
[  489.622743][T24357] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  489.636264][T24357] Cannot create hsr debugfs directory
[  489.648779][T24463] pimreg: entered allmulticast mode
[  489.874359][T24357] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  489.974295][T24357] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.034457][T24357] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.094377][T24357] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.211369][T24357] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  490.242746][T24357] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  490.266030][T24357] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  490.288932][T24357] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  490.463479][T24357] 8021q: adding VLAN 0 to HW filter on device bond0
[  490.504143][T24357] 8021q: adding VLAN 0 to HW filter on device team0
[  490.534773][ T4544] bridge0: port 1(bridge_slave_0) entered blocking state
[  490.541940][ T4544] bridge0: port 1(bridge_slave_0) entered forwarding state
[  490.584492][ T4544] bridge0: port 2(bridge_slave_1) entered blocking state
[  490.591600][ T4544] bridge0: port 2(bridge_slave_1) entered forwarding state
[  490.627103][T24510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6264'.
[  490.647331][T24357] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  490.856107][T24357] 8021q: adding VLAN 0 to HW filter on device batadv0
[  491.198690][T24357] veth0_vlan: entered promiscuous mode
[  491.207559][T24357] veth1_vlan: entered promiscuous mode
[  491.222311][T24551] tipc: Started in network mode
[  491.227966][T24551] tipc: Node identity 4, cluster identity 4711
[  491.234372][T24551] tipc: Node number set to 4
[  491.236472][T24553] netlink: 3 bytes leftover after parsing attributes in process `syz.9.6275'.
[  491.249184][T24357] veth0_macvtap: entered promiscuous mode
[  491.256791][T24357] veth1_macvtap: entered promiscuous mode
[  491.267677][T24357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  491.278206][T24357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  491.288097][T24357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  491.298630][T24357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  491.308524][T24357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  491.319033][T24357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  491.328885][T24357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  491.339392][T24357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  491.349265][T24357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  491.359851][T24357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  491.369723][T24357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  491.380151][T24357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  491.391361][T24357] batman_adv: batadv0: Interface activated: batadv_slave_0
[  491.403847][T24553] IPv6: Can't replace route, no match found
[  491.411255][T24357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  491.421813][T24357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  491.431853][T24357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  491.442470][T24357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  491.452381][T24357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  491.462844][T24357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  491.472808][T24357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  491.483278][T24357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  491.493208][T24357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  491.503835][T24357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  491.513797][T24357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  491.524260][T24357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  491.534173][T24357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  491.544624][T24357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  491.555152][T24357] batman_adv: batadv0: Interface activated: batadv_slave_1
[  491.569320][T24556] bridge1: entered promiscuous mode
[  491.574680][T24556] bridge1: entered allmulticast mode
[  491.599177][T24555] lo speed is unknown, defaulting to 1000
[  491.610788][T24357] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  491.619689][T24357] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  491.628567][T24357] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  491.637369][T24357] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  491.678110][T24562] bridge9: entered promiscuous mode
[  491.683399][T24562] bridge9: entered allmulticast mode
[  491.692578][T24555] lo speed is unknown, defaulting to 1000
[  491.692611][T24560] lo speed is unknown, defaulting to 1000
[  491.705542][T24555] lo speed is unknown, defaulting to 1000
[  491.728727][T24560] lo speed is unknown, defaulting to 1000
[  491.743329][T24560] lo speed is unknown, defaulting to 1000
[  491.813195][T24573] lo speed is unknown, defaulting to 1000
[  491.852385][T24573] lo speed is unknown, defaulting to 1000
[  491.873800][T24576] netlink: 16402 bytes leftover after parsing attributes in process `‡&/ç'.
[  491.893518][T24573] lo speed is unknown, defaulting to 1000
[  492.089540][T24596] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6289'.
