last executing test programs:

6m35.427224484s ago: executing program 32 (id=69):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b000000"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = socket$caif_stream(0x25, 0x1, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
r4 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r4)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
r5 = open(0x0, 0x4001410c2, 0x766c618eb221465a)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r5, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], <r6=>0x0, 0x54, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xce, 0x8, 0x8, &(0x7f0000000480)}}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x18)
r8 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000100)={0x20000014})
close_range(r8, r9, 0x0)
flistxattr(r1, &(0x7f0000000700)=""/109, 0x6d)
r10 = getuid()
r11 = getgid()
setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000600)={r2, r10, r11}, 0xc)

6m35.035986603s ago: executing program 33 (id=71):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'hsr0\x00'})
shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0x0, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsopen(&(0x7f0000000040)='configfs\x00', 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x19c5498e, 0x103902)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0900000003000000e27f000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001bc0)=@allocspi={0x1a4, 0x16, 0xe01, 0x70bd28, 0x25dfdbfe, {{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1, 0x4e21, 0x4, 0x4e24, 0x0, 0xa, 0x80, 0x0, 0x16}, {@in=@dev={0xac, 0x14, 0x14, 0x34}, 0x4d6, 0x6c}, @in=@rand_addr=0x64010102, {0x9, 0x4, 0x6, 0xf, 0x4, 0x8, 0x7, 0x4}, {0xfffffffffffffffc, 0x7, 0x6, 0x430cfdae}, {0x401, 0xffffff7f, 0xb6}, 0x70bd29, 0x3505, 0x2, 0x3, 0xa, 0x40}, 0x7, 0x7fff}, [@policy={0xac, 0x7, {{@in6=@rand_addr=' \x01\x00', @in6=@private2, 0x4e20, 0xc, 0x4e24, 0x3, 0xa, 0x20, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x0, 0x0, 0xffffffffffff69fd, 0x6, 0xb}, {0xffffffff, 0x14, 0x7ff, 0x6}, 0x8000, 0x6e6bbd, 0x0, 0x0, 0x3, 0x3}}]}, 0x1a4}, 0x1, 0x0, 0x0, 0xfa7a31136e36d11}, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_usb_connect(0x3, 0x3d, &(0x7f0000000000)=ANY=[], 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

6m34.935139143s ago: executing program 34 (id=74):
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
write(r0, &(0x7f00000000c0)="d93d7c20fc437c4b957fc4573af5a716bee5243be41a15ba524c12316056e71fe49f91e3a0dee9e1fa3073970636ea408ac593678fb2cfa854149669db084bc6b23e4969e4912ccc044cc626b03a2952a18d88873f8f08466c0ba138d0216ecadecae2", 0x63)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ba}, 0x94)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000500)='w\xde\xa3\x05\xa3\x91\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xaek\xbd\x87W\x1d\x1b(\x8e\xf8\\2\x98\xf7P\x1b8\xcf\xf5\xdc<M\xb6\x06\x157\x80\x03\xb4\x9f\xd1\xf9\xdd\xf6&\x1d*lK\xe3\xbd\xe8\xda\xc7\x8c\xe4\xab\x8bM\xf5\x1a\x86\xc8\x9c rC\f\xee^0\xf7\xd9\xafc\x05\x91p=\xfe\x7f\xff\x9eN\xc9Zt@\x15{\x8c\x927\xfe\xc7ZEy8\x9e\x80ia[\x88\x153(\xff\xa4\xd3\xed\x12.\x9b\xb9\xc4\'\x14\xac\x14;\x02S!\x1f]bm\xe6\x0e\xb8= \xdbg/pq\x0fu\xa1\x03`\x00\xe0\x8c\xf3A\x88\xb1F\xcb\xf7O7\xfcu\xfb\xbd^\x94\xf6{\xd9k\xa13Q\x97\x03h\x12\xc8[&UX\x81\x1eK\x9c&e[R\xb4\x96\xee4~\x02\xe5\x12\x11\x98:\xfc~D(\xe3p\x03\xa7J\vP25\\t\xf0\xe7\xe2]\x88X\x91\xd5\xd8)q\x8dV\x1e\x059w\x9e`NI\x94\xbe^#\xdfE\'\x96\xd2\xc1\xce\x89\xdf\x02K\xeak\x97d\bRH\xac\x9ev\xb7\xd0\x02A\xaa\xfe\xa7\xd6\x03\x89\xb3\x96\xcb\x8b\xd7(\xf6\xb2\\6A\xe3\xae\xb3')
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r3}, 0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r8 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000009000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9)
sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="50020000", @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b8008000a"], 0x250}}, 0x4c000)
r10 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000040000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0)
pipe2$9p(&(0x7f0000000200), 0x480)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a31000000000500010007"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x2f, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x3}, 0x18)

6m33.721138451s ago: executing program 35 (id=76):
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
write(r0, &(0x7f00000000c0)="d93d7c20fc437c4b957fc4573af5a716bee5243be41a15ba524c12316056e71fe49f91e3a0dee9e1fa3073970636ea408ac593678fb2cfa854149669db084bc6b23e", 0x42)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ba}, 0x94)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000500)='w\xde\xa3\x05\xa3\x91\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xaek\xbd\x87W\x1d\x1b(\x8e\xf8\\2\x98\xf7P\x1b8\xcf\xf5\xdc<M\xb6\x06\x157\x80\x03\xb4\x9f\xd1\xf9\xdd\xf6&\x1d*lK\xe3\xbd\xe8\xda\xc7\x8c\xe4\xab\x8bM\xf5\x1a\x86\xc8\x9c rC\f\xee^0\xf7\xd9\xafc\x05\x91p=\xfe\x7f\xff\x9eN\xc9Zt@\x15{\x8c\x927\xfe\xc7ZEy8\x9e\x80ia[\x88\x153(\xff\xa4\xd3\xed\x12.\x9b\xb9\xc4\'\x14\xac\x14;\x02S!\x1f]bm\xe6\x0e\xb8= \xdbg/pq\x0fu\xa1\x03`\x00\xe0\x8c\xf3A\x88\xb1F\xcb\xf7O7\xfcu\xfb\xbd^\x94\xf6{\xd9k\xa13Q\x97\x03h\x12\xc8[&UX\x81\x1eK\x9c&e[R\xb4\x96\xee4~\x02\xe5\x12\x11\x98:\xfc~D(\xe3p\x03\xa7J\vP25\\t\xf0\xe7\xe2]\x88X\x91\xd5\xd8)q\x8dV\x1e\x059w\x9e`NI\x94\xbe^#\xdfE\'\x96\xd2\xc1\xce\x89\xdf\x02K\xeak\x97d\bRH\xac\x9ev\xb7\xd0\x02A\xaa\xfe\xa7\xd6\x03\x89\xb3\x96\xcb\x8b\xd7(\xf6\xb2\\6A\xe3\xae\xb3')
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r3}, 0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r8 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000009000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9)
sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="50020000", @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b8008000a"], 0x250}}, 0x4c000)
r10 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000040000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0)
pipe2$9p(&(0x7f0000000200), 0x480)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a31000000000500010007"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x2f, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x3}, 0x18)

6m31.675217591s ago: executing program 36 (id=88):
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
write(r0, &(0x7f00000000c0)="d93d7c20fc437c4b957fc4573af5a716bee5243be41a15ba524c12316056e71fe49f91e3a0dee9e1fa3073970636ea408ac593678fb2cfa854149669db084bc6b23e4969e4912ccc044cc626b03a2952a18d88873f8f08466c0ba138d0216ecadecae224a3a2d4f70e6584e66bbaac344d647f546ccd56f4fa57cc2aeed2e5a6d0eed02f", 0x84)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ba}, 0x94)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000500)='w\xde\xa3\x05\xa3\x91\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xaek\xbd\x87W\x1d\x1b(\x8e\xf8\\2\x98\xf7P\x1b8\xcf\xf5\xdc<M\xb6\x06\x157\x80\x03\xb4\x9f\xd1\xf9\xdd\xf6&\x1d*lK\xe3\xbd\xe8\xda\xc7\x8c\xe4\xab\x8bM\xf5\x1a\x86\xc8\x9c rC\f\xee^0\xf7\xd9\xafc\x05\x91p=\xfe\x7f\xff\x9eN\xc9Zt@\x15{\x8c\x927\xfe\xc7ZEy8\x9e\x80ia[\x88\x153(\xff\xa4\xd3\xed\x12.\x9b\xb9\xc4\'\x14\xac\x14;\x02S!\x1f]bm\xe6\x0e\xb8= \xdbg/pq\x0fu\xa1\x03`\x00\xe0\x8c\xf3A\x88\xb1F\xcb\xf7O7\xfcu\xfb\xbd^\x94\xf6{\xd9k\xa13Q\x97\x03h\x12\xc8[&UX\x81\x1eK\x9c&e[R\xb4\x96\xee4~\x02\xe5\x12\x11\x98:\xfc~D(\xe3p\x03\xa7J\vP25\\t\xf0\xe7\xe2]\x88X\x91\xd5\xd8)q\x8dV\x1e\x059w\x9e`NI\x94\xbe^#\xdfE\'\x96\xd2\xc1\xce\x89\xdf\x02K\xeak\x97d\bRH\xac\x9ev\xb7\xd0\x02A\xaa\xfe\xa7\xd6\x03\x89\xb3\x96\xcb\x8b\xd7(\xf6\xb2\\6A\xe3\xae\xb3')
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r3}, 0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r8 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000009000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9)
sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="50020000", @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b8008000a"], 0x250}}, 0x4c000)
r10 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000040000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0)
pipe2$9p(&(0x7f0000000200), 0x480)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a31000000000500010007"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x2f, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x3}, 0x18)

6m31.18398076s ago: executing program 37 (id=78):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="2e0000001000818807b62aa73f72cc9f0ba1f8483a0000005e120602000300000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4000004)

6m31.182043079s ago: executing program 38 (id=70):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
getpgrp(0x0)

6m31.17978047s ago: executing program 39 (id=75):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES16=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r4, 0x0, 0x0}, 0x10)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0xa1000, 0x20)
lseek(r5, 0x9, 0x1)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000180)={0x0, <r8=>0x0}, &(0x7f00000001c0)=0xc)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="85ef9a8074534315e0b204b76270f910f7785bb7eabd69521d1406a73c7541ba27d691111171a44efd46f669a4f4fc4ced2db89d38420f25d9900605bac5f9a639a4c135b8c27e9960a4794d165865e10f5bd4f77fdbcaf037b7809df81fdce6e431af84409e5c0801a96237f58eba44123162d20fd7c4feefef2f84db4678480e091b12fc7d9107dee2884b9468fa19732e1e99f8785c5b6e335362abfed652789f713f3d48b8195bfa3e319797d6b64637be8858ecdfa385769a3564b19859f6cc1d1af1c3023488fd97834bf79e7a13891a3c08ebf876b5b71d4549ef132e0b64d914a34ff9fa897b8fc8a39f2f966d3495ed9e245d711212ff51c6617a075339e55f9e08fded95f31d40d7bda6414a0468061ad82852cbadd6e5d0c87c27af99b0169be31d8abc60c331a6d058042f46b84f2b1b1d622e3d28f70f2179d8", @ANYRESDEC=r8, @ANYBLOB=',smackfstransmute=,obj_user=kfree\x00,\x00'])
r9 = socket$inet(0x2, 0x2, 0x0)
semctl$GETALL(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000440)=""/68)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'macvlan1\x00', <r10=>0x0})
setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000004c0)={r10, 0x3, 0x6, @random="5e1cf8b4c253"}, 0x10)
setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000000c0)={r10, 0x3, 0x6, @random="cea0300a1672"}, 0x10)
dup2(r6, r7)

6m15.551555929s ago: executing program 40 (id=275):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = socket(0x10, 0x803, 0x0)
socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}}}, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="ff010a29bd7000"/20], 0x14}, 0x1, 0x0, 0x0, 0x48044}, 0x20000)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10)
r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x20)
r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r4, 0x0)
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

5m38.122458741s ago: executing program 9 (id=789):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a85}, 0x94)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0)
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f0000000000)='./file1\x00', 0x16000f57)
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x5)
renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0)
setresuid(0x0, 0xee01, 0xee00)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
open_tree(0xffffffffffffffff, 0x0, 0x800)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000600)={<r4=>0x0, 0x7fffffffffffffff, 0xfffffffffffffffd})
ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000000a00)={r4, "e67c79070e304d8f9594dbaac3411c11"})

5m38.015574561s ago: executing program 9 (id=791):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b000000"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = socket$caif_stream(0x25, 0x1, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r4)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
r5 = open(0x0, 0x4001410c2, 0x766c618eb221465a)
write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r5, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], <r6=>0x0, 0x54, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xce, 0x8, 0x8, &(0x7f0000000480)}}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x18)
r8 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000100)={0x20000014})
close_range(r8, r9, 0x0)
flistxattr(r1, &(0x7f0000000700)=""/109, 0x6d)
r10 = getuid()
r11 = getgid()
setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000600)={r2, r10, r11}, 0xc)

5m37.872379635s ago: executing program 9 (id=794):
kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0)

5m36.845495246s ago: executing program 9 (id=809):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x5a0, &(0x7f00000016c0)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00')
syz_clone(0x1000011, 0x0, 0x0, 0x0, 0x0, 0x0)
io_setup(0x2, &(0x7f0000000000)=<r3=>0x0)
r4 = eventfd(0x0)
io_submit(r3, 0x2, &(0x7f0000000280)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x100, r4, &(0x7f0000000100)="0000fd6000000000", 0x8, 0x3}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, r4, 0x0, 0x0, 0x1000d, 0x0, 0x3, r4}])
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x42, 0x0)
copy_file_range(r7, 0x0, r7, &(0x7f00000000c0)=0xc, 0x3, 0x0)
setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x7ff, 0x400, 0x9, 0x17, 0x1}, 0x14)
syz_clone(0x21000000, 0x0, 0x0, 0x0, 0x0, 0x0)
pidfd_getfd(r7, r2, 0x0)
pread64(r2, &(0x7f0000000200)=""/102400, 0x19020, 0x1000000000)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r0}, 0xc)
open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170)

5m36.170831091s ago: executing program 41 (id=812):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x8)
r0 = getpid()
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x40)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000200), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="c50f0000000000000000110000006990080003001b3c8d0567e32b01e43e6f2b1a36416a9b4f291e2087298d7f023d6792f15508e798556f38acdc63e3b4c7b2d11d53de827b93e0", @ANYRES32=0x0, @ANYBLOB="08002a0084210000"], 0x24}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r6=>r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=<r8=>r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYRES32=r8, @ANYRESHEX=r3, @ANYRES16=r7, @ANYRES32=r2, @ANYRESOCT=r6, @ANYRES8=r7], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10)
kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0)
rseq(&(0x7f0000000300), 0x20, 0x0, 0x0)
r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0)
ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCVHANGUP(r10, 0x5437, 0x2)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000400000000000000", @ANYRES32, @ANYBLOB="0bc34d82824f4092aea6e8f383faaabfc01ef30e6d739da4c3bb116ca0d3d4245c638759838fb7d4f8cfe1616bab1d0cf07256f028cf76a7f85a0b377da1ab56a5ecad0d6b01726e7c1fe07a09deff2aa5b1ef28ddc7fbc779d45cdf2541ddf4a14c689d66faac5592b1f4f4f697fb4e0900000000000000297ac8929abe732e27c42497bfcf05bfb4a1e9108d313e2537521f6ce498781be24d9c9aea30c1230b5f875780e0e6c6", @ANYRES64=0x0], 0x20)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x4e8881, 0x31, 0x2c}, 0x18)

5m36.155416803s ago: executing program 9 (id=814):
openat$tun(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0x8}, 0x18)
bind$unix(0xffffffffffffffff, 0x0, 0x0)

5m35.411634466s ago: executing program 9 (id=818):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5e6d, 0x40, 0xffffffff}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x44, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000680)='./cgroup/file0\x00', 0x13c, 0x400440})
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10)

5m35.390104848s ago: executing program 42 (id=818):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5e6d, 0x40, 0xffffffff}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x44, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000680)='./cgroup/file0\x00', 0x13c, 0x400440})
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10)

1m12.148705352s ago: executing program 1 (id=5160):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000980)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x2}, 0x18)
unshare(0xa000200)
semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0x40, 0x1800}], 0x1, 0x0)
unshare(0x20060400)

1m12.128474063s ago: executing program 1 (id=5161):
getgroups(0x1, &(0x7f0000000000)=[<r0=>0xee01])
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f00000000c0)={[{@barrier}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@barrier}, {}, {@resgid}, {@resgid={'resgid', 0x3d, r0}}, {@nogrpid}]}, 0x0, 0x48e, &(0x7f0000000340)="$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")
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x20100, 0x0)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x5]}, 0x8, 0x800)
signalfd4(r2, &(0x7f0000000140)={[0x72]}, 0x8, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'})

1m12.083330588s ago: executing program 1 (id=5165):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10)
tkill(0x0, 0x16)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800)
ioctl$SG_GET_VERSION_NUM(r1, 0x2284, 0x0)