[  492.262387][T24616] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  492.301811][T24618] lo speed is unknown, defaulting to 1000
[  492.327047][T24618] lo speed is unknown, defaulting to 1000
[  492.342123][T24618] lo speed is unknown, defaulting to 1000
[  492.353245][T24583] lo speed is unknown, defaulting to 1000
[  492.372556][T24628] bridge10: entered promiscuous mode
[  492.377985][T24628] bridge10: entered allmulticast mode
[  492.379051][T24632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  492.392521][T24632] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  492.479837][T24583] lo speed is unknown, defaulting to 1000
[  492.486042][T24583] lo speed is unknown, defaulting to 1000
[  492.792650][   T29] kauditd_printk_skb: 512 callbacks suppressed
[  492.792667][   T29] audit: type=1326 audit(1733302353.958:27763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24642 comm="syz.2.6306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3844ff19 code=0x7ffc0000
[  492.863233][   T29] audit: type=1326 audit(1733302353.988:27764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24642 comm="syz.2.6306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3844ff19 code=0x7ffc0000
[  492.887577][   T29] audit: type=1400 audit(1733302354.028:27765): avc:  denied  { ioctl } for  pid=24651 comm="syz.7.6308" path="socket:[77487]" dev="sockfs" ino=77487 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  492.945719][T24655] veth0_vlan: left promiscuous mode
[  492.951989][T24655] veth0_vlan: entered promiscuous mode
[  493.001729][ T4544] bridge_slave_1: left allmulticast mode
[  493.007465][ T4544] bridge_slave_1: left promiscuous mode
[  493.013303][ T4544] bridge0: port 2(bridge_slave_1) entered disabled state
[  493.024271][   T29] audit: type=1326 audit(1733302354.198:27766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24660 comm="syz.8.6311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7512beff19 code=0x7ffc0000
[  493.049311][ T4544] bridge_slave_0: left allmulticast mode
[  493.055161][ T4544] bridge_slave_0: left promiscuous mode
[  493.060826][ T4544] bridge0: port 1(bridge_slave_0) entered disabled state
[  493.062743][   T29] audit: type=1326 audit(1733302354.218:27767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24660 comm="syz.8.6311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7512beff19 code=0x7ffc0000
[  493.092243][   T29] audit: type=1326 audit(1733302354.218:27768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24660 comm="syz.8.6311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7512beff19 code=0x7ffc0000
[  493.116551][   T29] audit: type=1326 audit(1733302354.218:27769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24660 comm="syz.8.6311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7512beff19 code=0x7ffc0000
[  493.140225][   T29] audit: type=1326 audit(1733302354.218:27770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24660 comm="syz.8.6311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7512beff19 code=0x7ffc0000
[  493.164655][   T29] audit: type=1326 audit(1733302354.218:27771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24660 comm="syz.8.6311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7512beff19 code=0x7ffc0000
[  493.188278][   T29] audit: type=1326 audit(1733302354.218:27772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24660 comm="syz.8.6311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7512beff19 code=0x7ffc0000
[  493.272348][T24668] netlink: 224 bytes leftover after parsing attributes in process `syz.9.6314'.
[  493.281502][T24668] netlink: 72 bytes leftover after parsing attributes in process `syz.9.6314'.
[  493.655712][ T4544] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  493.666541][ T4544] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  493.676339][ T4544] bond0 (unregistering): Released all slaves
[  493.684984][ T4544] team0: Port device bond1 removed
[  493.690922][ T4544] bond1 (unregistering): Released all slaves
[  493.703867][T24583] chnl_net:caif_netlink_parms(): no params data found
[  493.759141][T24583] bridge0: port 1(bridge_slave_0) entered blocking state
[  493.766485][T24583] bridge0: port 1(bridge_slave_0) entered disabled state
[  493.774430][T24583] bridge_slave_0: entered allmulticast mode
[  493.781275][T24583] bridge_slave_0: entered promiscuous mode
[  493.788289][T24583] bridge0: port 2(bridge_slave_1) entered blocking state
[  493.795591][T24583] bridge0: port 2(bridge_slave_1) entered disabled state
[  493.810542][T24583] bridge_slave_1: entered allmulticast mode
[  493.821920][T24583] bridge_slave_1: entered promiscuous mode
[  493.843521][ T4544] batman_adv: batadv0: Removing interface: team0
[  493.852980][ T4544] batman_adv: batadv0: Removing interface: batadv_slave_0
[  493.860573][ T4544] batman_adv: batadv0: Removing interface: batadv_slave_1
[  493.873865][ T4544] pimreg (unregistering): left allmulticast mode
[  493.910212][ T4544] team0 (unregistering): Port device team_slave_1 removed
[  493.920147][ T4544] team0 (unregistering): Port device team_slave_0 removed
[  493.988424][T24583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  493.997824][T16464] lo speed is unknown, defaulting to 1000
[  494.000554][T24701] lo speed is unknown, defaulting to 1000
[  494.015223][T24583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  494.028802][T24705] bridge1: entered promiscuous mode
[  494.034078][T24705] bridge1: entered allmulticast mode
[  494.059808][T24701] lo speed is unknown, defaulting to 1000
[  494.067176][T24583] team0: Port device team_slave_0 added
[  494.084236][T24583] team0: Port device team_slave_1 added
[  494.136267][T24583] batman_adv: batadv0: Adding interface: batadv_slave_0
[  494.143305][T24583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  494.169343][T24583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  494.180992][T24583] batman_adv: batadv0: Adding interface: batadv_slave_1
[  494.188039][T24583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  494.214121][T24583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  494.277800][T24583] hsr_slave_0: entered promiscuous mode
[  494.286808][T24583] hsr_slave_1: entered promiscuous mode
[  494.303962][T24583] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  494.311528][T24583] Cannot create hsr debugfs directory
[  494.335496][T24726] FAULT_INJECTION: forcing a failure.
[  494.335496][T24726] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  494.349333][T24726] CPU: 1 UID: 0 PID: 24726 Comm: syz.7.6332 Tainted: G        W          6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0
[  494.361731][T24726] Tainted: [W]=WARN
[  494.365649][T24726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  494.375751][T24726] Call Trace:
[  494.379109][T24726]  <TASK>
[  494.382096][T24726]  dump_stack_lvl+0xf2/0x150
[  494.386711][T24726]  dump_stack+0x15/0x1a
[  494.390950][T24726]  should_fail_ex+0x223/0x230
[  494.395642][T24726]  should_fail+0xb/0x10
[  494.399819][T24726]  should_fail_usercopy+0x1a/0x20
[  494.404855][T24726]  _copy_from_iter+0xd5/0xd00
[  494.409548][T24726]  ? kmalloc_reserve+0x16e/0x190
[  494.414541][T24726]  ? __build_skb_around+0x196/0x1f0
[  494.419854][T24726]  ? __alloc_skb+0x21f/0x310
[  494.424464][T24726]  ? __virt_addr_valid+0x1ed/0x250
[  494.429692][T24726]  ? __check_object_size+0x364/0x520
[  494.434993][T24726]  netlink_sendmsg+0x460/0x6e0
[  494.439838][T24726]  ? __pfx_netlink_sendmsg+0x10/0x10
[  494.445242][T24726]  __sock_sendmsg+0x140/0x180
[  494.450424][T24726]  sock_write_iter+0x15e/0x1a0
[  494.455284][T24726]  vfs_write+0x77f/0x920
[  494.459565][T24726]  ? __pfx_sock_write_iter+0x10/0x10
[  494.464866][T24726]  ksys_write+0xe8/0x1b0
[  494.469188][T24726]  __x64_sys_write+0x42/0x50
[  494.473788][T24726]  x64_sys_call+0x287e/0x2dc0
[  494.478508][T24726]  do_syscall_64+0xc9/0x1c0
[  494.483054][T24726]  ? clear_bhb_loop+0x55/0xb0
[  494.487757][T24726]  ? clear_bhb_loop+0x55/0xb0
[  494.492438][T24726]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  494.498357][T24726] RIP: 0033:0x7fc91cb0ff19
[  494.502776][T24726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  494.522466][T24726] RSP: 002b:00007fc91b187058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  494.530964][T24726] RAX: ffffffffffffffda RBX: 00007fc91ccd5fa0 RCX: 00007fc91cb0ff19
[  494.538939][T24726] RDX: 0000000000000085 RSI: 0000000020000000 RDI: 0000000000000004
[  494.547011][T24726] RBP: 00007fc91b1870a0 R08: 0000000000000000 R09: 0000000000000000
[  494.554996][T24726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  494.563046][T24726] R13: 0000000000000000 R14: 00007fc91ccd5fa0 R15: 00007ffd1fe2a0f8
[  494.571084][T24726]  </TASK>
[  494.741417][T24739] vhci_hcd: invalid port number 157
[  494.746762][T24739] vhci_hcd: default hub control req: c1ef v21ba i009d l29779
[  494.755047][T24739] ip6t_rpfilter: unknown options
[  494.760309][T24739] x_tables: duplicate underflow at hook 2
[  494.822564][T24749] netlink: 60 bytes leftover after parsing attributes in process `syz.9.6342'.
[  494.872613][T24751] lo speed is unknown, defaulting to 1000
[  494.885558][T24751] lo speed is unknown, defaulting to 1000
[  494.891988][T24755] lo speed is unknown, defaulting to 1000
[  494.901220][T24755] lo speed is unknown, defaulting to 1000
[  494.920313][T24753] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6343'.
[  494.951917][T24757] bridge2: entered promiscuous mode
[  494.957179][T24757] bridge2: entered allmulticast mode
[  495.022145][T24583] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  495.063041][T24583] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  495.106966][T24583] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  495.119959][T24583] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  495.177622][T24583] 8021q: adding VLAN 0 to HW filter on device bond0
[  495.199206][T24583] 8021q: adding VLAN 0 to HW filter on device team0
[  495.224017][T24583] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  495.234555][T24583] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  495.285911][T13729] bridge0: port 1(bridge_slave_0) entered blocking state
[  495.293070][T13729] bridge0: port 1(bridge_slave_0) entered forwarding state
[  495.307125][T13729] bridge0: port 2(bridge_slave_1) entered blocking state
[  495.314229][T13729] bridge0: port 2(bridge_slave_1) entered forwarding state
[  495.404703][T24583] 8021q: adding VLAN 0 to HW filter on device batadv0
[  495.461406][T24786] loop2: detected capacity change from 0 to 8192
[  495.530761][T24786] syz.2.6356: attempt to access beyond end of device
[  495.530761][T24786] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  495.587760][T24806] lo speed is unknown, defaulting to 1000
[  495.588410][T24786] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1)
[  495.601595][T24786] FAT-fs (loop2): Filesystem has been set read-only
[  495.611816][T24806] lo speed is unknown, defaulting to 1000
[  495.623703][T24786] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1)
[  495.640519][T24786] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1)
[  495.670659][T24817] bridge1: entered promiscuous mode
[  495.675959][T24817] bridge1: entered allmulticast mode
[  495.770029][T24583] veth0_vlan: entered promiscuous mode
[  495.788113][T24583] veth1_vlan: entered promiscuous mode
[  495.932917][T24583] veth0_macvtap: entered promiscuous mode
[  495.948772][T24583] veth1_macvtap: entered promiscuous mode
[  495.968878][T24583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  495.979371][T24583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  495.989914][T24583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  496.000513][T24583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  496.010389][T24583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  496.020910][T24583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  496.024989][T24841] loop2: detected capacity change from 0 to 1024
[  496.030778][T24583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  496.047622][T24583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  496.057510][T24583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  496.068119][T24583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  496.072178][T24844] FAULT_INJECTION: forcing a failure.