1m12.026300703s ago: executing program 1 (id=5166):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x6}, 0x18)
pivot_root(&(0x7f00000002c0)='.\x00', &(0x7f0000001600)='./file1\x00')
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_getnetconf={0x1c, 0x52, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NETCONFA_IFINDEX={0x8}]}, 0x1c}}, 0x683154eae1152e56)

1m12.025561663s ago: executing program 1 (id=5167):
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES8=<r0=>0x0], 0x48)
r1 = syz_io_uring_setup(0x2439, &(0x7f0000000380)={0x0, 0x1064, 0x1000, 0x7, 0x40224}, &(0x7f00000006c0)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004004, &(0x7f0000000140), 0x81, 0x477, &(0x7f0000000a40)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x10)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x3800)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r5, @ANYRES64=r0], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000018c0)={&(0x7f00000001c0)='f2fs_readdir\x00', r6, 0x0, 0x4}, 0x18)
syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r1, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2, 0x0, 0x530}, 0x0, 0x1000})
io_uring_enter(r1, 0x47f8, 0x1e43, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x82, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000740000000081069059640101006b08b402005356", @ANYRES32=0x41424344, @ANYBLOB="8c1000ca90781000080a8000000000000fbc080a0000000200000002fe"], 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(0xffffffffffffffff, 0x0, 0x0)
fchdir(r7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
splice(r9, 0x0, r11, 0x0, 0x8000f28, 0x0)
splice(r10, 0x0, r9, 0x0, 0x7f, 0xe)
write(r8, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
socket$xdp(0x2c, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sync()

1m11.04277833s ago: executing program 1 (id=5201):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94)
r2 = socket$rds(0x15, 0x5, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000ac0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18)
r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_STOP_UNIT(r4, 0x6)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000800)=[@fadd={0x58, 0x114, 0x6, {{0x5, 0x6}, &(0x7f0000000400)=0x7, 0x0, 0xf, 0x4, 0x9, 0xfffffffffffffff9, 0x22, 0x7}}], 0x58, 0x8000}, 0x0)
sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000001bc0)="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", 0x1000}, {&(0x7f0000000440)="c1db024ff4d89ec26f45de4ac1640e35b6fe8b7a7b0bc13b4be9a8bd934a198c19a2c1b0733bc7db3b529f493deac5eeed717755344679b637d63cc23a6d09d9e150e4fc3d06f6a8058c2c83dfc0d0eb1a5c6101a5b2edad3502f8066f448993e0b6c46cb7faf529f62ee63df296af319abd9f7731c60c0a8afb78684a82", 0x7e}, {&(0x7f0000000500)="e49268d0c351133acbdf663ff79debf34fabaac61a078eebd5cfd7eebac018400a5d947d7e357fa53cf9be7f1dfe0b639fba3356295e75f999ce9f26b62c15c655361f0bab5d7a65296ae639bc9650ab0295067375d7c15a05d25717d8119dc5328576ad09ebfb2840cab8bbaff18a19c044e5723541f79d30216ebc96dfae8089fbac28caff6bb4e908a9f66de8016ad49c6fb362a284459962f2af1d2c707d3ce8a7319371cbeedeef849f54cf8d35df6b", 0xb2}, {&(0x7f0000000240)="a3155b2d04b6140585cbd887258326dba5bec8950030ee1d42e20d", 0x1b}], 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="280000000053c431e7f9f56f1791ffffffffe010d201e0000001e0000002ae1414bb000000000000"], 0x28}, 0x40000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x40000c4)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="98000000", @ANYRES16=r6, @ANYBLOB="b6232dbd7000fedbdf25080000001c0001800800030001000000e56f72ccf343876ff724ac65d992fb080003000000000008000300ffffffff20000780080001000100000008000100010000000c00040000000000000000004800058008000100756470003c0002800800030008000000080001000c00000008000300060000000800040004000000080004000200000008"], 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x8050)

55.985854843s ago: executing program 43 (id=5201):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94)
r2 = socket$rds(0x15, 0x5, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000ac0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18)
r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_STOP_UNIT(r4, 0x6)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000800)=[@fadd={0x58, 0x114, 0x6, {{0x5, 0x6}, &(0x7f0000000400)=0x7, 0x0, 0xf, 0x4, 0x9, 0xfffffffffffffff9, 0x22, 0x7}}], 0x58, 0x8000}, 0x0)
sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000001bc0)="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", 0x1000}, {&(0x7f0000000440)="c1db024ff4d89ec26f45de4ac1640e35b6fe8b7a7b0bc13b4be9a8bd934a198c19a2c1b0733bc7db3b529f493deac5eeed717755344679b637d63cc23a6d09d9e150e4fc3d06f6a8058c2c83dfc0d0eb1a5c6101a5b2edad3502f8066f448993e0b6c46cb7faf529f62ee63df296af319abd9f7731c60c0a8afb78684a82", 0x7e}, {&(0x7f0000000500)="e49268d0c351133acbdf663ff79debf34fabaac61a078eebd5cfd7eebac018400a5d947d7e357fa53cf9be7f1dfe0b639fba3356295e75f999ce9f26b62c15c655361f0bab5d7a65296ae639bc9650ab0295067375d7c15a05d25717d8119dc5328576ad09ebfb2840cab8bbaff18a19c044e5723541f79d30216ebc96dfae8089fbac28caff6bb4e908a9f66de8016ad49c6fb362a284459962f2af1d2c707d3ce8a7319371cbeedeef849f54cf8d35df6b", 0xb2}, {&(0x7f0000000240)="a3155b2d04b6140585cbd887258326dba5bec8950030ee1d42e20d", 0x1b}], 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="280000000053c431e7f9f56f1791ffffffffe010d201e0000001e0000002ae1414bb000000000000"], 0x28}, 0x40000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x40000c4)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="98000000", @ANYRES16=r6, @ANYBLOB="b6232dbd7000fedbdf25080000001c0001800800030001000000e56f72ccf343876ff724ac65d992fb080003000000000008000300ffffffff20000780080001000100000008000100010000000c00040000000000000000004800058008000100756470003c0002800800030008000000080001000c00000008000300060000000800040004000000080004000200000008"], 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x8050)

40.710127007s ago: executing program 4 (id=5686):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009900"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xffff}, 0x18)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0xcdc, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x40)

40.688841979s ago: executing program 4 (id=5687):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10)
sendmsg$tipc(r2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) (fail_nth: 4)
r3 = dup3(r1, r2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, 0x0, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88)

40.187411659s ago: executing program 4 (id=5691):
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&\x00'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20)
recvmsg(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0)
sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0)

40.131567733s ago: executing program 4 (id=5695):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYRESOCT=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084)

40.035376593s ago: executing program 4 (id=5698):
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES8=<r0=>0x0], 0x48)
r1 = syz_io_uring_setup(0x2439, &(0x7f0000000380)={0x0, 0x1064, 0x1000, 0x7, 0x40224}, &(0x7f00000006c0)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004004, &(0x7f0000000140), 0x81, 0x477, &(0x7f0000000a40)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x10)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x3800)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r5, @ANYRES64=r0], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000018c0)={&(0x7f00000001c0)='f2fs_readdir\x00', r6, 0x0, 0x4}, 0x18)
syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r1, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2, 0x0, 0x530}, 0x0, 0x1000})
io_uring_enter(r1, 0x47f8, 0x1e43, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x82, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000740000000081069059640101006b08b402005356", @ANYRES32=0x41424344, @ANYBLOB="8c1000ca90781000080a8000000000000fbc080a0000000200000002fe"], 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(0xffffffffffffffff, 0x0, 0x0)
fchdir(r7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
splice(r9, 0x0, r11, 0x0, 0x8000f28, 0x0)
splice(r10, 0x0, r9, 0x0, 0x7f, 0xe)
write(r8, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r12 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r12, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x304000, 0x800, 0x0, 0x3}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sync()

39.134976871s ago: executing program 4 (id=5719):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf2509000280"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)

33.21799807s ago: executing program 2 (id=5817):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000010000000100000000200000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r0, &(0x7f0000000000)="bd5f046154492fe430cd46e2bde12efd836767979adfb24faea99389e9a1e902575ddb1359bd8bade208a0224ca4dbdc76edaa2078cb0e1ae91a2e69fe96c82ba928a7db257db0d9d657eff6b5cfe12b521a7bd1babf133c4c88c0fda7008c2fb0e98e8d0f390d7112cd95c7e3cd7027e11963f69e809ba1949f8343a34bd769b81d55d47f0e34194b2f9f90d19713a6344e84150a2d65cb09dbe7", &(0x7f0000000100)=""/9}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="770000001900000016000000000000005c000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e}, 0x3f)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000200)='xprtrdma_marshal\x00', r1, 0x0, 0x82d7}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000b00)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x3}}}, 0x24}}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x14, r2, 0x713, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8c09}, 0x2de0d2a06d7aeea8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r6, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x110, 0x1f8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @local, @multicast1, 0xf}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)
dup3(r4, r5, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r7, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd60", 0x13}, {&(0x7f00000001c0)="b700001806005abeef4ba0d5984462732834d1", 0x13}, {&(0x7f0000000140)="37a8a6c41ef711513a5554633f6ecf2512425af281e4", 0x16}], 0x3)
io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_freezer_state(r9, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r10, &(0x7f0000000040)='FROZEN\x00', 0x7)
openat$cgroup_procs(r9, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0)
r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r11, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)

32.733269938s ago: executing program 2 (id=5825):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@nolazytime}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@nombcache}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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")
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2)
write$binfmt_misc(r1, &(0x7f0000000000)='\t', 0x1)
close(r1)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x101042, 0x137)
pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc)

32.684172003s ago: executing program 2 (id=5828):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)

32.637901997s ago: executing program 2 (id=5829):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x792755bf328765a0}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00')
r2 = socket(0x18, 0x5, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004845)
io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000e868495fb58d00b6ad1f50ad32d6ad25dfd73a015e0ca6a0f68a7d007dc6751dfb265a0e3ccae669e173a64bc1cfd514600650a58f145ff1205fc9ddaa275e687d452d64e7cc957d77578f4c25235138d5521f9453559c35da860e8efbc64e57cbb7aee976f2b54421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983cd44c05bd0a48dfe3e26e7a23129d6606ed28a69989d552af6d9a9df2c3af36e0360070011bbecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f163d1a1a83109753f54b21cd027edd68149ee99eebc6f7d6dd4aed4af7588c8e1b44ccb19e810879b81a7000000e7ffffff00000000d7900a820b63278f4e9a217b98ef7042ad2a928903000000cbe43a1ed25268816b00000000000009d27d753a30a147b24a48435bd8a568669596e9e0867958e1dd7a0defb6670c06054002238260000000000040587c1ed797aa21a38e1e389f640a0b8b0000000000a835ad0f61ba739cd0c31b05c00fba8a4aee676d7caa2e53b91a68ff2e60da7b01a2e5785a238afa4aba70c08b0d71b6f72d6a8d87fb08533d97ad96d3943c4cc8306dac433a5cdf78b04963d679d5a5d07e618a1ef9057fec00f9e93021f5a8d30e716de8cde9c6000000000c3b64d10f0939b42b33ab2a8717096c58bb3bb1d457d8bb96870f5a7e2ba31fd69bb80235d957eaa9a40b764e5381ffa604aaafb76a980e72b408f686b185736693089213b4e140f8f38e5589663115093889deb646122a5dc5a9e5ba4d37749a36b880110e2bf524b79bc91105f1d3f7d0de694a9417d68694f17ba5e27ea1cec518b93fadcfe0de010ae9be3273ff73c34b5695080a35bfa5c69e3b533e1b939c81b3beda037b7191cb0000000000000000000010e5d683b8938db5c305cf7e6e62a6890ba9e1f4ee64f8202b59de5036569febfaa95f4633db108b2f786333ec7bacc927f4a1785165b5d2444b4c022bb5cff472e6a0c8ee9d6d8df83b704669147b732ac508c9b9f0ca0a1ce45319d43d4643eb285835daf2065b57bebd61ad6671296c27253a5f9688d57c91ccd40ffe2dbc5dd1613a2e6f5b363cc8d205ce6ef3c3c6ded7dd3dfdb39008d8997213f68cdc971c1d6fdacb7729a5560880a77525e9cfb94ef1735dfe74e6b948697f7e3580436b532a82e315d56b17a5dba98436cc24babaae409f0aab0b40af116001bc85492455956e853ead08b5793d4ecf72378a3dfd9cc837b1c66212d9a2be8fd6341c2f837c7fe09924a51ec42912856cce3d3b2d092c80813aad03e1e63a655f4138730f302df339f30a4fbd453c9a0fba381d071ad7cb80a52bec572e29b0b9b55c235806b97e166609f8083ce776075c"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x3000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000, 0x0, 0x200000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80, 0x0, 0x0, 0x0, 0x400}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {0xffffffff}, {}, {0x4}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x0, 0x2, 0x0, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d}, {0x0, 0x0, 0x8000}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}, {0xe, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000000)=0x6, 0x2c)
socket$inet_sctp(0x2, 0x1, 0x84)
gettid()
timer_create(0xfeffffff, 0x0, &(0x7f0000bbdffc))
sendfile(r2, r1, 0x0, 0x8)

32.512239259s ago: executing program 2 (id=5831):
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES8=<r0=>0x0], 0x48)
r1 = syz_io_uring_setup(0x2439, &(0x7f0000000380)={0x0, 0x1064, 0x1000, 0x7, 0x40224}, &(0x7f00000006c0)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004004, &(0x7f0000000140), 0x81, 0x477, &(0x7f0000000a40)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x10)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x3800)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r5, @ANYRES64=r0], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000018c0)={&(0x7f00000001c0)='f2fs_readdir\x00', r6, 0x0, 0x4}, 0x18)
syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r1, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2, 0x0, 0x530}, 0x0, 0x1000})
io_uring_enter(r1, 0x47f8, 0x1e43, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x82, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000740000000081069059640101006b08b402005356", @ANYRES32=0x41424344, @ANYBLOB="8c1000ca90781000080a8000000000000fbc080a0000000200000002fe"], 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(0xffffffffffffffff, 0x0, 0x0)
fchdir(r7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
splice(r9, 0x0, r11, 0x0, 0x8000f28, 0x0)
splice(r10, 0x0, r9, 0x0, 0x7f, 0xe)
write(r8, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r12 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r12, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x304000, 0x800, 0x0, 0x3}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sync()

31.324863315s ago: executing program 2 (id=5842):
socket(0x2, 0x80805, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

23.872374234s ago: executing program 44 (id=5719):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf2509000280"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)

21.428185314s ago: executing program 5 (id=5901):
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x40, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000bb00551a00000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
chown(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)

21.343451632s ago: executing program 5 (id=5904):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=ANY=[@ANYBLOB="44000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012a3fcc9800b000100626174616476000004000280100018800c0001800800010006"], 0x44}}, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0xf6, r2, 0x1, 0x7, 0x6, @multicast}, 0x14)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC=r3], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
chmod(&(0x7f00000006c0)='./file0\x00', 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44004010)
r5 = socket(0x10, 0x3, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r7=>r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, <r10=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r9}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r10, <r11=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r9}, 0x20)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYRESDEC=r7], 0x0}, 0x94)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r13}, 0x10)
r14 = openat$cgroup_int(r6, &(0x7f0000000300)='cpuset.mem_hardwall\x00', 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010f00010900030073797a32000000000c00024000000000000000010900010073797a30"], 0xac}, 0x1, 0x0, 0x0, 0x20008840}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x1000000008000}, 0x18)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0)
r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r16 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r15, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ppoll(&(0x7f0000000500)=[{r8, 0xc200}, {r16, 0x2a0}, {}, {r11, 0x200}, {r14, 0x4004}, {0xffffffffffffffff, 0x1000}], 0x6, &(0x7f0000000680), &(0x7f0000000800)={[0x7]}, 0x8)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x114, 0x29, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a6", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

21.124457103s ago: executing program 5 (id=5906):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0xa8, 0x0, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xd63}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xaeae}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xf}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x449}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000001}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6001}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x42081)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
timer_create(0x0, 0x0, &(0x7f0000000300))
write$tun(r1, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x89, 0x0, @rand_addr=0x64010102, @broadcast}, "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"}}, 0xfce)

20.936140952s ago: executing program 5 (id=5913):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000000000008500000084000000b70000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10)
lsm_set_self_attr(0x64, 0x0, 0x48, 0x0)

20.839360401s ago: executing program 5 (id=5916):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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")
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r0, 0x0, 0x80}, 0x18)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00\x00\x00\x00\x00\x00\x00'}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x20, 0x7ffc1ffb}]})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYRESHEX=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r3}, 0x18)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
write$sndseq(r4, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000001140)={0x80, 0x1, 0x7d0})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf9}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2, <r6=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)=r5}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
r7 = fcntl$getown(r6, 0x9)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r7, r1, 0x0, 0x4, &(0x7f0000000080)='GPL\x00'}, 0x30)
utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)

20.683899136s ago: executing program 5 (id=5918):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&\x00'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20)
recvmsg(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0)
sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0)

16.067674718s ago: executing program 45 (id=5842):
socket(0x2, 0x80805, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