[  496.072178][T24844] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  496.077975][T24583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  496.077996][T24583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  496.078011][T24583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  496.078028][T24583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  496.079703][T24583] batman_adv: batadv0: Interface activated: batadv_slave_0
[  496.091686][T24844] CPU: 1 UID: 0 PID: 24844 Comm: syz.8.6374 Tainted: G        W          6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0
[  496.152247][T24844] Tainted: [W]=WARN
[  496.156059][T24844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  496.166206][T24844] Call Trace:
[  496.169489][T24844]  <TASK>
[  496.172466][T24844]  dump_stack_lvl+0xf2/0x150
[  496.177162][T24844]  dump_stack+0x15/0x1a
[  496.181362][T24844]  should_fail_ex+0x223/0x230
[  496.186091][T24844]  should_fail+0xb/0x10
[  496.190297][T24844]  should_fail_usercopy+0x1a/0x20
[  496.195335][T24844]  _copy_to_user+0x20/0xa0
[  496.199791][T24844]  copy_regset_to_user+0xf6/0x170
[  496.204896][T24844]  ptrace_regset+0x196/0x250
[  496.209514][T24844]  ptrace_request+0xd18/0x14c0
[  496.214302][T24844]  ? proc_fail_nth_write+0x12a/0x150
[  496.219664][T24844]  ? _raw_spin_unlock_irqrestore+0x2b/0x60
[  496.225493][T24844]  ? wait_task_inactive+0xdb/0x1b0
[  496.230660][T24844]  ? __fget_files+0x17c/0x1c0
[  496.235419][T24844]  arch_ptrace+0x2ce/0x400
[  496.239858][T24844]  __se_sys_ptrace+0xf4/0x2b0
[  496.244617][T24844]  __x64_sys_ptrace+0x55/0x70
[  496.249435][T24844]  x64_sys_call+0x2225/0x2dc0
[  496.254234][T24844]  do_syscall_64+0xc9/0x1c0
[  496.258814][T24844]  ? clear_bhb_loop+0x55/0xb0
[  496.263526][T24844]  ? clear_bhb_loop+0x55/0xb0
[  496.268249][T24844]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  496.274176][T24844] RIP: 0033:0x7f7512beff19
[  496.278628][T24844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  496.298275][T24844] RSP: 002b:00007f7511267058 EFLAGS: 00000246 ORIG_RAX: 0000000000000065
[  496.306705][T24844] RAX: ffffffffffffffda RBX: 00007f7512db5fa0 RCX: 00007f7512beff19
[  496.314680][T24844] RDX: 0000000000000002 RSI: 0000000000000046 RDI: 0000000000004204
[  496.322704][T24844] RBP: 00007f75112670a0 R08: 0000000000000000 R09: 0000000000000000
[  496.330679][T24844] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001
[  496.338729][T24844] R13: 0000000000000000 R14: 00007f7512db5fa0 R15: 00007fff98b68758
[  496.346713][T24844]  </TASK>
[  496.351285][T24583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  496.361794][T24583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  496.371677][T24583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  496.382164][T24583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  496.392104][T24583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  496.402744][T24583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  496.412578][T24583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  496.423028][T24583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  496.432902][T24583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  496.437177][T24841] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended
[  496.443399][T24583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  496.462038][T24583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  496.472746][T24583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  496.482564][T24583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  496.493170][T24583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  496.503060][T24583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  496.513503][T24583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  496.518210][T24841] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  496.526176][T24583] batman_adv: batadv0: Interface activated: batadv_slave_1
[  496.541690][T24841] EXT4-fs (loop2): mount failed
[  496.564259][T24583] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  496.573108][T24583] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  496.581953][T24583] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  496.590704][T24583] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  496.819778][T24872] 9pnet_fd: Insufficient options for proto=fd
[  496.850291][T24875] FAULT_INJECTION: forcing a failure.