5.710646891s ago: executing program 6 (id=6040):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000002c0)='fscache_acquire\x00', r0}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth1_vlan\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000880, 0x0, 0x1, 0x0, &(0x7f0000000000))
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f00000003c0)={0x66, "283efc7df3a4eb2bdb94031878cd5de74acfe84c8435dc87232315ac90b4839d2d145c8e44fe21f09d4c16b174b5a6dc52807b7cced9c3eb41a78389da65fb23115d3737af9ece529a4e4812b6fb116426aa5f146c905b7d5455f6db46c19db5e037aaba4b792fe7db732df80ced2620924bda8ca5f46a37460504dade35413c"})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6, 0x0, 0x2000}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_9p2000}]}})
bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, 0x40881, 0x64088}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x800)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
socket$nl_route(0x10, 0x3, 0x0)
r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0)
writev(r8, &(0x7f0000000500)=[{&(0x7f0000000040)="93d90400000304", 0x7}, {&(0x7f0000000180)="010400001bfa64", 0x5}], 0x2)

5.623017669s ago: executing program 46 (id=5918):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&\x00'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20)
recvmsg(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0)
sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0)

5.075513913s ago: executing program 6 (id=6045):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x8, <r2=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r2, @ANYRES32=r1], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r5=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000191c0)=ANY=[@ANYBLOB="010000000b000000050010000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="0000000002"], 0x48)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd700efedbdf25080065d0753a5bc01e6461f4010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e386eb807e04eb88b93000400000000000033c88e160d2745a91b08363bcc34006d0009788455ec9ad10b24"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fcntl$lock(r6, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r6, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9})
fcntl$lock(r6, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5})
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r1, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
sendmsg$ETHTOOL_MSG_DEBUG_GET(r6, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB="000227bd7000fcdbdf25070000", @ANYRES32=r5, @ANYBLOB="080003800100000008000300020000003c3000018008000100", @ANYRES32=r8, @ANYBLOB="1400020070696d7265673000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="1400020077673000000000000000000000000000140001800800030002000000080003000200"], 0x84}, 0x1, 0x0, 0x0, 0x40040}, 0x1)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
connect$pppl2tp(r7, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r9, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8)
writev(r7, &(0x7f0000000180)=[{0x0}], 0x1)
sendto$inet6(r9, 0x0, 0x0, 0x700, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r10=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r10, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000016b1183000000000085100000020000008500000000950000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70)

4.042589294s ago: executing program 6 (id=6051):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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")
arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000000))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000580)={0x0, 0xffffffff, 0x0, 'queue1\x00'})
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @hyper}, 0x10)
listen(r4, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_MAC_ACL(r5, &(0x7f0000000180)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x8805}, 0x24000041)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r5}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)

3.852422093s ago: executing program 6 (id=6052):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000080)=@id, &(0x7f00000000c0)=0x10, 0xc00)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x26e1, 0x0)
r2 = epoll_create1(0x0)
r3 = epoll_create1(0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000400)={0xa})
epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0)
unshare(0x20040600)
pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x8, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0)
sendmsg$tipc(r1, &(0x7f0000000140)={&(0x7f0000000100)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x1}}, 0x10, &(0x7f0000001800)=[{&(0x7f0000000380)="c14b6b3781866c189fb7fa7d4b76f3f56b5e64e073754f9d300926e8e7504a9c7e55e9152f66bc3e16d4c07ce3ede04313be5df483bc7e0ae87d447a1727184a63f5", 0x42}, {&(0x7f0000000480)}, {&(0x7f0000001480)="6df45e9c89b2c7a6fea486d4256c5e0636fb2560616425b87806bdacceb11963753e97c6bd586648d1c29833a051265b4c5de43d9a1f3cbf4241b3f5b85fe838965eaf0bdb21ee014b1bedd8da2f10beb91df395eb70e6f1b67a5ac22734f9b4c5ec0cf1b0e28b58c837692f9ab5a5dad5f14b88e3de221cf59d0ac7dc110e73362d6d4171c9c26ca742d09509e9256fd097a0bf4acc8ce5882c8467fe3393c17dbb76d9760c29d9a883f8601623030e1f3f6e0be41affc28ada4f9fcdfd6e172baa3691d5ee9704ef2bfb2e53d2296e1a95453ba3fd0d0cf4acbb4a413f", 0xde}, {&(0x7f0000001580)="a5024e6eb98e063e58bd10fabe99a8d9d0b3af8e7abc73691fd5e2dfedf8c63755264ea480be3f3b8578ada3301c56775e35241e755918a4a645ebb10266bf83c99dd1fbd3330b0c87908d645847e677485e1a47affd", 0x56}, {&(0x7f0000001600)="18b79eb4b67f1e053c082ac7f37950bbedd40526b346507e856b2a75f00d8bc9f65f4680b1149c06e9880d4766ef6a55515cfe4471a17e0f38a32fb57ec1a9d61b06edf5de091b5916eb465e8a68", 0x4e}], 0x5, &(0x7f0000001700)="7fa3d7e1a5591fc0bbc725e26586c555028714376f5db0e76ca089d466035ef2f1aeb83655cae287b901c34e8605635d7d44adb8470273ff27679030cd3ea642dc99e3c3dcbf17989ca8f6cd0536f5bbe7f334177c6cbf2ea21e3404c701fcf16c6806180c02febaf5e80d22beea0dcf63d0ff0eaa56deb7e5399dc836c7ccc7c847f332fb76146a296d1ab6b9462f8365c02abb9a2e05a019f1f4581f97e8e0b12fc9be927cfa38c4c405f4f4dfd4bb44c6baca30c8bad46730d29ba5c595eed22b2142ecdebc968cb5f419715d1dbc95cd05203aaf1b", 0xd7, 0x8000}, 0x4004c94)
socket$inet6_udp(0xa, 0x2, 0x0)
r6 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "7133997cb6fcbc172c01a01b14be1f7b85cbb7bc3421538b5baaa8d1d8de738955e755b9400d64aea6a54aa07614f9314bf45281de2d4c414f955605e4d1ecb9", 0x36}, 0x48, 0xffffffffffffffff)
keyctl$invalidate(0x15, r6)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f00000001c0)=@req3={0xb0, 0xffffffff, 0x1ff, 0x4, 0x3, 0x81, 0xfffffff8}, 0x1c)
keyctl$chown(0x4, r6, 0x0, 0xffffffffffffffff)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000094000000000000000095"], &(0x7f0000000580)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r8, 0x21, 0x85, 0xce, &(0x7f0000000000)="fae68670fef1c45ff0634fe72a6253b4357c978887379648e34b8e43761f35000437ab851cde4821ce97abc68f6a1c3593e2a7a267f78fff0e9e1743899a7dc5c1d2ecae353bd4bcdb61c053b1d7b1223331d664596d93a54d408700062455bf71027a99387a4c190aa0098ed6ed8951ff86c092399a8d11b76c5e00"/133, &(0x7f00000008c0)=""/206, 0x5000, 0x0, 0x0, 0x3f, 0xfffffffffffffffe, &(0x7f0000000400)="d5231f25b5f800100000000000009123e3c1d41aa6d9c06ff230c473bf3c54921f6394ca69f153ca434cb2f0cf7add6f939be3caf258971377484f23a33bba", 0x4, 0x8000, 0xfffffffd}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x18)

2.915130704s ago: executing program 6 (id=6060):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ")
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r0, 0x0, 0x80}, 0x18)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00\x00\x00\x00\x00\x00\x00'}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x20, 0x7ffc1ffb}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYRESHEX=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r2}, 0x18)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000001140)={0x80, 0x1, 0x7d0})

2.797469206s ago: executing program 6 (id=6062):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=<r1=>0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ff07000000ffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000d80)=ANY=[@ANYRES32=r0, @ANYRESOCT=r1, @ANYBLOB="e649436c289ec34a0100000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb70300672541e45baae53f20ee420008000000b700000000000000857dfa43429f46a439278f3930fda2aed8aa45edf58e326edac78467b331c17af336438d6d4d6be0662ab4796ea77748738b2d5ac6cef2ef33af80ab3d2e9aa818a1c9bc190c59c18e80b2b94f3b7ab47043b1e524a6cce51589c45c88096482a8f451131f338a658316b12c0b395ee933acaccc572a52f3d4e44a29a69bffd4a0f009ed1e86a6c1ba1479f4c092b0ef4a9551c4d780a50c3c8e48de999da08f2ea940e8"], &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x8}, 0x18)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x80)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x8081)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r5}, 0x10)
sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000814}, 0x4000)
sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="810000000000000000"], 0x10}, 0x1, 0x7}, 0x0)
r7 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r7, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
close(r8)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r10=>0x0]}, &(0x7f0000000240)=0x8)
sendmsg$inet_sctp(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="be6f88e904006dd2bd0117c586023380ec289d6c15d3fc0fb99d7337093227523ac2fe6bc9040e01b630dcecf43a9dc2ec73ca8323adbd5e3a0b91ebec615dfb1a23c01b1977a0b14dc32cafe1a70aaa8fb8a3683c7a114b56dd7f22da4178ffd809abddedaa6dfd4637286f12610033f3a62b203f7432b1ce1d701f3b38d77f0fd821733693a34566fd7aba12f7c8f6ff8092e2028fafa4bf4fa980508d371217af62f17c4eac6032968e543fd5a565b8efc372aa05a1b5add6c58ac7d8f828a9bfcb1081ffaecb10e29000"/219, 0xfe98}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r10], 0x20, 0x6044}, 0x6)

2.471921498s ago: executing program 7 (id=6067):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffb000/0x4000)=nil)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000100010009000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590)
signalfd(0xffffffffffffffff, 0x0, 0x0)

2.436753332s ago: executing program 7 (id=6068):
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000780)={0x3, &(0x7f0000000040)=[{0x2, 0x7, 0xfe, 0x5}, {0x102, 0x20, 0x3, 0xb92}, {0x8, 0x61, 0x3, 0x7}]})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_subtree(r0, &(0x7f0000000140), 0x2, 0x0)
rmdir(&(0x7f0000000040)='./cgroup/../file0\x00')
unshare(0x22020400)
io_destroy(0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'batadv_slave_0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x5, 0x80000000, 0x1, 0x4, 0x9, 0xa4, 0x0, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x6, 0x5, 0x101, 0x1002, 0x9, 0x1, 0x3, 0x1, 0xfffffffa, 0x65, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x0, 0x40, 0xd, 0xe, 0x1, 0x100, 0x4, 0x1c00, 0xb, 0x7, 0xbed4, 0x20000008, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x0, 0x83, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x100, 0x2, 0x180000, 0xf, 0x8b, 0x5, 0x2af, 0x6, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0xfffffffe, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0xe, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdfffffc, 0x2, 0x2, 0x84, 0x100, 0x6, 0x252, 0x81, 0x5d102cf1, 0x5, 0x20006, 0x5, 0x1, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x4000000, 0x4, 0x2, 0x40, 0x8, 0x4, 0x6, 0x100, 0x66cd, 0xc, 0x8, 0x1, 0x1fc, 0xc5c, 0x3ff]}})
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
setpriority(0x1, 0x0, 0x44)

2.286090676s ago: executing program 7 (id=6073):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000005cc0)=@newqdisc={0x34, 0x24, 0x400, 0x70b923, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xb, 0xb}, {0x8, 0x1e}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x4008000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000700008018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_clone(0x60100100, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0)
r6 = getpgrp(0x0)
r7 = syz_pidfd_open(r6, 0x0)
setns(r7, 0x34020000)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

1.348495058s ago: executing program 8 (id=6081):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
open(&(0x7f0000000740)='./bus\x00', 0x163361, 0x501c998c4dfcafcd)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10)
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0xffffff8c, &(0x7f0000000300)='trans=rdma,')

1.300425593s ago: executing program 8 (id=6082):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000002c0)='fscache_acquire\x00', r0}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth1_vlan\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000880, 0x0, 0x1, 0x0, &(0x7f0000000000))
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008400"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f00000003c0)={0x66, "283efc7df3a4eb2bdb94031878cd5de74acfe84c8435dc87232315ac90b4839d2d145c8e44fe21f09d4c16b174b5a6dc52807b7cced9c3eb41a78389da65fb23115d3737af9ece529a4e4812b6fb116426aa5f146c905b7d5455f6db46c19db5e037aaba4b792fe7db732df80ced2620924bda8ca5f46a37460504dade35413c"})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6, 0x0, 0x2000}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_9p2000}]}})
bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, 0x40881, 0x64088}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x800)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
socket$nl_route(0x10, 0x3, 0x0)
r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0)
writev(r8, &(0x7f0000000500)=[{&(0x7f0000000040)="93d90400000304", 0x7}, {&(0x7f0000000180)="010400001bfa64", 0x5}], 0x2)

1.246039578s ago: executing program 0 (id=6084):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840)

1.179199354s ago: executing program 8 (id=6085):
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1ff, 0xf8, 0x25, 0x4}, {0x12, 0x5, 0xd7, 0x80}, {0x1, 0x4, 0x0, 0x1}]})
r0 = socket$kcm(0x10, 0x2, 0x0)
mlockall(0x7)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x15)
ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f00000000c0)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x80440d0}, 0x0)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="050000004500"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000000001000000000000000000860129fd71a6ce8b638cd7fb50cb77fd05bdf7d54584cc27c0d034ea5a860d955475ed96e35f6a0520f63d3a305474c2067dc97ef789147ea336a9383f8a232b48c5e316f6c2f2a1f958c5a09afa57b4f67ad7a22e3b44280fd8a405f414d6d1fbdda8806fbbea2da0c0efa7c160698061754608d2ee99274cbb238914c1a12aa2949a4177ce4e6800"/162], 0x48}, 0x2}, 0x800)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x54)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x0, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0)
r7 = socket(0x10, 0x803, 0x0)
recvmmsg(r7, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000001a40)=""/217, 0xd9}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000000280)=""/172, 0xac}, {&(0x7f0000000680)=""/134, 0x86}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000000)=""/260, 0x104}, {&(0x7f0000000140)=""/88, 0x58}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000100, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r8 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
r9 = fcntl$dupfd(r8, 0x0, r8)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r9, 0x54a2)

1.070542985s ago: executing program 0 (id=6086):
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x40, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
chown(0x0, 0x0, 0x0)

1.007354431s ago: executing program 0 (id=6087):
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000480)={<r1=>0x0, @in={{0x2, 0x4e20, @loopback}}, 0x40, 0x8}, &(0x7f0000000300)=0x90)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000380)={r1, 0x5}, &(0x7f0000000540)=0x8)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2)
r3 = dup(r2)
ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000008c0)={0x80, 0x6, 0xf00, 0xec, 0x0, 0x5, 0x0})
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$phonet_pipe(0x23, 0x5, 0x2)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
connect$phonet_pipe(r6, &(0x7f0000000000)={0x23, 0x0, 0x0, 0x1}, 0x10)
ioctl$SIOCPNENABLEPIPE(r6, 0x89ed, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r8}, 0x10)
unshare(0x2040400)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_buf(r9, 0x1, 0x31, 0xfffffffffffffffd, &(0x7f0000000080)=0x33)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="044f0800ffffffff58210000", @ANYRES32=r4, @ANYBLOB="00000000000800008520000004000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x18)
r11 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r11, &(0x7f0000000240)={&(0x7f0000000180), 0x14, &(0x7f00000001c0)={&(0x7f00000003c0)="d0d6cded244e13498fec55169d79e3d84fa78eb6a8524b13f7628dee7e3a8127b10913b9016ca3ab4a88a17ab7f8a42b2e81da78573b590d6f06530b89c6cc62df9bf7031a430c0f2e093c30b01697290d087b1917534a500c84ae2c9ac6abe7e7917e6783158c52f050543310da45c7b5f93c92629fd46b9d697d8c6dfd58c44af7ed5b3aaf1c0aaf7ad4f985850e7c84676cbf00715bc6829372c04f6dfe79233e021d19dba1c13314e24a3291c25e745ec926e3460a89178702d153", 0xbd}, 0x1, 0x0, 0x0, 0x4044}, 0x24040895)
umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x9)

980.505154ms ago: executing program 0 (id=6088):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r5, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x2, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000050}, 0x4004)
r6 = dup(r3)
write$UHID_INPUT(r6, &(0x7f0000000a00)={0xf, {"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", 0xfffffffffffffd6a}}, 0x1006)
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000100)='\x00')
timer_create(0x7, &(0x7f0000000000)={0x0, 0x2d, 0xcbbc48433744eb72}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x2000000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) (async)
sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r5, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x2, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000050}, 0x4004) (async)
dup(r3) (async)
write$UHID_INPUT(r6, &(0x7f0000000a00)={0xf, {"a2e3ad21ed0d1bf91b28090955f70e06d038e7ff7fc6e5539b0d650e8b089b3f360768090890e0878f0e1ac6e7049b3346959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07450936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0xfffffffffffffd6a}}, 0x1006) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000100)='\x00') (async)
timer_create(0x7, &(0x7f0000000000)={0x0, 0x2d, 0xcbbc48433744eb72}, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x2000000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) (async)