[  496.850291][T24875] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  496.864344][T24875] CPU: 1 UID: 0 PID: 24875 Comm: syz.8.6382 Tainted: G        W          6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0
[  496.876694][T24875] Tainted: [W]=WARN
[  496.880504][T24875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  496.890612][T24875] Call Trace:
[  496.893901][T24875]  <TASK>
[  496.896843][T24875]  dump_stack_lvl+0xf2/0x150
[  496.901489][T24875]  dump_stack+0x15/0x1a
[  496.905682][T24875]  should_fail_ex+0x223/0x230
[  496.910420][T24875]  should_fail_alloc_page+0xfd/0x110
[  496.915788][T24875]  __alloc_pages_noprof+0x109/0x340
[  496.921058][T24875]  alloc_pages_mpol_noprof+0xb1/0x1e0
[  496.926451][T24875]  folio_alloc_mpol_noprof+0x36/0x70
[  496.931765][T24875]  shmem_get_folio_gfp+0x3d1/0xd90
[  496.937047][T24875]  shmem_write_begin+0xa2/0x180
[  496.941921][T24875]  generic_perform_write+0x1a8/0x4a0
[  496.947263][T24875]  shmem_file_write_iter+0xc2/0xe0
[  496.952450][T24875]  vfs_write+0x77f/0x920
[  496.956863][T24875]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  496.962726][T24875]  ksys_write+0xe8/0x1b0
[  496.967072][T24875]  __x64_sys_write+0x42/0x50
[  496.971691][T24875]  x64_sys_call+0x287e/0x2dc0
[  496.976398][T24875]  do_syscall_64+0xc9/0x1c0
[  496.980967][T24875]  ? clear_bhb_loop+0x55/0xb0
[  496.985678][T24875]  ? clear_bhb_loop+0x55/0xb0
[  496.990383][T24875]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  496.996450][T24875] RIP: 0033:0x7f7512beff19
[  497.000901][T24875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  497.020530][T24875] RSP: 002b:00007f7511267058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  497.029027][T24875] RAX: ffffffffffffffda RBX: 00007f7512db5fa0 RCX: 00007f7512beff19
[  497.037045][T24875] RDX: 000000000208e24b RSI: 0000000020000100 RDI: 0000000000000007
[  497.045030][T24875] RBP: 00007f75112670a0 R08: 0000000000000000 R09: 0000000000000000
[  497.053026][T24875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  497.061036][T24875] R13: 0000000000000000 R14: 00007f7512db5fa0 R15: 00007fff98b68758
[  497.069037][T24875]  </TASK>
[  497.084258][T24884] netlink: 'syz.5.6383': attribute type 10 has an invalid length.
[  497.111957][T24884] syz_tun: entered promiscuous mode
[  497.122492][T24884] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  497.148913][T24871] lo speed is unknown, defaulting to 1000
[  497.165609][T24871] lo speed is unknown, defaulting to 1000
[  497.177499][T24888] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6385'.
[  497.232959][T24893] netlink: 'syz.5.6386': attribute type 4 has an invalid length.
[  497.239537][T24892] lo speed is unknown, defaulting to 1000
[  497.251980][T24893] netlink: 'syz.5.6386': attribute type 4 has an invalid length.
[  497.252270][T24892] lo speed is unknown, defaulting to 1000
[  497.262861][T24871] chnl_net:caif_netlink_parms(): no params data found
[  497.283432][T24896] netlink: 16402 bytes leftover after parsing attributes in process `‡&/ç'.
[  497.545643][T24871] bridge0: port 1(bridge_slave_0) entered blocking state
[  497.552872][T24871] bridge0: port 1(bridge_slave_0) entered disabled state
[  497.588533][T24918] siw: device registration error -23
[  497.616716][T24918] loop2: detected capacity change from 0 to 512
[  497.627553][T24871] bridge_slave_0: entered allmulticast mode
[  497.650438][T24871] bridge_slave_0: entered promiscuous mode
[  497.697539][T24918] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.2.6395: corrupted xattr block 95: invalid header
[  497.718680][T24871] bridge0: port 2(bridge_slave_1) entered blocking state
[  497.725872][T24871] bridge0: port 2(bridge_slave_1) entered disabled state
[  497.760973][T24918] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.6395: bg 0: block 7: invalid block bitmap
[  497.796504][   T29] kauditd_printk_skb: 531 callbacks suppressed
[  497.796518][   T29] audit: type=1326 audit(1733302358.968:28304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24923 comm="syz.8.6397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7512beff19 code=0x7ffc0000
[  497.827527][T24871] bridge_slave_1: entered allmulticast mode
[  497.834541][T24918] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  497.843876][T24871] bridge_slave_1: entered promiscuous mode
[  497.855739][T24918] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2977: inode #11: comm syz.2.6395: corrupted xattr block 95: invalid header
[  497.869508][   T29] audit: type=1326 audit(1733302359.008:28305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24923 comm="syz.8.6397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7512beff19 code=0x7ffc0000
[  497.893937][   T29] audit: type=1326 audit(1733302359.018:28306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24923 comm="syz.8.6397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7512beff19 code=0x7ffc0000
[  497.915212][T24918] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117)
[  497.917839][   T29] audit: type=1326 audit(1733302359.028:28307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24923 comm="syz.8.6397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7512beff19 code=0x7ffc0000
[  497.930694][T24918] EXT4-fs (loop2): 1 orphan inode deleted
[  497.957043][T24918] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  497.974102][T24931] netlink: 16402 bytes leftover after parsing attributes in process `‡&/ç'.