922.79215ms ago: executing program 0 (id=6089):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000080)=@id, &(0x7f00000000c0)=0x10, 0xc00)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x26e1, 0x0)
r2 = epoll_create1(0x0)
r3 = epoll_create1(0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000400)={0xa})
epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0)
unshare(0x20040600)
pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x8, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0)
sendmsg$tipc(r1, &(0x7f0000000140)={&(0x7f0000000100)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x1}}, 0x10, &(0x7f0000001800)=[{&(0x7f0000000380)="c14b6b3781866c189fb7fa7d4b76f3f56b5e64e073754f9d300926e8e7504a9c7e55e9152f66bc3e16d4c07ce3ede04313be5df483bc7e0ae87d447a1727184a63f5", 0x42}, {&(0x7f0000000480)="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", 0x800}, {&(0x7f0000001480)="6df45e9c89b2c7a6fea486d4256c5e0636fb2560616425b87806bdacceb11963753e97c6bd586648d1c29833a051265b4c5de43d9a1f3cbf4241b3f5b85fe838965eaf0bdb21ee014b1bedd8da2f10beb91df395eb70e6f1b67a5ac22734f9b4c5ec0cf1b0e28b58c837692f9ab5a5dad5f14b88e3de221cf59d0ac7dc110e73362d6d4171c9c26ca742d09509e9256fd097a0bf4acc8ce5882c8467fe3393c17dbb76d9760c29d9a883f8601623030e1f3f6e0be41affc28ada4f9fcdfd6e172baa3691d5ee9704ef2bfb2e53d2296e1a95453ba3fd0d0cf4acbb4a413f", 0xde}, {&(0x7f0000001580)="a5024e6eb98e063e58bd10fabe99a8d9d0b3af8e7abc73691fd5e2dfedf8c63755264ea480be3f3b8578ada3301c56775e35241e755918a4a645ebb10266bf83c99dd1fbd3330b0c87908d645847e677485e1a47affd", 0x56}, {&(0x7f0000001600)="18b79eb4b67f1e053c082ac7f37950bbedd40526b346507e856b2a75f00d8bc9f65f4680b1149c06e9880d4766ef6a55515cfe4471a17e0f38a32fb57ec1a9d61b06edf5de091b5916eb465e8a68", 0x4e}], 0x5, &(0x7f0000001700)="7fa3d7e1a5591fc0bbc725e26586c555028714376f5db0e76ca089d466035ef2f1aeb83655cae287b901c34e8605635d7d44adb8470273ff27679030cd3ea642dc99e3c3dcbf17989ca8f6cd0536f5bbe7f334177c6cbf2ea21e3404c701fcf16c6806180c02febaf5e80d22beea0dcf63d0ff0eaa56deb7e5399dc836c7ccc7c847f332fb76146a296d1ab6b9462f8365c02abb9a2e05a019f1f4581f97e8e0b12fc9be927cfa38c4c405f4f4dfd4bb44c6baca30c8bad46730d29ba5c595eed22b2142ecdebc968cb5f419715d1dbc95cd05203aaf1b", 0xd7, 0x8000}, 0x4004c94)
socket$inet6_udp(0xa, 0x2, 0x0)
r6 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "7133997cb6fcbc172c01a01b14be1f7b85cbb7bc3421538b5baaa8d1d8de738955e755b9400d64aea6a54aa07614f9314bf45281de2d4c414f955605e4d1ecb9", 0x36}, 0x48, 0xffffffffffffffff)
keyctl$invalidate(0x15, r6)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f00000001c0)=@req3={0xb0, 0xffffffff, 0x1ff, 0x4, 0x3, 0x81, 0xfffffff8}, 0x1c)
keyctl$chown(0x4, r6, 0x0, 0xffffffffffffffff)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000094000000000000000095"], &(0x7f0000000580)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r8, 0x21, 0x85, 0xce, &(0x7f0000000000)="fae68670fef1c45ff0634fe72a6253b4357c978887379648e34b8e43761f35000437ab851cde4821ce97abc68f6a1c3593e2a7a267f78fff0e9e1743899a7dc5c1d2ecae353bd4bcdb61c053b1d7b1223331d664596d93a54d408700062455bf71027a99387a4c190aa0098ed6ed8951ff86c092399a8d11b76c5e00"/133, &(0x7f00000008c0)=""/206, 0x5000, 0x0, 0x0, 0x3f, 0xfffffffffffffffe, &(0x7f0000000400)="d5231f25b5f800100000000000009123e3c1d41aa6d9c06ff230c473bf3c54921f6394ca69f153ca434cb2f0cf7add6f939be3caf258971377484f23a33bba", 0x4, 0x8000, 0xfffffffd}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x18)

825.577799ms ago: executing program 7 (id=6090):
r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00')
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, <r2=>0xffffffffffffffff}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x4}, 0x18)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = socket(0x18, 0x5, 0x0)
connect$pppoe(r4, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0x8)

541.271487ms ago: executing program 7 (id=6091):
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x2, 0x571, &(0x7f0000000780)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010004000000000804000500a9930000100000000000000020"], 0x24, 0x0)

443.639486ms ago: executing program 3 (id=6092):
r0 = socket(0xa, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000a00)=0xb5, 0x46)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8f7ffffb702000008000000b703000000000000a5000000eeffffff95"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x10)
setuid(0xee01)
listen(r0, 0x2000002)

439.601507ms ago: executing program 3 (id=6093):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x18)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r5, 0xffffffffffffffff, 0x100000000000000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000071008a3701002abd7000fbdbdf2507003fcc", @ANYRES32=r6, @ANYBLOB="0c0001800800010062000300"], 0x24}, 0x1, 0x0, 0x0, 0x8c4}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x3, 0x0, 0x6, 0xfffffffc}, 0x0)
syz_emit_ethernet(0x86, &(0x7f00000001c0)={@random="591a1d9a2bdb", @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0xe000, 0x0, "bfd8a5dd2002c02142c4391145badd28fd7f0ffc0e896f38da00000500", "0bb10000085b2e00", {"bb3b2195c4b058706558a70864bef1f0", "524a72fc460b8cd26e095f24ab642591"}}}}}}}, 0x0)
r7 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x1, 0x65b, 0x46, @loopback, @rand_addr=' \x01\x00'}})

406.8967ms ago: executing program 7 (id=6094):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB='-net -cpu [pids +freezer -rlimit '], 0x21)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0)
sendfile(r6, r6, 0x0, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
readv(r6, &(0x7f0000000340)=[{&(0x7f0000001740)=""/153, 0x99}], 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r2, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r7=>0x0})
lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000a00)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@rand_addr=0x64010101, 0x4e22, 0x0, 0x4e21, 0x0, 0x0, 0x20, 0xe0, 0x2c, r7, r8}, {0x2, 0x100, 0xde, 0xa, 0x9, 0x1, 0x6c4, 0xf4e}, {0x1000, 0x6, 0x0, 0x100000000}, 0x4, 0x0, 0x2, 0x1, 0x2, 0x3}, {{@in6=@empty, 0x4d3, 0x32}, 0xa, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x2, 0xac, 0x4d66, 0xbe8, 0x7}}, 0xe8)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r10}, @IFLA_GTP_FD1={0x8, 0x2, @udp6=r11}]}}}]}, 0x40}}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x0, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x1, 'syz0\x00', 0xfe}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x542)

385.605892ms ago: executing program 3 (id=6095):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000002c0)='fscache_acquire\x00', r0}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth1_vlan\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000880, 0x0, 0x1, 0x0, &(0x7f0000000000))
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008400"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f00000003c0)={0x66, "283efc7df3a4eb2bdb94031878cd5de74acfe84c8435dc87232315ac90b4839d2d145c8e44fe21f09d4c16b174b5a6dc52807b7cced9c3eb41a78389da65fb23115d3737af9ece529a4e4812b6fb116426aa5f146c905b7d5455f6db46c19db5e037aaba4b792fe7db732df80ced2620924bda8ca5f46a37460504dade35413c"})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6, 0x0, 0x2000}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_9p2000}]}})
bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, 0x40881, 0x64088}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x800)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
socket$nl_route(0x10, 0x3, 0x0)
r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0)
writev(r8, &(0x7f0000000500)=[{&(0x7f0000000040)="93d90400000304", 0x7}, {&(0x7f0000000180)="010400001bfa64", 0x5}], 0x2)

315.647359ms ago: executing program 8 (id=6096):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94)
r2 = socket$rds(0x15, 0x5, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000ac0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_STOP_UNIT(r4, 0x6)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000800)=[@fadd={0x58, 0x114, 0x6, {{0x5, 0x6}, &(0x7f0000000400)=0x7, 0x0, 0xf, 0x4, 0x9, 0xfffffffffffffff9, 0x22, 0x7}}], 0x58, 0x8000}, 0x0)
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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")
sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000001bc0)="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", 0x1000}, {&(0x7f0000000440)="c1db024ff4d89ec26f45de4ac1640e35b6fe8b7a7b0bc13b4be9a8bd934a198c19a2c1b0733bc7db3b529f493deac5eeed717755344679b637d63cc23a6d09d9e150e4fc3d06f6a8058c2c83dfc0d0eb1a5c6101a5b2edad3502f8066f448993e0b6c46cb7faf529f62ee63df296af319abd9f7731c60c0a8afb78684a82", 0x7e}, {&(0x7f0000000500)="e49268d0c351133acbdf663ff79debf34fabaac61a078eebd5cfd7eebac018400a5d947d7e357fa53cf9be7f1dfe0b639fba3356295e75f999ce9f26b62c15c655361f0bab5d7a65296ae639bc9650ab0295067375d7c15a05d25717d8119dc5328576ad09ebfb2840cab8bbaff18a19c044e5723541f79d30216ebc96dfae8089fbac28caff6bb4e908a9f66de8016ad49c6fb362a284459962f2af1d2c707d3ce8a7319371cbeedeef849f54cf8d35df6b", 0xb2}, {&(0x7f0000000240)="a3155b2d04b6140585cbd887258326dba5bec8950030ee1d42e20d", 0x1b}, {&(0x7f00000006c0)="a476ecbb8b8b5d84a5a683ef6d487f12260dbb264e4432765afa03746ad0ae38b5da24a7dee1185ba8415674fc9307257869818b9b7393bb4f6e33589e1fd940a6b482a6845e85748e2181b2ba65d4fe136f2047ae52b709a7af6eafd67877dac2d1688c9457f24f81cbf098cd5c67f065e6f4663b0678067bca8ff9b491b5c5502689941a7d6b7bf2e017d27bee2f9d44bdaae0287abc518813", 0x9a}], 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="280000000053c431e7f9f56f1791ffffffffe010d201e0000001e0000002ae1414bb000000000000"], 0x28}, 0x40000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x40000c4)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="9800", @ANYRES16=r6, @ANYBLOB="b6232dbd7000fedbdf25080000001c0001800800030001000000e56f72ccf343876ff724ac65d992fb080003000000000008000300ffffffff20000780080001000100000008000100010000000c00040000000000000000004800058008000100756470003c0002800800030008000000080001000c00000008000300060000000800040004000000080004000200000008"], 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x8050)

304.46727ms ago: executing program 3 (id=6097):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x1)
capset(0x0, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f})
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2)

221.148988ms ago: executing program 3 (id=6098):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840)

137.414736ms ago: executing program 8 (id=6099):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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")
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r0, 0x0, 0x80}, 0x18)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00\x00\x00\x00\x00\x00\x00'}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x20, 0x7ffc1ffb}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYRESHEX=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r2}, 0x18)
write$sndseq(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000001140)={0x80, 0x1, 0x7d0})

70.582043ms ago: executing program 3 (id=6100):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x95255000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
unshare(0x64000600)
syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x42850)
r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000380)={0x101040, 0x10, 0x10}, 0x18)
getdents64(r1, 0x0, 0x0)

42.171196ms ago: executing program 0 (id=6101):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xffff}, 0x18)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0xcdc, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x40)

0s ago: executing program 8 (id=6102):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xf, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES32=<r0=>0xffffffffffffffff, @ANYBLOB="0000000000000000b70200001400009e219999dcade5b2c9f000b703000000000d008500000031"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000200000000000000000000030000000000000000000000000000000000000000000000010502"], 0x0, 0x42}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESDEC=r0], 0xfdef)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000380)={0x0, 0x3, 0x3, 0x7fff, 0xfe, "0062ba7d82000000160000000000f738096304"})
r3 = syz_open_pts(r2, 0x80)
r4 = dup3(r3, r2, 0x80000)
ioctl$TIOCGSERIAL(r4, 0x541e, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x1, 0x8}, 0xc)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r6=>r1, {0x1ff}}, './file0\x00'})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r8=>0x0})
renameat2(r6, &(0x7f0000000400)='./file0\x00', r6, &(0x7f00000003c0)='./file0\x00', 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8}, 0x50)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000300)={'ip6tnl0\x00', r8, 0x2f, 0xd2, 0x1, 0x8f, 0x21, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x700, 0x8, 0x2}})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

kernel console output (not intermixed with test programs):

resched+0x4e/0x90
[  402.661733][T19513]  ? _raw_spin_unlock_bh+0x36/0x40
[  402.661755][T19513]  ? lock_sock_nested+0x112/0x140
[  402.661786][T19513]  tipc_sendmsg+0x3e/0x60
[  402.661814][T19513]  ? __pfx_tipc_sendmsg+0x10/0x10
[  402.661876][T19513]  __sock_sendmsg+0x145/0x180
[  402.661901][T19513]  ____sys_sendmsg+0x31e/0x4e0
[  402.661941][T19513]  ___sys_sendmsg+0x17b/0x1d0
[  402.662005][T19513]  __x64_sys_sendmsg+0xd4/0x160
[  402.662113][T19513]  x64_sys_call+0x191e/0x3000
[  402.662135][T19513]  do_syscall_64+0xd2/0x200
[  402.662193][T19513]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  402.662283][T19513]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  402.662386][T19513]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  402.662413][T19513] RIP: 0033:0x7f1200efefc9
[  402.662428][T19513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  402.662469][T19513] RSP: 002b:00007f11ff95f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  402.662491][T19513] RAX: ffffffffffffffda RBX: 00007f1201155fa0 RCX: 00007f1200efefc9
[  402.662507][T19513] RDX: 0000000000000080 RSI: 00002000000008c0 RDI: 0000000000000006
[  402.662523][T19513] RBP: 00007f11ff95f090 R08: 0000000000000000 R09: 0000000000000000
[  402.662539][T19513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  402.662616][T19513] R13: 00007f1201156038 R14: 00007f1201155fa0 R15: 00007ffc5eb26568
[  402.662640][T19513]  </TASK>
[  402.965418][T19518] siw: device registration error -23
[  403.012805][T19532] siw: device registration error -23
[  403.031134][T19535] netlink: 'syz.4.5695': attribute type 4 has an invalid length.
[  403.045852][T19535] .`: renamed from $Hÿ
[  403.073219][T19540] netlink: 'syz.6.5697': attribute type 10 has an invalid length.
[  403.150698][T19540] team0 (unregistering): Port device team_slave_0 removed
[  403.205409][T19540] team0 (unregistering): Port device team_slave_1 removed
[  403.273361][T19550] program syz.5.5700 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  403.282977][T19550] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  403.291868][T19550] atomic_op ffff8881495e5d28 conn xmit_atomic 0000000000000000
[  403.302183][T19550] loop5: detected capacity change from 0 to 128
[  403.407391][T19558] loop6: detected capacity change from 0 to 512
[  403.430017][T19558] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.5703: EA inode hash validation failed
[  403.456949][T19558] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #15: comm syz.6.5703: corrupted inode contents
[  403.470003][T19558] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #15: comm syz.6.5703: mark_inode_dirty error
[  403.481910][T19558] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #15: comm syz.6.5703: corrupted inode contents
[  403.493994][T19558] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2996: inode #15: comm syz.6.5703: mark_inode_dirty error
[  403.506841][T19558] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2999: inode #15: comm syz.6.5703: mark inode dirty (error -117)
[  403.519872][T19558] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117)
[  403.529585][T19558] EXT4-fs (loop6): 1 orphan inode deleted
[  403.536521][T19558] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  403.731221][T19569] __nla_validate_parse: 1 callbacks suppressed
[  403.731236][T19569] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5707'.
[  403.774766][T19569] netlink: 'syz.8.5707': attribute type 1 has an invalid length.
[  403.782515][T19569] netlink: 224 bytes leftover after parsing attributes in process `syz.8.5707'.
[  404.008682][T19591] smc: net device bond0 applied user defined pnetid SYZ0
[  404.017966][T19591] smc: net device bond0 erased user defined pnetid SYZ0
[  404.055820][T19593] loop5: detected capacity change from 0 to 2048
[  404.124962][T19605] FAULT_INJECTION: forcing a failure.
[  404.124962][T19605] name failslab, interval 1, probability 0, space 0, times 0
[  404.137731][T19605] CPU: 1 UID: 0 PID: 19605 Comm: syz.8.5721 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  404.137773][T19605] Tainted: [W]=WARN
[  404.137782][T19605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  404.137865][T19605] Call Trace:
[  404.137874][T19605]  <TASK>
[  404.137886][T19605]  __dump_stack+0x1d/0x30
[  404.137957][T19605]  dump_stack_lvl+0xe8/0x140
[  404.137978][T19605]  dump_stack+0x15/0x1b
[  404.137999][T19605]  should_fail_ex+0x265/0x280
[  404.138059][T19605]  should_failslab+0x8c/0xb0
[  404.138166][T19605]  kmem_cache_alloc_node_noprof+0x57/0x4a0
[  404.138206][T19605]  ? __alloc_skb+0x101/0x320
[  404.138245][T19605]  __alloc_skb+0x101/0x320
[  404.138294][T19605]  netlink_alloc_large_skb+0xbf/0xf0
[  404.138329][T19605]  netlink_sendmsg+0x3cf/0x6b0
[  404.138433][T19605]  ? __pfx_netlink_sendmsg+0x10/0x10
[  404.138477][T19605]  __sock_sendmsg+0x145/0x180
[  404.138510][T19605]  ____sys_sendmsg+0x31e/0x4e0
[  404.138564][T19605]  ___sys_sendmsg+0x17b/0x1d0
[  404.138657][T19605]  __x64_sys_sendmsg+0xd4/0x160
[  404.138714][T19605]  x64_sys_call+0x191e/0x3000
[  404.138744][T19605]  do_syscall_64+0xd2/0x200
[  404.138800][T19605]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  404.138828][T19605]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  404.138862][T19605]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.138949][T19605] RIP: 0033:0x7fe97e21efc9
[  404.138969][T19605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  404.139023][T19605] RSP: 002b:00007fe97cc7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  404.139047][T19605] RAX: ffffffffffffffda RBX: 00007fe97e475fa0 RCX: 00007fe97e21efc9
[  404.139063][T19605] RDX: 0000000000000810 RSI: 0000200000000000 RDI: 0000000000000003
[  404.139147][T19605] RBP: 00007fe97cc7f090 R08: 0000000000000000 R09: 0000000000000000
[  404.139159][T19605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  404.139171][T19605] R13: 00007fe97e476038 R14: 00007fe97e475fa0 R15: 00007ffcbffdf878
[  404.139190][T19605]  </TASK>
[  404.222235][T19593]  loop5: unable to read partition table
[  404.357747][T19593] loop5: partition table beyond EOD, truncated
[  404.363999][T19593] loop_reread_partitions: partition scan of loop5 () failed (rc=-5)
[  404.389340][T12481] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  404.400125][T19610] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5723'.
[  404.442166][T19615] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma?
[  404.445434][T19593] $Hÿ: renamed from bond0 (while UP)
[  404.477566][T19593] $Hÿ: entered promiscuous mode
[  404.482729][T19593] bond_slave_0: entered promiscuous mode
[  404.488536][T19593] bond_slave_1: entered promiscuous mode
[  404.506176][T19621] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19621 comm=syz.2.5727
[  404.562125][T19625] netlink: 'syz.2.5728': attribute type 5 has an invalid length.
[  404.596398][T19627] loop6: detected capacity change from 0 to 512
[  404.622554][T19627] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #13: comm syz.6.5729: iget: bad i_size value: 12154757448730
[  404.642773][T19627] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.5729: couldn't read orphan inode 13 (err -117)
[  404.663957][T19627] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  404.878547][T19647] loop5: detected capacity change from 0 to 512
[  404.894224][T19647] EXT4-fs: Ignoring removed i_version option
[  404.900314][T19647] EXT4-fs: Ignoring removed bh option
[  404.935801][T19647] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  404.958579][T19647] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  404.983896][   T29] kauditd_printk_skb: 397 callbacks suppressed
[  404.983914][   T29] audit: type=1400 audit(1761180166.695:43572): avc:  denied  { add_name } for  pid=19646 comm="syz.5.5735" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  405.041186][   T29] audit: type=1400 audit(1761180166.695:43573): avc:  denied  { create } for  pid=19646 comm="syz.5.5735" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  405.061512][   T29] audit: type=1400 audit(1761180166.695:43574): avc:  denied  { write open } for  pid=19646 comm="syz.5.5735" path="/57/bus/bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  405.084500][   T29] audit: type=1400 audit(1761180166.695:43575): avc:  denied  { read write } for  pid=19646 comm="syz.5.5735" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  405.107487][   T29] audit: type=1400 audit(1761180166.695:43576): avc:  denied  { open } for  pid=19646 comm="syz.5.5735" path="/57/bus/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  405.131359][   T29] audit: type=1400 audit(1761180166.755:43577): avc:  denied  { ioctl } for  pid=19646 comm="syz.5.5735" path="/57/bus/file1" dev="loop5" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  405.131886][T18737] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  405.208404][T19655] tipc: Started in network mode
[  405.213417][T19655] tipc: Node identity b2adfe3a7dfe, cluster identity 4711
[  405.220758][T19655] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  405.276812][T19659] netlink: 'syz.8.5739': attribute type 10 has an invalid length.
[  405.324805][T19659] team0 (unregistering): Port device team_slave_0 removed
[  405.335541][T19659] team0 (unregistering): Port device team_slave_1 removed
[  405.379363][T12481] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  405.478422][T19666] netlink: 4 bytes leftover after parsing attributes in process `'.
[  405.485449][   T29] audit: type=1326 audit(1761180167.185:43578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19664 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa129b1efc9 code=0x7ffc0000
[  405.486523][T19666] netlink: 348 bytes leftover after parsing attributes in process `'.
[  405.509430][   T29] audit: type=1326 audit(1761180167.185:43579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19664 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa129b1efc9 code=0x7ffc0000
[  405.517764][T19666] netlink: 4 bytes leftover after parsing attributes in process `'.
[  405.540510][   T29] audit: type=1326 audit(1761180167.185:43580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19664 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa129b1efc9 code=0x7ffc0000
[  405.548464][T19666] netlink: 348 bytes leftover after parsing attributes in process `'.
[  405.579217][T19666] netlink: 4 bytes leftover after parsing attributes in process `'.
[  405.579527][   T29] audit: type=1326 audit(1761180167.185:43581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19664 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa129b1efc9 code=0x7ffc0000
[  405.655088][T19667] loop5: detected capacity change from 0 to 2048
[  405.711890][T19677] siw: device registration error -23
[  405.724897][T19667]  loop5: unable to read partition table
[  405.743909][T19667] loop5: partition table beyond EOD, truncated
[  405.750115][T19667] loop_reread_partitions: partition scan of loop5 () failed (rc=-5)
[  405.758427][T19674] Falling back ldisc for ttyS3.
[  405.941354][T19696] loop8: detected capacity change from 0 to 512
[  405.953997][T19691] Falling back ldisc for ttyS3.
[  405.976908][T19696] EXT4-fs warning (device loop8): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  406.024186][T19696] EXT4-fs (loop8): mount failed
[  406.071685][T19709] loop5: detected capacity change from 0 to 1024
[  406.093382][T19688] lo speed is unknown, defaulting to 1000
[  406.110071][T19688] lo speed is unknown, defaulting to 1000
[  406.117127][T19709] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  406.195045][T18737] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  406.225440][T19714] 9pnet_fd: Insufficient options for proto=fd
[  406.253795][T19716] loop5: detected capacity change from 0 to 1024
[  406.277970][T19716] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  406.316830][T19716] FAULT_INJECTION: forcing a failure.
[  406.316830][T19716] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  406.329995][T19716] CPU: 1 UID: 0 PID: 19716 Comm: syz.5.5758 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  406.330087][T19716] Tainted: [W]=WARN
[  406.330097][T19716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  406.330114][T19716] Call Trace:
[  406.330123][T19716]  <TASK>
[  406.330133][T19716]  __dump_stack+0x1d/0x30
[  406.330163][T19716]  dump_stack_lvl+0xe8/0x140
[  406.330191][T19716]  dump_stack+0x15/0x1b
[  406.330284][T19716]  should_fail_ex+0x265/0x280
[  406.330321][T19716]  should_fail+0xb/0x20
[  406.330418][T19716]  should_fail_usercopy+0x1a/0x20
[  406.330440][T19716]  _copy_from_user+0x1c/0xb0
[  406.330466][T19716]  ___sys_sendmsg+0xc1/0x1d0
[  406.330596][T19716]  __sys_sendmmsg+0x178/0x300
[  406.330649][T19716]  __x64_sys_sendmmsg+0x57/0x70
[  406.330681][T19716]  x64_sys_call+0x1c4a/0x3000
[  406.330782][T19716]  do_syscall_64+0xd2/0x200
[  406.330810][T19716]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  406.330899][T19716]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  406.330935][T19716]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  406.330966][T19716] RIP: 0033:0x7f20a4baefc9
[  406.330989][T19716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  406.331009][T19716] RSP: 002b:00007f20a3617038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  406.331033][T19716] RAX: ffffffffffffffda RBX: 00007f20a4e05fa0 RCX: 00007f20a4baefc9
[  406.331124][T19716] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 0000000000000005
[  406.331139][T19716] RBP: 00007f20a3617090 R08: 0000000000000000 R09: 0000000000000000
[  406.331155][T19716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  406.331170][T19716] R13: 00007f20a4e06038 R14: 00007f20a4e05fa0 R15: 00007ffdc18cfc98
[  406.331194][T19716]  </TASK>
[  406.333176][T19688] chnl_net:caif_netlink_parms(): no params data found
[  406.344727][ T2968] tipc: Node number set to 3478388282
[  406.579051][T18737] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  406.589600][T19727] FAULT_INJECTION: forcing a failure.
[  406.589600][T19727] name failslab, interval 1, probability 0, space 0, times 0
[  406.602415][T19727] CPU: 0 UID: 0 PID: 19727 Comm: syz.6.5762 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  406.602474][T19727] Tainted: [W]=WARN
[  406.602480][T19727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  406.602495][T19727] Call Trace:
[  406.602513][T19727]  <TASK>
[  406.602523][T19727]  __dump_stack+0x1d/0x30
[  406.602623][T19727]  dump_stack_lvl+0xe8/0x140
[  406.602649][T19727]  dump_stack+0x15/0x1b
[  406.602670][T19727]  should_fail_ex+0x265/0x280
[  406.602703][T19727]  should_failslab+0x8c/0xb0
[  406.602737][T19727]  kmem_cache_alloc_noprof+0x50/0x480
[  406.602873][T19727]  ? radix_tree_node_alloc+0x8a/0x1f0
[  406.603022][T19727]  radix_tree_node_alloc+0x8a/0x1f0
[  406.603065][T19727]  radix_tree_extend+0xcf/0x370
[  406.603106][T19727]  idr_get_free+0x12d/0x550
[  406.603145][T19727]  idr_alloc_u32+0xca/0x180
[  406.603206][T19727]  ? __pfx_loop_control_ioctl+0x10/0x10
[  406.603241][T19727]  idr_alloc+0x6e/0xd0
[  406.603300][T19727]  loop_add+0x145/0x590
[  406.603407][T19727]  ? __pfx_loop_control_ioctl+0x10/0x10
[  406.603496][T19727]  loop_control_ioctl+0xd0/0x3f0
[  406.603546][T19727]  ? __pfx_loop_control_ioctl+0x10/0x10
[  406.603580][T19727]  __se_sys_ioctl+0xce/0x140
[  406.603641][T19727]  __x64_sys_ioctl+0x43/0x50
[  406.603666][T19727]  x64_sys_call+0x1816/0x3000
[  406.603697][T19727]  do_syscall_64+0xd2/0x200
[  406.603718][T19727]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  406.603749][T19727]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  406.603838][T19727]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  406.603874][T19727] RIP: 0033:0x7fa129b1efc9
[  406.603893][T19727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  406.603917][T19727] RSP: 002b:00007fa128587038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  406.603936][T19727] RAX: ffffffffffffffda RBX: 00007fa129d75fa0 RCX: 00007fa129b1efc9
[  406.603961][T19727] RDX: 0000000007000000 RSI: 0000000000004c80 RDI: 0000000000000007
[  406.603972][T19727] RBP: 00007fa128587090 R08: 0000000000000000 R09: 0000000000000000
[  406.603984][T19727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  406.603995][T19727] R13: 00007fa129d76038 R14: 00007fa129d75fa0 R15: 00007fff9b18b5c8
[  406.604016][T19727]  </TASK>
[  406.874004][T19730] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5763'.
[  406.874358][T19688] bridge0: port 1(bridge_slave_0) entered blocking state
[  406.890134][T19688] bridge0: port 1(bridge_slave_0) entered disabled state
[  406.897631][T19688] bridge_slave_0: entered allmulticast mode
[  406.904522][T19688] bridge_slave_0: entered promiscuous mode
[  406.912129][T19688] bridge0: port 2(bridge_slave_1) entered blocking state
[  406.919231][T19688] bridge0: port 2(bridge_slave_1) entered disabled state
[  406.926522][T19688] bridge_slave_1: entered allmulticast mode
[  406.933314][T19688] bridge_slave_1: entered promiscuous mode
[  406.962163][T19688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  406.986558][T19688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  407.011127][T19688] team0: Port device team_slave_0 added
[  407.018557][T19688] team0: Port device team_slave_1 added
[  407.105019][T19688] batman_adv: batadv0: Adding interface: batadv_slave_0
[  407.112071][T19688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  407.138331][T19688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  407.159911][T19688] batman_adv: batadv0: Adding interface: batadv_slave_1
[  407.166964][T19688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  407.192927][T19688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  407.221633][T19754] netlink: 'syz.8.5772': attribute type 10 has an invalid length.
[  407.233087][T19688] hsr_slave_0: entered promiscuous mode
[  407.239690][T19688] hsr_slave_1: entered promiscuous mode
[  407.249665][T19688] debugfs: 'hsr0' already exists in 'hsr'
[  407.255638][T19688] Cannot create hsr debugfs directory
[  407.276437][T19757] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.280359][T19759] 9pnet_fd: Insufficient options for proto=fd
[  407.319010][T19763] rdma_op ffff88813e804180 conn xmit_rdma 0000000000000000
[  407.336602][T19757] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.387840][T19757] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.413897][T19765] Falling back ldisc for ttyS3.
[  407.477626][T19757] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.532735][T16410] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  407.553623][T16410] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  407.577575][T16410] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  407.586831][T16410] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  407.631245][T19775] macvtap0: entered promiscuous mode
[  407.637555][T19775] macvtap0: left promiscuous mode
[  407.695609][T19688] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  407.708164][T19688] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  407.728831][T19688] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  407.747922][T19688] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  407.793853][T19779] Falling back ldisc for ttyS3.
[  407.864505][T19688] 8021q: adding VLAN 0 to HW filter on device bond0
[  407.896507][T19688] 8021q: adding VLAN 0 to HW filter on device team0
[  407.934463][T16362] bridge0: port 1(bridge_slave_0) entered blocking state
[  407.941651][T16362] bridge0: port 1(bridge_slave_0) entered forwarding state
[  407.951824][T19796] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5786'.
[  407.961683][T19796] netlink: 'syz.8.5786': attribute type 6 has an invalid length.
[  407.971595][T19801] 9pnet_fd: Insufficient options for proto=fd
[  407.981645][T19797] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  407.995798][T16362] bridge0: port 2(bridge_slave_1) entered blocking state