[  497.992142][T24871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  498.005573][T23770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  498.015309][T24871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  498.024475][T24930] lo speed is unknown, defaulting to 1000
[  498.033973][T24930] lo speed is unknown, defaulting to 1000
[  498.058580][T24935] bridge0: port 3(vlan2) entered blocking state
[  498.065070][T24935] bridge0: port 3(vlan2) entered disabled state
[  498.071474][T24935] vlan2: entered allmulticast mode
[  498.077331][T24935] vlan2: left allmulticast mode
[  498.097306][T24871] team0: Port device team_slave_0 added
[  498.106021][T24871] team0: Port device team_slave_1 added
[  498.148768][T24871] batman_adv: batadv0: Adding interface: batadv_slave_0
[  498.156408][T24871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  498.182363][T24871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  498.205603][   T29] audit: type=1326 audit(1733302359.378:28308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24939 comm="syz.2.6403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3844ff19 code=0x7ffc0000
[  498.234630][   T29] audit: type=1326 audit(1733302359.398:28309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24939 comm="syz.2.6403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd3844ff19 code=0x7ffc0000
[  498.258406][   T29] audit: type=1326 audit(1733302359.398:28310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24939 comm="syz.2.6403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3844ff19 code=0x7ffc0000
[  498.282078][   T29] audit: type=1326 audit(1733302359.398:28311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24939 comm="syz.2.6403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3844ff19 code=0x7ffc0000
[  498.305873][   T29] audit: type=1326 audit(1733302359.398:28312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24939 comm="syz.2.6403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd3844ff19 code=0x7ffc0000
[  498.329481][   T29] audit: type=1326 audit(1733302359.398:28313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24939 comm="syz.2.6403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3844ff19 code=0x7ffc0000
[  498.364550][T24871] batman_adv: batadv0: Adding interface: batadv_slave_1
[  498.371542][T24871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  498.397583][T24871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  498.420372][T24948] SELinux: syz.5.6404 (24948) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  498.478123][T24871] hsr_slave_0: entered promiscuous mode
[  498.484511][T24871] hsr_slave_1: entered promiscuous mode
[  498.500615][T24871] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  498.512791][T24871] Cannot create hsr debugfs directory
[  498.553575][T24957] siw: device registration error -23
[  498.611433][T24962] loop2: detected capacity change from 0 to 256
[  498.636655][T24871] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.761367][T24967] FAULT_INJECTION: forcing a failure.
[  498.761367][T24967] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  498.775335][T24967] CPU: 1 UID: 0 PID: 24967 Comm: syz.5.6411 Tainted: G        W          6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0
[  498.787614][T24967] Tainted: [W]=WARN
[  498.791511][T24967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  498.801620][T24967] Call Trace:
[  498.805038][T24967]  <TASK>
[  498.807974][T24967]  dump_stack_lvl+0xf2/0x150
[  498.812692][T24967]  dump_stack+0x15/0x1a
[  498.816993][T24967]  should_fail_ex+0x223/0x230
[  498.821744][T24967]  should_fail+0xb/0x10
[  498.825917][T24967]  should_fail_usercopy+0x1a/0x20
[  498.830979][T24967]  _copy_to_iter+0xd5/0xd00
[  498.835555][T24967]  ? _raw_spin_lock_irqsave+0x3c/0xb0
[  498.841026][T24967]  ? __mutex_lock+0x251/0x8f0
[  498.845732][T24967]  copy_page_to_iter+0x171/0x2b0
[  498.851128][T24967]  pipe_read+0x295/0x880
[  498.855463][T24967]  vfs_read+0x5dc/0x700
[  498.859727][T24967]  ksys_read+0xe8/0x1b0
[  498.863986][T24967]  __x64_sys_read+0x42/0x50
[  498.868529][T24967]  x64_sys_call+0x2874/0x2dc0
[  498.873217][T24967]  do_syscall_64+0xc9/0x1c0
[  498.877756][T24967]  ? clear_bhb_loop+0x55/0xb0
[  498.882447][T24967]  ? clear_bhb_loop+0x55/0xb0
[  498.887136][T24967]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  498.893180][T24967] RIP: 0033:0x7f0826efff19
[  498.897602][T24967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  498.917247][T24967] RSP: 002b:00007f0825556058 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  498.925738][T24967] RAX: ffffffffffffffda RBX: 00007f08270c6080 RCX: 00007f0826efff19
[  498.933742][T24967] RDX: 000000000000fdef RSI: 0000000020000300 RDI: 0000000000000006
[  498.941715][T24967] RBP: 00007f08255560a0 R08: 0000000000000000 R09: 0000000000000000
[  498.949689][T24967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  498.957689][T24967] R13: 0000000000000001 R14: 00007f08270c6080 R15: 00007ffe4f1a18b8
[  498.965673][T24967]  </TASK>
[  498.981598][T24871] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  499.035726][T24979] lo speed is unknown, defaulting to 1000
[  499.041914][T24979] lo speed is unknown, defaulting to 1000
[  499.072622][T24871] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  499.118265][T24982] bridge3: entered promiscuous mode
[  499.123672][T24982] bridge3: entered allmulticast mode
[  499.159357][T24871] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  499.309855][T24995] siw: device registration error -23
[  499.346112][T24871] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  499.360654][T24871] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  499.388069][T24871] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  499.402038][T24871] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  499.577778][T24871] 8021q: adding VLAN 0 to HW filter on device bond0
[  499.592570][T25005] syz.5.6426[25005] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  499.596721][T25005] syz.5.6426[25005] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  499.614984][T24871] 8021q: adding VLAN 0 to HW filter on device team0
[  499.623539][T25005] syz.5.6426[25005] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  499.647681][T13729] bridge0: port 1(bridge_slave_0) entered blocking state
[  499.666149][T13729] bridge0: port 1(bridge_slave_0) entered forwarding state
[  499.710294][T13729] bridge0: port 2(bridge_slave_1) entered blocking state
[  499.717390][T13729] bridge0: port 2(bridge_slave_1) entered forwarding state
[  499.774429][T25029] FAULT_INJECTION: forcing a failure.