[  408.002901][T16362] bridge0: port 2(bridge_slave_1) entered forwarding state
[  408.048170][T19796] lo speed is unknown, defaulting to 1000
[  408.082977][T19796] lo speed is unknown, defaulting to 1000
[  408.128674][T19803] siw: device registration error -23
[  408.184116][T19688] 8021q: adding VLAN 0 to HW filter on device batadv0
[  408.208023][T19815] siw: device registration error -23
[  408.284450][T19820] FAULT_INJECTION: forcing a failure.
[  408.284450][T19820] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  408.291534][T19823] program syz.6.5792 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  408.297609][T19820] CPU: 0 UID: 0 PID: 19820 Comm: syz.8.5793 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  408.297729][T19820] Tainted: [W]=WARN
[  408.297737][T19820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  408.297755][T19820] Call Trace:
[  408.297765][T19820]  <TASK>
[  408.297775][T19820]  __dump_stack+0x1d/0x30
[  408.297808][T19820]  dump_stack_lvl+0xe8/0x140
[  408.297839][T19820]  dump_stack+0x15/0x1b
[  408.297945][T19820]  should_fail_ex+0x265/0x280
[  408.297992][T19820]  should_fail+0xb/0x20
[  408.298092][T19820]  should_fail_usercopy+0x1a/0x20
[  408.298122][T19820]  strncpy_from_user+0x25/0x230
[  408.298160][T19820]  ? __kmalloc_cache_noprof+0x249/0x4a0
[  408.298283][T19820]  __se_sys_memfd_create+0x1ff/0x590
[  408.298320][T19820]  __x64_sys_memfd_create+0x31/0x40
[  408.298354][T19820]  x64_sys_call+0x2ac2/0x3000
[  408.298419][T19820]  do_syscall_64+0xd2/0x200
[  408.298445][T19820]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  408.298484][T19820]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  408.298580][T19820]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.298611][T19820] RIP: 0033:0x7fe97e21efc9
[  408.298632][T19820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  408.298656][T19820] RSP: 002b:00007fe97cc7ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  408.298682][T19820] RAX: ffffffffffffffda RBX: 000000000000052e RCX: 00007fe97e21efc9
[  408.298766][T19820] RDX: 00007fe97cc7eef0 RSI: 0000000000000000 RDI: 00007fe97e2a2960
[  408.298778][T19820] RBP: 0000200000000f00 R08: 00007fe97cc7ebb7 R09: 00007fe97cc7ee40
[  408.298790][T19820] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000
[  408.298808][T19820] R13: 00007fe97cc7eef0 R14: 00007fe97cc7eeb0 R15: 0000200000000080
[  408.298834][T19820]  </TASK>
[  408.496170][T19830] loop6: detected capacity change from 0 to 128
[  408.547918][T19688] veth0_vlan: entered promiscuous mode
[  408.605912][T19688] veth1_vlan: entered promiscuous mode
[  408.671644][T19823] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  408.688782][T19688] veth0_macvtap: entered promiscuous mode
[  408.717024][T19688] veth1_macvtap: entered promiscuous mode
[  408.741977][T19688] batman_adv: batadv0: Interface activated: batadv_slave_0
[  408.761215][T19688] batman_adv: batadv0: Interface activated: batadv_slave_1
[  408.784079][T16386] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  408.810440][T16386] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  408.835852][T16386] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  408.867477][T16386] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  408.931096][T19837] __nla_validate_parse: 3 callbacks suppressed
[  408.931145][T19837] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5749'.
[  409.085566][T19846] 9pnet_fd: Insufficient options for proto=fd
[  409.140379][T19847] lo speed is unknown, defaulting to 1000
[  409.155705][T19847] lo speed is unknown, defaulting to 1000
[  409.202556][T19855] siw: device registration error -23
[  409.213998][T19853] Falling back ldisc for ttyS3.
[  409.331345][T19858] loop5: detected capacity change from 0 to 2048
[  409.373850][T19865] Falling back ldisc for ttyS3.
[  409.423246][T19858]  loop5: unable to read partition table
[  409.436144][T19858] loop5: partition table beyond EOD, truncated
[  409.442497][T19858] loop_reread_partitions: partition scan of loop5 () failed (rc=-5)
[  409.478563][T19869] vlan3: entered allmulticast mode
[  409.491085][T19866] loop6: detected capacity change from 0 to 512
[  409.501058][T19866] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.5805: EA inode hash validation failed
[  409.515196][T19866] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #15: comm syz.6.5805: corrupted inode contents
[  409.529042][T19866] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #15: comm syz.6.5805: mark_inode_dirty error
[  409.544625][T19866] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #15: comm syz.6.5805: corrupted inode contents
[  409.573502][T19866] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2996: inode #15: comm syz.6.5805: mark_inode_dirty error
[  409.590368][T19876] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5809'.
[  409.600209][T19866] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2999: inode #15: comm syz.6.5805: mark inode dirty (error -117)
[  409.617651][T19866] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117)
[  409.631670][T19876] netlink: 'syz.5.5809': attribute type 1 has an invalid length.
[  409.637097][T19866] EXT4-fs (loop6): 1 orphan inode deleted
[  409.639501][T19876] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5809'.
[  409.645748][T19866] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  409.709327][T12481] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  409.759820][T19884] 9pnet_fd: Insufficient options for proto=fd
[  409.762008][T19880] syzkaller1: entered promiscuous mode
[  409.771648][T19880] syzkaller1: entered allmulticast mode
[  409.843203][T19888] loop5: detected capacity change from 0 to 2048
[  409.877049][T19890] bond2 (unregistering): Released all slaves
[  409.952733][T19888]  loop5: unable to read partition table
[  409.977932][T19888] loop5: partition table beyond EOD, truncated
[  409.984258][T19888] loop_reread_partitions: partition scan of loop5 () failed (rc=-5)
[  409.993953][   T29] kauditd_printk_skb: 122 callbacks suppressed
[  409.993972][   T29] audit: type=1326 audit(1761180171.705:43703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19895 comm="syz.2.5817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b42defc9 code=0x7ffc0000
[  410.032943][T19896] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  410.050002][T19901] netlink: 96 bytes leftover after parsing attributes in process `syz.8.5820'.
[  410.066087][T19896] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  410.083996][   T29] audit: type=1326 audit(1761180171.735:43704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19895 comm="syz.2.5817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f78b42defc9 code=0x7ffc0000
[  410.088982][T19903] loop6: detected capacity change from 0 to 1024
[  410.107737][   T29] audit: type=1326 audit(1761180171.735:43705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19895 comm="syz.2.5817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b42defc9 code=0x7ffc0000
[  410.137772][   T29] audit: type=1326 audit(1761180171.735:43706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19895 comm="syz.2.5817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b42defc9 code=0x7ffc0000
[  410.161720][   T29] audit: type=1326 audit(1761180171.735:43707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19895 comm="syz.2.5817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f78b42dd810 code=0x7ffc0000
[  410.173453][T19903] EXT4-fs: Invalid want_extra_isize 2
[  410.185323][   T29] audit: type=1400 audit(1761180171.735:43708): avc:  denied  { read } for  pid=19895 comm="syz.2.5817" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  410.214432][   T29] audit: type=1400 audit(1761180171.735:43709): avc:  denied  { open } for  pid=19895 comm="syz.2.5817" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  410.238465][   T29] audit: type=1326 audit(1761180171.735:43710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19895 comm="syz.2.5817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b42defc9 code=0x7ffc0000
[  410.262125][   T29] audit: type=1326 audit(1761180171.735:43711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19895 comm="syz.2.5817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b42defc9 code=0x7ffc0000
[  410.285769][   T29] audit: type=1326 audit(1761180171.735:43712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19895 comm="syz.2.5817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f78b42dd810 code=0x7ffc0000
[  410.292636][T19903] netlink: 108 bytes leftover after parsing attributes in process `syz.6.5819'.
[  410.330706][T19910] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5822'.
[  410.349812][T19910] netlink: 'syz.5.5822': attribute type 1 has an invalid length.
[  410.357607][T19910] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5822'.
[  410.453653][T19918] syzkaller1: entered promiscuous mode
[  410.459314][T19918] syzkaller1: entered allmulticast mode
[  410.659154][T19935] 9pnet_fd: Insufficient options for proto=fd
[  410.682140][T19934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  410.713831][T19934] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  411.415141][T19953] siw: device registration error -23
[  411.494633][T19959] syzkaller1: entered promiscuous mode
[  411.500264][T19959] syzkaller1: entered allmulticast mode
[  412.222708][T19964] loop5: detected capacity change from 0 to 512
[  412.258755][T19964] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.5841: EA inode hash validation failed
[  412.293876][T19964] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #15: comm syz.5.5841: corrupted inode contents
[  412.366492][T19964] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #15: comm syz.5.5841: mark_inode_dirty error
[  412.435746][T19964] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #15: comm syz.5.5841: corrupted inode contents
[  412.468858][T19964] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2996: inode #15: comm syz.5.5841: mark_inode_dirty error
[  412.510700][T19964] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2999: inode #15: comm syz.5.5841: mark inode dirty (error -117)
[  412.554680][T19964] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117)
[  412.577009][T19964] EXT4-fs (loop5): 1 orphan inode deleted
[  412.590367][T19969] netlink: 'syz.6.5843': attribute type 10 has an invalid length.
[  412.599942][T19964] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  412.626804][T19969] netlink: 'syz.6.5843': attribute type 10 has an invalid length.
[  412.654324][T19969] dummy0: entered promiscuous mode
[  412.665532][T19969] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link
[  412.684988][T19969] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5843'.
[  412.760710][T18737] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  412.858754][T19979] rdma_op ffff88817572a980 conn xmit_rdma 0000000000000000
[  412.903278][T19975] loop5: detected capacity change from 0 to 2048
[  413.002329][T19975]  loop5: unable to read partition table
[  413.011644][T19975] loop5: partition table beyond EOD, truncated
[  413.017951][T19975] loop_reread_partitions: partition scan of loop5 () failed (rc=-5)
[  413.044028][T19984] Falling back ldisc for ttyS3.
[  413.359107][T19994] lo speed is unknown, defaulting to 1000
[  413.365987][T19994] lo speed is unknown, defaulting to 1000
[  414.118830][T20001] siw: device registration error -23
[  414.186602][T20011] --map-set only usable from mangle table
[  414.240851][T20016] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5858'.
[  414.250034][T20016] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5858'.
[  414.259080][T20016] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5858'.
[  414.323882][T20016] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5858'.
[  414.332882][T20016] netlink: 'syz.6.5858': attribute type 6 has an invalid length.
[  414.410874][T20019] loop5: detected capacity change from 0 to 512
[  414.466532][T20021] loop6: detected capacity change from 0 to 2048
[  414.483887][T20019] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #13: comm syz.5.5860: iget: bad i_size value: 12154757448730
[  414.535994][T20021] Alternate GPT is invalid, using primary GPT.
[  414.542399][T20021]  loop6: p1 p2 p3
[  414.557816][T20019] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.5860: couldn't read orphan inode 13 (err -117)
[  414.635602][T20019] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  415.080107][T20027] loop6: detected capacity change from 0 to 512
[  415.115351][T20027] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.5862: EA inode hash validation failed
[  415.163784][T20027] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #15: comm syz.6.5862: corrupted inode contents
[  415.213823][T20027] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #15: comm syz.6.5862: mark_inode_dirty error
[  415.263941][T20027] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #15: comm syz.6.5862: corrupted inode contents
[  415.303743][T20027] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2996: inode #15: comm syz.6.5862: mark_inode_dirty error
[  415.346168][T20027] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2999: inode #15: comm syz.6.5862: mark inode dirty (error -117)
[  415.393803][T20027] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117)
[  415.402927][T20027] EXT4-fs (loop6): 1 orphan inode deleted
[  415.412302][T20033] loop8: detected capacity change from 0 to 512
[  415.425898][T20033] EXT4-fs warning (device loop8): ext4_xattr_inode_get:560: inode #11: comm syz.8.5863: EA inode hash validation failed
[  415.434223][T20027] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  415.450607][T20033] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #15: comm syz.8.5863: corrupted inode contents
[  415.468994][T20033] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #15: comm syz.8.5863: mark_inode_dirty error
[  415.490705][T20033] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #15: comm syz.8.5863: corrupted inode contents
[  415.513015][T20033] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2996: inode #15: comm syz.8.5863: mark_inode_dirty error
[  415.533587][T20033] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2999: inode #15: comm syz.8.5863: mark inode dirty (error -117)
[  415.551630][T20033] EXT4-fs warning (device loop8): ext4_evict_inode:274: xattr delete (err -117)
[  415.571122][T20033] EXT4-fs (loop8): 1 orphan inode deleted
[  415.584967][T20033] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  415.659206][T12481] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  415.836300][T13947] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  415.845893][T18737] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  416.018057][T20045] syzkaller1: entered promiscuous mode
[  416.023726][T20045] syzkaller1: entered allmulticast mode
[  416.317906][T20054] loop5: detected capacity change from 0 to 512
[  416.364556][T20054] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  416.408971][T20054] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  416.494489][T20048] lo speed is unknown, defaulting to 1000
[  416.500698][T20048] lo speed is unknown, defaulting to 1000
[  416.604974][T20060] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5870'.
[  416.632865][T20060] netlink: 'syz.6.5870': attribute type 1 has an invalid length.
[  416.640796][T20060] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5870'.
[  416.734708][T18737] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  416.778970][T20065] FAULT_INJECTION: forcing a failure.
[  416.778970][T20065] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  416.792119][T20065] CPU: 0 UID: 0 PID: 20065 Comm: syz.5.5872 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  416.792152][T20065] Tainted: [W]=WARN
[  416.792160][T20065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  416.792175][T20065] Call Trace:
[  416.792183][T20065]  <TASK>
[  416.792192][T20065]  __dump_stack+0x1d/0x30
[  416.792220][T20065]  dump_stack_lvl+0xe8/0x140
[  416.792253][T20065]  dump_stack+0x15/0x1b
[  416.792306][T20065]  should_fail_ex+0x265/0x280
[  416.792438][T20065]  should_fail+0xb/0x20
[  416.792459][T20065]  should_fail_usercopy+0x1a/0x20
[  416.792481][T20065]  _copy_from_user+0x1c/0xb0
[  416.792505][T20065]  io_register_rsrc+0x60/0x1e0
[  416.792541][T20065]  __se_sys_io_uring_register+0x531/0xf30
[  416.792615][T20065]  ? fput+0x8f/0xc0
[  416.792707][T20065]  ? ksys_write+0x192/0x1a0
[  416.792853][T20065]  __x64_sys_io_uring_register+0x55/0x70
[  416.792883][T20065]  x64_sys_call+0x18a3/0x3000
[  416.792978][T20065]  do_syscall_64+0xd2/0x200
[  416.792996][T20065]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  416.793078][T20065]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  416.793108][T20065]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.793128][T20065] RIP: 0033:0x7f20a4baefc9
[  416.793143][T20065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  416.793188][T20065] RSP: 002b:00007f20a3617038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[  416.793211][T20065] RAX: ffffffffffffffda RBX: 00007f20a4e05fa0 RCX: 00007f20a4baefc9
[  416.793228][T20065] RDX: 0000200000001580 RSI: 000000000000000f RDI: 0000000000000006
[  416.793285][T20065] RBP: 00007f20a3617090 R08: 0000000000000000 R09: 0000000000000000
[  416.793297][T20065] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001
[  416.793309][T20065] R13: 00007f20a4e06038 R14: 00007f20a4e05fa0 R15: 00007ffdc18cfc98
[  416.793331][T20065]  </TASK>
[  417.122898][T20071] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.213770][T20077] Falling back ldisc for ttyS3.
[  417.219986][T20071] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.275166][T20071] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.309397][T20072] lo speed is unknown, defaulting to 1000
[  417.324573][T20072] lo speed is unknown, defaulting to 1000
[  417.354529][   T29] kauditd_printk_skb: 165 callbacks suppressed
[  417.354544][   T29] audit: type=1326 audit(1761180179.065:43878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20088 comm="syz.8.5880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97e21efc9 code=0x7ffc0000
[  417.355479][T20071] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.360888][   T29] audit: type=1326 audit(1761180179.065:43879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20088 comm="syz.8.5880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97e21efc9 code=0x7ffc0000
[  417.493594][   T29] audit: type=1326 audit(1761180179.145:43880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20088 comm="syz.8.5880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe97e21efc9 code=0x7ffc0000
[  417.517419][   T29] audit: type=1326 audit(1761180179.145:43881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20088 comm="syz.8.5880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97e21efc9 code=0x7ffc0000
[  417.541448][   T29] audit: type=1326 audit(1761180179.145:43882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20088 comm="syz.8.5880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97e21efc9 code=0x7ffc0000
[  417.565159][   T29] audit: type=1326 audit(1761180179.155:43883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20088 comm="syz.8.5880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fe97e21efc9 code=0x7ffc0000
[  417.588851][   T29] audit: type=1326 audit(1761180179.155:43884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20088 comm="syz.8.5880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97e21efc9 code=0x7ffc0000
[  417.612448][   T29] audit: type=1326 audit(1761180179.155:43885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20088 comm="syz.8.5880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97e21efc9 code=0x7ffc0000
[  417.636077][   T29] audit: type=1326 audit(1761180179.155:43886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20088 comm="syz.8.5880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe97e21efc9 code=0x7ffc0000
[  417.659603][   T29] audit: type=1326 audit(1761180179.155:43887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20088 comm="syz.8.5880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97e21efc9 code=0x7ffc0000
[  417.713913][T16362] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  417.722758][T16362] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  417.734007][T20072] chnl_net:caif_netlink_parms(): no params data found
[  417.760983][T16362] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  417.816010][T16362] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  417.830835][T20093] syzkaller1: entered promiscuous mode
[  417.836741][T20093] syzkaller1: entered allmulticast mode
[  417.854839][T20097] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5882'.
[  417.879242][T20072] bridge0: port 1(bridge_slave_0) entered blocking state
[  417.886418][T20072] bridge0: port 1(bridge_slave_0) entered disabled state
[  417.894579][T20072] bridge_slave_0: entered allmulticast mode
[  417.914026][T20072] bridge_slave_0: entered promiscuous mode
[  417.925085][T20072] bridge0: port 2(bridge_slave_1) entered blocking state
[  417.925562][T20097] netlink: 'syz.8.5882': attribute type 1 has an invalid length.
[  417.932274][T20072] bridge0: port 2(bridge_slave_1) entered disabled state
[  417.939951][T20097] netlink: 224 bytes leftover after parsing attributes in process `syz.8.5882'.
[  418.004878][T20072] bridge_slave_1: entered allmulticast mode
[  418.024327][T20072] bridge_slave_1: entered promiscuous mode
[  418.075024][T20072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  418.105642][T20072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  418.148367][T20072] team0: Port device team_slave_0 added
[  418.165476][T20072] team0: Port device team_slave_1 added
[  418.213413][T20072] batman_adv: batadv0: Adding interface: batadv_slave_0
[  418.220526][T20072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  418.246560][T20072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  418.287223][T20072] batman_adv: batadv0: Adding interface: batadv_slave_1
[  418.294252][T20072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  418.320286][T20072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  418.404338][T20106] siw: device registration error -23
[  418.414349][T20072] hsr_slave_0: entered promiscuous mode
[  418.424300][T20072] hsr_slave_1: entered promiscuous mode
[  418.440578][T20072] debugfs: 'hsr0' already exists in 'hsr'
[  418.446394][T20072] Cannot create hsr debugfs directory
[  418.576951][T20072] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  418.638962][T20072] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  418.703129][T20072] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  418.775154][T20072] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  418.901091][T20072] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  418.942911][T20072] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  418.989830][T20072] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  419.010113][T20072] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  419.143171][T20072] 8021q: adding VLAN 0 to HW filter on device bond0
[  419.192881][T20072] 8021q: adding VLAN 0 to HW filter on device team0
[  419.230300][  T784] bridge0: port 1(bridge_slave_0) entered blocking state
[  419.237484][  T784] bridge0: port 1(bridge_slave_0) entered forwarding state
[  419.287868][  T784] bridge0: port 2(bridge_slave_1) entered blocking state
[  419.295032][  T784] bridge0: port 2(bridge_slave_1) entered forwarding state
[  419.380080][T20072] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  419.481859][T20072] 8021q: adding VLAN 0 to HW filter on device batadv0
[  419.711177][T20124] lo speed is unknown, defaulting to 1000
[  419.732242][T20124] lo speed is unknown, defaulting to 1000
[  419.860629][T20072] veth0_vlan: entered promiscuous mode
[  419.876310][T20072] veth1_vlan: entered promiscuous mode
[  419.920834][T20072] veth0_macvtap: entered promiscuous mode
[  419.941524][T20124] chnl_net:caif_netlink_parms(): no params data found
[  419.959020][T20072] veth1_macvtap: entered promiscuous mode
[  420.030570][T20072] batman_adv: batadv0: Interface activated: batadv_slave_0
[  420.067873][T20072] batman_adv: batadv0: Interface activated: batadv_slave_1
[  420.091168][T20124] bridge0: port 1(bridge_slave_0) entered blocking state
[  420.098424][T20124] bridge0: port 1(bridge_slave_0) entered disabled state
[  420.124078][T20124] bridge_slave_0: entered allmulticast mode
[  420.131772][T20124] bridge_slave_0: entered promiscuous mode
[  420.157298][T16377] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  420.167415][T20124] bridge0: port 2(bridge_slave_1) entered blocking state
[  420.174555][T20124] bridge0: port 2(bridge_slave_1) entered disabled state
[  420.194340][T20124] bridge_slave_1: entered allmulticast mode
[  420.201045][T20124] bridge_slave_1: entered promiscuous mode
[  420.239519][   T52] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  420.276183][T20124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  420.293876][   T52] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  420.304330][   T52] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  420.335718][T20124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  420.388160][T20124] team0: Port device team_slave_0 added
[  420.409179][T20124] team0: Port device team_slave_1 added
[  420.426211][T20161] loop6: detected capacity change from 0 to 2048
[  420.456436][T20161] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  420.485307][T20124] batman_adv: batadv0: Adding interface: batadv_slave_0
[  420.492303][T20124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  420.518383][T20124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  420.533518][T20124] batman_adv: batadv0: Adding interface: batadv_slave_1
[  420.540543][T20124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  420.566609][T20124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  420.612578][T20072] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set
[  420.635848][T20072] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  420.655440][T20124] hsr_slave_0: entered promiscuous mode
[  420.671304][T20124] hsr_slave_1: entered promiscuous mode
[  420.681423][T20072] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  420.709533][T20124] debugfs: 'hsr0' already exists in 'hsr'
[  420.715855][T20124] Cannot create hsr debugfs directory
[  420.740436][T20166] netlink: 'syz.6.5892': attribute type 10 has an invalid length.
[  420.769117][T20166] team0 (unregistering): Port device team_slave_0 removed
[  420.787008][T20166] team0 (unregistering): Port device team_slave_1 removed
[  420.877342][T20124] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  420.887377][T20124] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  420.898011][T20124] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  420.907960][T20124] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  420.964068][T20124] 8021q: adding VLAN 0 to HW filter on device bond0
[  420.977632][T20124] 8021q: adding VLAN 0 to HW filter on device team0
[  420.987975][T16380] bridge0: port 1(bridge_slave_0) entered blocking state
[  420.995080][T16380] bridge0: port 1(bridge_slave_0) entered forwarding state
[  421.016313][T20124] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  421.026857][T20124] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  421.042061][T16380] bridge0: port 2(bridge_slave_1) entered blocking state
[  421.049210][T16380] bridge0: port 2(bridge_slave_1) entered forwarding state
[  421.118563][T20124] 8021q: adding VLAN 0 to HW filter on device batadv0
[  421.250955][T20124] veth0_vlan: entered promiscuous mode
[  421.259946][T20124] veth1_vlan: entered promiscuous mode
[  421.280055][T20124] veth0_macvtap: entered promiscuous mode
[  421.294794][T20124] veth1_macvtap: entered promiscuous mode
[  421.321608][T20124] batman_adv: batadv0: Interface activated: batadv_slave_0
[  421.334857][T20124] batman_adv: batadv0: Interface activated: batadv_slave_1
[  421.347836][T16398] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  421.368374][T16398] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  421.392566][T16398] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  421.404235][T16398] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  421.450581][T20196] netlink: 'syz.7.5887': attribute type 10 has an invalid length.
[  421.474383][T20196] 8021q: adding VLAN 0 to HW filter on device batadv0
[  421.482938][T20196] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  421.497412][T20196] netlink: 'syz.7.5887': attribute type 10 has an invalid length.
[  421.505401][T20196] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5887'.
[  421.514927][T20196] batadv0: entered promiscuous mode
[  421.520172][T20196] batadv0: entered allmulticast mode
[  421.532522][T20196] bond0: (slave batadv0): Releasing backup interface
[  421.551108][T20196] bridge0: port 3(batadv0) entered blocking state
[  421.557643][T20196] bridge0: port 3(batadv0) entered disabled state
[  421.608483][T20205] loop8: detected capacity change from 0 to 512
[  421.631313][T20205] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #13: comm syz.8.5897: iget: bad i_size value: 12154757448730
[  421.657612][T20205] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.5897: couldn't read orphan inode 13 (err -117)
[  421.674056][T20205] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  421.686478][T20209] siw: device registration error -23
[  421.788438][T20215] loop6: detected capacity change from 0 to 2048
[  421.819894][T20225] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5904'.
[  421.869009][T20228] loop7: detected capacity change from 0 to 1024
[  421.871091][T20225] netlink: 'syz.5.5904': attribute type 1 has an invalid length.
[  421.883349][T20225] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5904'.
[  421.934852][T20215]  loop6: unable to read partition table
[  421.941218][T20228] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  421.946836][T20215] loop6: partition table beyond EOD, truncated
[  421.959587][T20215] loop_reread_partitions: partition scan of loop6 () failed (rc=-5)
[  421.975395][T20228] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22
[  421.983638][T20228] netdevsim netdevsim7: Direct firmware load for . failed with error -22
[  422.027149][T16380] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  422.036562][T16380] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  422.041290][T20233] 9p: Unknown access argument ¿: -22
[  422.085948][T20236] netlink: 'syz.6.5907': attribute type 10 has an invalid length.
[  422.096143][T20237] syzkaller1: entered promiscuous mode
[  422.101721][T20237] syzkaller1: entered allmulticast mode
[  422.160573][T20124] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  422.276432][T20256] loop5: detected capacity change from 0 to 512
[  422.294616][T20254] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  422.306265][T20256] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  422.343947][T20256] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  422.363957][T20262] rdma_op ffff88810b77e180 conn xmit_rdma 0000000000000000
[  422.385913][   T29] kauditd_printk_skb: 71 callbacks suppressed
[  422.385931][   T29] audit: type=1326 audit(1761180184.095:43959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20263 comm="syz.6.5917" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52d225efc9 code=0x0
[  422.431394][T20254] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  422.473412][   T29] audit: type=1326 audit(1761180184.135:43960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20255 comm="syz.5.5916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a4baefc9 code=0x7ffc0000
[  422.497557][   T29] audit: type=1326 audit(1761180184.135:43961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20255 comm="syz.5.5916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a4baefc9 code=0x7ffc0000
[  422.522571][   T29] audit: type=1326 audit(1761180184.135:43962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20255 comm="syz.5.5916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20a4baefc9 code=0x7ffc0000
[  422.546345][   T29] audit: type=1326 audit(1761180184.135:43963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20255 comm="syz.5.5916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a4baefc9 code=0x7ffc0000
[  422.570067][   T29] audit: type=1326 audit(1761180184.135:43964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20255 comm="syz.5.5916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a4baefc9 code=0x7ffc0000
[  422.593757][   T29] audit: type=1326 audit(1761180184.135:43965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20255 comm="syz.5.5916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20a4baefc9 code=0x7ffc0000
[  422.617429][   T29] audit: type=1326 audit(1761180184.135:43966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20255 comm="syz.5.5916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a4baefc9 code=0x7ffc0000
[  422.641794][   T29] audit: type=1326 audit(1761180184.135:43967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20255 comm="syz.5.5916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a4baefc9 code=0x7ffc0000
[  422.665646][   T29] audit: type=1326 audit(1761180184.135:43968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20255 comm="syz.5.5916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20a4baefc9 code=0x7ffc0000
[  422.898388][T13947] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  422.989805][T20267] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  423.166085][T20269] lo speed is unknown, defaulting to 1000
[  423.172946][T20269] lo speed is unknown, defaulting to 1000
[  423.556079][T20273] ªªªªªª: renamed from vlan0 (while UP)
[  423.598051][T20275] FAULT_INJECTION: forcing a failure.
[  423.598051][T20275] name failslab, interval 1, probability 0, space 0, times 0
[  423.610762][T20275] CPU: 0 UID: 0 PID: 20275 Comm: syz.6.5921 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  423.610802][T20275] Tainted: [W]=WARN
[  423.610809][T20275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  423.610822][T20275] Call Trace:
[  423.610828][T20275]  <TASK>
[  423.610835][T20275]  __dump_stack+0x1d/0x30
[  423.610863][T20275]  dump_stack_lvl+0xe8/0x140
[  423.610890][T20275]  dump_stack+0x15/0x1b
[  423.610946][T20275]  should_fail_ex+0x265/0x280
[  423.610980][T20275]  ? audit_log_d_path+0x8d/0x150
[  423.611008][T20275]  should_failslab+0x8c/0xb0
[  423.611052][T20275]  __kmalloc_cache_noprof+0x4c/0x4a0
[  423.611154][T20275]  audit_log_d_path+0x8d/0x150
[  423.611198][T20275]  audit_log_d_path_exe+0x42/0x70
[  423.611222][T20275]  audit_log_task+0x1e9/0x250
[  423.611284][T20275]  ? kstrtouint+0x76/0xc0
[  423.611321][T20275]  audit_seccomp+0x61/0x100
[  423.611361][T20275]  ? __seccomp_filter+0x82d/0x1250
[  423.611455][T20275]  __seccomp_filter+0x83e/0x1250
[  423.611487][T20275]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  423.611519][T20275]  ? vfs_write+0x7e8/0x960
[  423.611598][T20275]  ? __rcu_read_unlock+0x4f/0x70
[  423.611632][T20275]  ? __fget_files+0x184/0x1c0
[  423.611682][T20275]  __secure_computing+0x82/0x150
[  423.611727][T20275]  syscall_trace_enter+0xcf/0x1e0
[  423.611813][T20275]  do_syscall_64+0xac/0x200
[  423.611837][T20275]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  423.611896][T20275]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  423.611978][T20275]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  423.611999][T20275] RIP: 0033:0x7f52d225efc9
[  423.612018][T20275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  423.612063][T20275] RSP: 002b:00007f52d0cbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000147
[  423.612136][T20275] RAX: ffffffffffffffda RBX: 00007f52d24b5fa0 RCX: 00007f52d225efc9
[  423.612188][T20275] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[  423.612205][T20275] RBP: 00007f52d0cbf090 R08: 0000000000000000 R09: 0000000000000000
[  423.612222][T20275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  423.612238][T20275] R13: 00007f52d24b6038 R14: 00007f52d24b5fa0 R15: 00007ffe54e4e558
[  423.612260][T20275]  </TASK>
[  424.077303][T20292] siw: device registration error -23
[  424.466635][T20254] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.014511][T20311] netlink: 'syz.8.5934': attribute type 10 has an invalid length.
[  425.037531][T20311] 8021q: adding VLAN 0 to HW filter on device batadv0
[  425.056689][T20311] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  425.074049][T20312] netlink: 'syz.8.5934': attribute type 10 has an invalid length.
[  425.081923][T20312] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5934'.
[  425.117799][T20312] batadv0: entered promiscuous mode
[  425.123062][T20312] batadv0: entered allmulticast mode
[  425.144774][T20312] bond0: (slave batadv0): Releasing backup interface
[  425.164560][T20312] bridge0: port 3(batadv0) entered blocking state
[  425.171079][T20312] bridge0: port 3(batadv0) entered disabled state
[  425.274201][T20316] netlink: 20 bytes leftover after parsing attributes in process `wÞ££‘'.
[  425.310331][T20254] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.404971][T16372] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  425.414231][T16372] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  425.423595][T16398] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  425.447480][T16398] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  425.485739][T16398] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  425.511279][T16398] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  425.519775][T20323] Falling back ldisc for ttyS3.
[  425.544575][T20325] netlink: 'syz.7.5940': attribute type 10 has an invalid length.
[  425.571968][T20325] team0 (unregistering): Port device team_slave_0 removed
[  425.598179][T20325] team0 (unregistering): Port device team_slave_1 removed
[  425.835016][T20334] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22
[  425.843281][T20334] netdevsim netdevsim6: Direct firmware load for . failed with error -22
[  425.875042][T20334] 9p: Unknown access argument ¿: -22
[  426.351252][T20340] lo speed is unknown, defaulting to 1000
[  426.358303][T20340] lo speed is unknown, defaulting to 1000
[  427.204951][T20351] loop6: detected capacity change from 0 to 128
[  427.212184][T20351] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  427.240222][T20351] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  427.250583][T20356] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.263937][   T23] Process accounting resumed
[  427.269023][T16372] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  427.292481][T20359] rdma_op ffff888112b8a980 conn xmit_rdma 0000000000000000
[  427.315209][T20356] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.364721][T20365] syzkaller1: entered promiscuous mode
[  427.370260][T20365] syzkaller1: entered allmulticast mode
[  427.384883][T20352] lo speed is unknown, defaulting to 1000
[  427.394910][T20352] lo speed is unknown, defaulting to 1000
[  427.418176][T20356] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.484566][T20367] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5953'.
[  427.493656][T20367] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5953'.
[  427.502641][T20367] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5953'.
[  427.512644][T20367] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5953'.
[  427.522043][T20367] netlink: 'syz.6.5953': attribute type 6 has an invalid length.
[  427.533925][T20356] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.584331][T20367] lo speed is unknown, defaulting to 1000