[  499.774429][T25029] name failslab, interval 1, probability 0, space 0, times 0
[  499.787137][T25029] CPU: 1 UID: 0 PID: 25029 Comm: syz.5.6435 Tainted: G        W          6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0
[  499.799416][T25029] Tainted: [W]=WARN
[  499.803233][T25029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  499.813389][T25029] Call Trace:
[  499.816761][T25029]  <TASK>
[  499.819772][T25029]  dump_stack_lvl+0xf2/0x150
[  499.824406][T25029]  dump_stack+0x15/0x1a
[  499.828697][T25029]  should_fail_ex+0x223/0x230
[  499.833408][T25029]  should_failslab+0x8f/0xb0
[  499.838033][T25029]  __kmalloc_node_noprof+0xad/0x410
[  499.843274][T25029]  ? vmemdup_user+0x42/0x1b0
[  499.847937][T25029]  vmemdup_user+0x42/0x1b0
[  499.852555][T25029]  map_get_next_key+0x140/0x310
[  499.857461][T25029]  ? __sys_bpf+0x6c1/0x7a0
[  499.861899][T25029]  __sys_bpf+0x6cb/0x7a0
[  499.866248][T25029]  __x64_sys_bpf+0x43/0x50
[  499.870711][T25029]  x64_sys_call+0x2914/0x2dc0
[  499.875412][T25029]  do_syscall_64+0xc9/0x1c0
[  499.879935][T25029]  ? clear_bhb_loop+0x55/0xb0
[  499.884672][T25029]  ? clear_bhb_loop+0x55/0xb0
[  499.889374][T25029]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  499.895346][T25029] RIP: 0033:0x7f0826efff19
[  499.899848][T25029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  499.919545][T25029] RSP: 002b:00007f0825577058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  499.927595][T24871] 8021q: adding VLAN 0 to HW filter on device batadv0
[  499.928019][T25029] RAX: ffffffffffffffda RBX: 00007f08270c5fa0 RCX: 00007f0826efff19
[  499.942831][T25029] RDX: 0000000000000020 RSI: 0000000020000200 RDI: 0000000000000004
[  499.950821][T25029] RBP: 00007f08255770a0 R08: 0000000000000000 R09: 0000000000000000
[  499.958867][T25029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  499.966858][T25029] R13: 0000000000000000 R14: 00007f08270c5fa0 R15: 00007ffe4f1a18b8
[  499.974985][T25029]  </TASK>
[  500.168766][T24871] veth0_vlan: entered promiscuous mode
[  500.178359][T24871] veth1_vlan: entered promiscuous mode
[  500.201293][T24871] veth0_macvtap: entered promiscuous mode
[  500.212010][T24871] veth1_macvtap: entered promiscuous mode
[  500.262502][T24871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  500.273763][T24871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.283756][T24871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  500.294346][T24871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.304974][T24871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  500.315521][T24871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.325421][T24871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  500.336636][T24871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.346500][T24871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  500.356955][T24871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.367497][T24871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  500.377957][T24871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.387923][T24871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  500.399098][T24871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.408999][T24871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  500.419490][T24871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.472286][T24871] batman_adv: batadv0: Interface activated: batadv_slave_0
[  500.487210][T24871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  500.497758][T24871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.507733][T24871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  500.518235][T24871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.528077][T24871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  500.538599][T24871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.548550][T24871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  500.559550][T24871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.569439][T24871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  500.579920][T24871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.589818][T24871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  500.600275][T24871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.610089][T24871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  500.620545][T24871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.630644][T24871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  500.641519][T24871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.651429][T24871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  500.661982][T24871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.674047][T24871] batman_adv: batadv0: Interface activated: batadv_slave_1
[  500.683327][T24871] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  500.692130][T24871] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  500.700920][T24871] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  500.709911][T24871] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  500.847340][T25088] loop2: detected capacity change from 0 to 164
[  500.854853][T25088] Unable to read rock-ridge attributes
[  500.861032][T25102] Unable to read rock-ridge attributes
[  500.970583][T25086] delete_channel: no stack
[  500.975504][T25086] delete_channel: no stack
[  501.117470][T25115] lo speed is unknown, defaulting to 1000
[  501.129795][T25115] lo speed is unknown, defaulting to 1000
[  501.131409][T25117] sg_write: data in/out 1048540/17 bytes for SCSI command 0x0-- guessing data in;
[  501.131409][T25117]    program syz.7.6458 not setting count and/or reply_len properly
[  501.236057][T25124] bridge1: entered promiscuous mode
[  501.241461][T25124] bridge1: entered allmulticast mode
[  501.333088][T25135] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6462'.
[  501.342124][T25135] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6462'.
[  501.544245][T25140] pim6reg1: entered promiscuous mode
[  501.549659][T25140] pim6reg1: entered allmulticast mode
[  501.958653][T25177] loop2: detected capacity change from 0 to 1024
[  501.973284][T25177] EXT4-fs: Ignoring removed orlov option
[  501.997060][T25177] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  502.310392][T25177] ==================================================================
[  502.318525][T25177] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark
[  502.325683][T25177] 
[  502.328012][T25177] write to 0xffff888121fed924 of 4 bytes by task 25192 on cpu 0:
[  502.335745][T25177]  xas_set_mark+0x131/0x150
[  502.340393][T25177]  __folio_start_writeback+0x1e8/0x430
[  502.345898][T25177]  ext4_bio_write_folio+0x591/0x9d0
[  502.351135][T25177]  mpage_process_page_bufs+0x486/0x5d0
[  502.356624][T25177]  mpage_prepare_extent_to_map+0x788/0xb80
[  502.362456][T25177]  ext4_do_writepages+0xa20/0x2130
[  502.367623][T25177]  ext4_writepages+0x159/0x2e0
[  502.372417][T25177]  do_writepages+0x1d8/0x480
[  502.377048][T25177]  file_write_and_wait_range+0x168/0x2f0
[  502.382713][T25177]  generic_buffers_fsync_noflush+0x46/0x120
[  502.388650][T25177]  ext4_sync_file+0x1ff/0x6c0
[  502.393378][T25177]  vfs_fsync_range+0x116/0x130
[  502.398172][T25177]  ext4_buffered_write_iter+0x326/0x370
[  502.403758][T25177]  ext4_file_write_iter+0x383/0xf20
[  502.408995][T25177]  iter_file_splice_write+0x5f1/0x980
[  502.414388][T25177]  direct_splice_actor+0x160/0x2c0
[  502.419524][T25177]  splice_direct_to_actor+0x302/0x670
[  502.425032][T25177]  do_splice_direct+0xd7/0x150
[  502.429822][T25177]  do_sendfile+0x398/0x660
[  502.434253][T25177]  __x64_sys_sendfile64+0x110/0x150
[  502.439462][T25177]  x64_sys_call+0xfbd/0x2dc0
[  502.444066][T25177]  do_syscall_64+0xc9/0x1c0
[  502.448605][T25177]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  502.454526][T25177] 
[  502.456852][T25177] read to 0xffff888121fed924 of 4 bytes by task 25177 on cpu 1:
[  502.464491][T25177]  xas_find_marked+0x60a/0x660
[  502.469262][T25177]  find_get_entry+0x54/0x390
[  502.473865][T25177]  filemap_get_folios_tag+0x9e/0x210
[  502.479169][T25177]  mpage_prepare_extent_to_map+0x329/0xb80
[  502.485074][T25177]  ext4_do_writepages+0x6ea/0x2130
[  502.490215][T25177]  ext4_writepages+0x159/0x2e0
[  502.495007][T25177]  do_writepages+0x1d8/0x480
[  502.499628][T25177]  file_write_and_wait_range+0x168/0x2f0
[  502.505274][T25177]  generic_buffers_fsync_noflush+0x46/0x120
[  502.511189][T25177]  ext4_sync_file+0x1ff/0x6c0
[  502.515900][T25177]  vfs_fsync_range+0x116/0x130
[  502.520696][T25177]  ext4_buffered_write_iter+0x326/0x370
[  502.526268][T25177]  ext4_file_write_iter+0x383/0xf20
[  502.531486][T25177]  iter_file_splice_write+0x5f1/0x980
[  502.536872][T25177]  direct_splice_actor+0x160/0x2c0
[  502.542007][T25177]  splice_direct_to_actor+0x302/0x670
[  502.547395][T25177]  do_splice_direct+0xd7/0x150
[  502.552701][T25177]  do_sendfile+0x398/0x660
[  502.557136][T25177]  __x64_sys_sendfile64+0x110/0x150
[  502.562345][T25177]  x64_sys_call+0xfbd/0x2dc0
[  502.566976][T25177]  do_syscall_64+0xc9/0x1c0
[  502.571487][T25177]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  502.577407][T25177] 
[  502.579754][T25177] value changed: 0x0a000021 -> 0x00000021
[  502.585471][T25177] 
[  502.587805][T25177] Reported by Kernel Concurrency Sanitizer on:
[  502.593977][T25177] CPU: 1 UID: 0 PID: 25177 Comm: syz.2.6477 Tainted: G        W          6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0
[  502.606230][T25177] Tainted: [W]=WARN
[  502.610045][T25177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  502.620115][T25177] ==================================================================
[  502.844975][T23770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.