[  427.590586][T20367] lo speed is unknown, defaulting to 1000
[  427.593775][T20352] chnl_net:caif_netlink_parms(): no params data found
[  427.649910][T16374] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  427.658210][T16374] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  427.685558][T16380] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  427.699874][T20352] bridge0: port 1(bridge_slave_0) entered blocking state
[  427.707056][T20352] bridge0: port 1(bridge_slave_0) entered disabled state
[  427.714642][T20352] bridge_slave_0: entered allmulticast mode
[  427.721417][T20352] bridge_slave_0: entered promiscuous mode
[  427.728656][T20352] bridge0: port 2(bridge_slave_1) entered blocking state
[  427.735777][T20352] bridge0: port 2(bridge_slave_1) entered disabled state
[  427.743219][T20352] bridge_slave_1: entered allmulticast mode
[  427.750497][T20352] bridge_slave_1: entered promiscuous mode
[  427.774684][T16374] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  427.827543][T20352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  427.851090][T20352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  427.862590][T20379] SELinux:  Context  is not valid (left unmapped).
[  427.870748][   T29] kauditd_printk_skb: 135 callbacks suppressed
[  427.870763][   T29] audit: type=1400 audit(1761180189.575:44104): avc:  denied  { create } for  pid=20378 comm="syz.8.5956" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=04
[  427.898739][   T29] audit: type=1400 audit(1761180189.575:44105): avc:  denied  { associate } for  pid=20378 comm="syz.8.5956" name="bus" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=04
[  427.928811][   T29] audit: type=1400 audit(1761180189.625:44106): avc:  denied  { read open } for  pid=20378 comm="syz.8.5956" path="/488/bus" dev="tmpfs" ino=2591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=04
[  427.930787][T20352] team0: Port device team_slave_0 added
[  427.952968][   T29] audit: type=1400 audit(1761180189.635:44107): avc:  denied  { bind } for  pid=20378 comm="syz.8.5956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  427.981280][   T29] audit: type=1400 audit(1761180189.695:44108): avc:  denied  { setopt } for  pid=20378 comm="syz.8.5956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  428.011163][   T29] audit: type=1326 audit(1761180189.715:44109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20380 comm="syz.6.5957" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52d225efc9 code=0x0
[  428.035822][T20352] team0: Port device team_slave_1 added
[  428.060067][   T29] audit: type=1400 audit(1761180189.765:44110): avc:  denied  { unlink } for  pid=13947 comm="syz-executor" name="bus" dev="tmpfs" ino=2591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=04
[  428.086787][T20352] batman_adv: batadv0: Adding interface: batadv_slave_0
[  428.093834][T20352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  428.119950][T20352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  428.135623][T20352] batman_adv: batadv0: Adding interface: batadv_slave_1
[  428.142730][T20352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  428.168846][T20352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  428.202665][T20352] hsr_slave_0: entered promiscuous mode
[  428.209222][T20352] hsr_slave_1: entered promiscuous mode
[  428.215598][T20352] debugfs: 'hsr0' already exists in 'hsr'
[  428.221343][T20352] Cannot create hsr debugfs directory
[  428.303002][T20352] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.334961][   T29] audit: type=1400 audit(1761180190.045:44111): avc:  denied  { read } for  pid=20388 comm="syz.8.5960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  428.357671][T20352] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.423727][T20393] 9p: Unknown access argument ¿: -22
[  428.431203][T20352] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.526579][T20352] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.595079][T20402] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.615395][T20403] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  428.623813][T20352] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  428.635833][T20352] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  428.644420][T20404] rdma_op ffff88815a7a3d80 conn xmit_rdma 0000000000000000
[  428.654187][T20352] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  428.665630][T20402] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.677338][T20352] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  428.725709][T20402] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.748057][T20352] 8021q: adding VLAN 0 to HW filter on device bond0
[  428.761660][T20352] 8021q: adding VLAN 0 to HW filter on device team0
[  428.770880][T20402] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.792639][T16374] bridge0: port 1(bridge_slave_0) entered blocking state
[  428.799841][T16374] bridge0: port 1(bridge_slave_0) entered forwarding state
[  428.812874][T16380] bridge0: port 2(bridge_slave_1) entered blocking state
[  428.819988][T16380] bridge0: port 2(bridge_slave_1) entered forwarding state
[  428.831610][T20412] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5966'.
[  428.840745][T20412] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5966'.
[  428.849904][T20412] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5966'.
[  428.860210][T20412] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5966'.
[  428.869216][T20412] netlink: 'syz.6.5966': attribute type 6 has an invalid length.
[  428.893228][T20412] lo speed is unknown, defaulting to 1000
[  428.905530][T20352] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  428.918004][T20412] lo speed is unknown, defaulting to 1000
[  428.988905][T20352] 8021q: adding VLAN 0 to HW filter on device batadv0
[  429.086375][T20423] bond1 (unregistering): Released all slaves
[  429.109911][T20352] veth0_vlan: entered promiscuous mode
[  429.122343][T20352] veth1_vlan: entered promiscuous mode
[  429.163303][T20352] veth0_macvtap: entered promiscuous mode
[  429.170177][T20429] FAULT_INJECTION: forcing a failure.
[  429.170177][T20429] name failslab, interval 1, probability 0, space 0, times 0
[  429.182989][T20429] CPU: 1 UID: 0 PID: 20429 Comm: syz.6.5968 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  429.183054][T20429] Tainted: [W]=WARN
[  429.183064][T20429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  429.183080][T20429] Call Trace:
[  429.183092][T20429]  <TASK>
[  429.183102][T20429]  __dump_stack+0x1d/0x30
[  429.183132][T20429]  dump_stack_lvl+0xe8/0x140
[  429.183153][T20429]  dump_stack+0x15/0x1b
[  429.183172][T20429]  should_fail_ex+0x265/0x280
[  429.183241][T20429]  should_failslab+0x8c/0xb0
[  429.183355][T20429]  kmem_cache_alloc_lru_noprof+0x55/0x490
[  429.183385][T20429]  ? __d_alloc+0x3d/0x340
[  429.183484][T20429]  __d_alloc+0x3d/0x340
[  429.183525][T20429]  d_alloc_parallel+0x58/0xc70
[  429.183582][T20429]  ? __rcu_read_unlock+0x4f/0x70
[  429.183616][T20429]  ? __d_lookup+0x316/0x340
[  429.183644][T20429]  ? default_pointer+0xf2/0x5e0
[  429.183699][T20429]  __lookup_slow+0x8c/0x250
[  429.183723][T20429]  lookup_noperm+0xc9/0x180
[  429.183748][T20429]  simple_start_creating+0x97/0x120
[  429.183809][T20429]  debugfs_start_creating+0xe9/0x160
[  429.183838][T20429]  __debugfs_create_file+0x6b/0x330
[  429.183866][T20429]  debugfs_create_file_full+0x3f/0x60
[  429.183886][T20429]  ? __pfx_wg_setup+0x10/0x10
[  429.183911][T20429]  ref_tracker_dir_debugfs+0x100/0x1e0
[  429.184019][T20429]  alloc_netdev_mqs+0x1a7/0xa50
[  429.184054][T20429]  rtnl_create_link+0x239/0x710
[  429.184090][T20429]  rtnl_newlink_create+0x14c/0x620
[  429.184234][T20429]  ? __list_del_entry_valid_or_report+0x65/0x130
[  429.184273][T20429]  ? __mutex_lock+0x25d/0xcc0
[  429.184364][T20429]  rtnl_newlink+0xf29/0x12d0
[  429.184400][T20429]  ? xas_load+0x413/0x430
[  429.184440][T20429]  ? __memcg_slab_free_hook+0x135/0x230
[  429.184538][T20429]  ? __rcu_read_unlock+0x4f/0x70
[  429.184570][T20429]  ? avc_has_perm_noaudit+0x1b1/0x200
[  429.184602][T20429]  ? cred_has_capability+0x210/0x280
[  429.184653][T20429]  ? selinux_capable+0x31/0x40
[  429.184683][T20429]  ? security_capable+0x83/0x90
[  429.184775][T20429]  ? ns_capable+0x7d/0xb0
[  429.184798][T20429]  ? __pfx_rtnl_newlink+0x10/0x10
[  429.184828][T20429]  rtnetlink_rcv_msg+0x5fe/0x6d0
[  429.184877][T20429]  netlink_rcv_skb+0x123/0x220
[  429.184918][T20429]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  429.184954][T20429]  rtnetlink_rcv+0x1c/0x30
[  429.184976][T20429]  netlink_unicast+0x5c0/0x690
[  429.185153][T20429]  netlink_sendmsg+0x58b/0x6b0
[  429.185200][T20429]  ? __pfx_netlink_sendmsg+0x10/0x10
[  429.185233][T20429]  __sock_sendmsg+0x145/0x180
[  429.185257][T20429]  ____sys_sendmsg+0x31e/0x4e0
[  429.185341][T20429]  ___sys_sendmsg+0x17b/0x1d0
[  429.185392][T20429]  __x64_sys_sendmsg+0xd4/0x160
[  429.185502][T20429]  x64_sys_call+0x191e/0x3000
[  429.185531][T20429]  do_syscall_64+0xd2/0x200
[  429.185549][T20429]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  429.185644][T20429]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  429.185754][T20429]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  429.185782][T20429] RIP: 0033:0x7f52d225efc9
[  429.185803][T20429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  429.185875][T20429] RSP: 002b:00007f52d0cbf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  429.185898][T20429] RAX: ffffffffffffffda RBX: 00007f52d24b5fa0 RCX: 00007f52d225efc9
[  429.185915][T20429] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003
[  429.185931][T20429] RBP: 00007f52d0cbf090 R08: 0000000000000000 R09: 0000000000000000
[  429.185947][T20429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  429.185964][T20429] R13: 00007f52d24b6038 R14: 00007f52d24b5fa0 R15: 00007ffe54e4e558
[  429.185988][T20429]  </TASK>
[  429.558611][T20429] wireguard0: entered promiscuous mode
[  429.564175][T20429] wireguard0: entered allmulticast mode
[  429.577090][T20352] veth1_macvtap: entered promiscuous mode
[  429.590462][T20352] batman_adv: batadv0: Interface activated: batadv_slave_0
[  429.600868][T20352] batman_adv: batadv0: Interface activated: batadv_slave_1
[  429.611809][T16398] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  429.621190][T16398] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  429.631973][T16398] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  429.644935][T16398] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  429.730847][T20433] program syz.3.5946 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  429.740448][T20433] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  429.749727][T20433] atomic_op ffff888117fad128 conn xmit_atomic 0000000000000000
[  429.763716][T20433] loop3: detected capacity change from 0 to 128
[  429.771580][   T29] audit: type=1400 audit(1761180191.475:44112): avc:  denied  { name_connect } for  pid=20434 comm="syz.6.5969" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  430.055294][   T29] audit: type=1326 audit(1761180191.765:44113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20447 comm="syz.3.5972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f40d2efc9 code=0x7ffc0000
[  430.300025][T20460] netlink: 'syz.7.5976': attribute type 10 has an invalid length.
[  430.347925][T20462] bond1 (unregistering): Released all slaves
[  430.503092][T20469] loop7: detected capacity change from 0 to 512
[  430.510041][T20469] EXT4-fs: Ignoring removed mblk_io_submit option
[  430.517052][T20469] EXT4-fs: Invalid want_extra_isize 3
[  430.869306][T20477] loop3: detected capacity change from 0 to 2048
[  430.974196][T20477]  loop3: unable to read partition table
[  430.979962][T20477] loop3: partition table beyond EOD, truncated
[  430.986260][T20477] loop_reread_partitions: partition scan of loop3 () failed (rc=-5)
[  431.041466][T20484] program syz.3.5986 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  431.063888][T20484] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  431.079225][T20484] atomic_op ffff888117fae528 conn xmit_atomic 0000000000000000
[  431.095716][T20484] loop3: detected capacity change from 0 to 128
[  431.162428][T20486] netlink: 556 bytes leftover after parsing attributes in process `syz.6.5987'.
[  431.202525][T20488] bond1 (unregistering): Released all slaves
[  431.454179][T20506] FAULT_INJECTION: forcing a failure.
[  431.454179][T20506] name failslab, interval 1, probability 0, space 0, times 0
[  431.467154][T20506] CPU: 1 UID: 0 PID: 20506 Comm: syz.7.5994 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  431.467194][T20506] Tainted: [W]=WARN
[  431.467203][T20506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  431.467220][T20506] Call Trace:
[  431.467229][T20506]  <TASK>
[  431.467238][T20506]  __dump_stack+0x1d/0x30
[  431.467361][T20506]  dump_stack_lvl+0xe8/0x140
[  431.467383][T20506]  dump_stack+0x15/0x1b
[  431.467401][T20506]  should_fail_ex+0x265/0x280
[  431.467444][T20506]  should_failslab+0x8c/0xb0
[  431.467550][T20506]  kmem_cache_alloc_noprof+0x50/0x480
[  431.467586][T20506]  ? security_file_alloc+0x32/0x100
[  431.467627][T20506]  security_file_alloc+0x32/0x100
[  431.467723][T20506]  init_file+0x5c/0x1d0
[  431.467800][T20506]  alloc_empty_file+0x8b/0x200
[  431.467834][T20506]  alloc_file_pseudo+0xc6/0x160
[  431.467860][T20506]  __shmem_file_setup+0x1de/0x210
[  431.467887][T20506]  shmem_file_setup+0x3b/0x50
[  431.467911][T20506]  __se_sys_memfd_create+0x2c3/0x590
[  431.467996][T20506]  __x64_sys_memfd_create+0x31/0x40
[  431.468021][T20506]  x64_sys_call+0x2ac2/0x3000
[  431.468065][T20506]  do_syscall_64+0xd2/0x200
[  431.468087][T20506]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  431.468121][T20506]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  431.468159][T20506]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  431.468238][T20506] RIP: 0033:0x7ff9a1edefc9
[  431.468257][T20506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  431.468280][T20506] RSP: 002b:00007ff9a093ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  431.468316][T20506] RAX: ffffffffffffffda RBX: 0000000000000512 RCX: 00007ff9a1edefc9
[  431.468332][T20506] RDX: 00007ff9a093eef0 RSI: 0000000000000000 RDI: 00007ff9a1f62960
[  431.468348][T20506] RBP: 0000200000000380 R08: 00007ff9a093ebb7 R09: 00007ff9a093ee40
[  431.468381][T20506] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000080
[  431.468397][T20506] R13: 00007ff9a093eef0 R14: 00007ff9a093eeb0 R15: 0000200000000340
[  431.468422][T20506]  </TASK>
[  431.734785][T20492] hub 9-0:1.0: USB hub found
[  431.739819][T20492] hub 9-0:1.0: 8 ports detected
[  431.764085][T20508] Falling back ldisc for ttyS3.
[  431.784642][T20510] syzkaller1: entered promiscuous mode
[  431.790182][T20510] syzkaller1: entered allmulticast mode
[  431.820975][T16398] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  431.836156][T16394] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  431.848102][T16394] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  431.870713][T16394] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  431.926688][T20512] loop7: detected capacity change from 0 to 2048
[  431.943905][T20515] siw: device registration error -23
[  431.998368][T20512]  loop7: unable to read partition table
[  432.004528][T20512] loop7: partition table beyond EOD, truncated
[  432.010879][T20512] loop_reread_partitions: partition scan of loop7 () failed (rc=-5)
[  432.090288][T20520] $Hÿ: renamed from bond0 (while UP)
[  432.103062][T20520] $Hÿ: entered promiscuous mode
[  432.108187][T20520] bond_slave_0: entered promiscuous mode
[  432.113987][T20520] bond_slave_1: entered promiscuous mode
[  432.210171][T20522] netlink: 556 bytes leftover after parsing attributes in process `syz.7.5999'.
[  432.258430][T20526] siw: device registration error -23
[  432.359441][T20528] bond0 (unregistering): Released all slaves
[  432.871181][T20537] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6004'.
[  432.881042][T20537] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6004'.
[  432.890329][T20537] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6004'.
[  432.914400][T20537] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6004'.
[  432.923434][T20537] netlink: 'syz.7.6004': attribute type 6 has an invalid length.
[  432.944922][T20538] lo speed is unknown, defaulting to 1000
[  432.951091][T20538] lo speed is unknown, defaulting to 1000
[  433.559645][T20545] loop3: detected capacity change from 0 to 2048
[  433.733803][T20545]  loop3: unable to read partition table
[  433.769667][T20545] loop3: partition table beyond EOD, truncated
[  433.775954][T20545] loop_reread_partitions: partition scan of loop3 () failed (rc=-5)
[  434.215550][T20552] loop3: detected capacity change from 0 to 512
[  434.274399][T20552] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  434.348318][T20552] EXT4-fs (loop3): 1 truncate cleaned up
[  434.394016][T20552] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  434.567079][T20552] bridge0: port 3(ipvlan2) entered blocking state
[  434.573637][T20552] bridge0: port 3(ipvlan2) entered disabled state
[  434.659078][T20552] ipvlan2: entered allmulticast mode
[  434.664582][T20552] bridge0: entered allmulticast mode
[  434.714402][T20552] ipvlan2: left allmulticast mode
[  434.719602][T20552] bridge0: left allmulticast mode
[  434.867212][T20352] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  434.979374][T20560] bond1 (unregistering): Released all slaves
[  435.093668][T20565] Falling back ldisc for ttyS3.
[  435.172964][T20567] loop8: detected capacity change from 0 to 512
[  435.217712][T20569] loop3: detected capacity change from 0 to 512
[  435.236681][T20567] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #13: comm syz.8.6016: iget: bad i_size value: 12154757448730
[  435.280098][T20569] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #13: comm syz.3.6015: iget: bad i_size value: 12154757448730
[  435.294940][T20567] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.6016: couldn't read orphan inode 13 (err -117)
[  435.313723][T20569] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.6015: couldn't read orphan inode 13 (err -117)
[  435.324107][T20574] syzkaller1: entered promiscuous mode
[  435.331147][T20574] syzkaller1: entered allmulticast mode
[  435.334440][T20567] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  435.356077][T20569] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  435.521122][T20581] loop6: detected capacity change from 0 to 2048
[  435.886775][T20581]  loop6: unable to read partition table
[  435.893663][T20581] loop6: partition table beyond EOD, truncated
[  435.899876][T20581] loop_reread_partitions: partition scan of loop6 () failed (rc=-5)
[  436.079288][T20595] FAULT_INJECTION: forcing a failure.
[  436.079288][T20595] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  436.092698][T20595] CPU: 0 UID: 0 PID: 20595 Comm: syz.7.6022 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  436.092740][T20595] Tainted: [W]=WARN
[  436.092749][T20595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  436.092765][T20595] Call Trace:
[  436.092773][T20595]  <TASK>
[  436.092783][T20595]  __dump_stack+0x1d/0x30
[  436.092814][T20595]  dump_stack_lvl+0xe8/0x140
[  436.092872][T20595]  dump_stack+0x15/0x1b
[  436.092893][T20595]  should_fail_ex+0x265/0x280
[  436.092993][T20595]  should_fail_alloc_page+0xf2/0x100
[  436.093041][T20595]  __alloc_frozen_pages_noprof+0xff/0x360
[  436.093160][T20595]  alloc_pages_mpol+0xb3/0x260
[  436.093184][T20595]  vma_alloc_folio_noprof+0x1aa/0x300
[  436.093213][T20595]  handle_mm_fault+0xec2/0x2be0
[  436.093245][T20595]  ? vma_start_read+0x141/0x1f0
[  436.093309][T20595]  do_user_addr_fault+0x630/0x1080
[  436.093453][T20595]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  436.093488][T20595]  exc_page_fault+0x62/0xa0
[  436.093517][T20595]  asm_exc_page_fault+0x26/0x30
[  436.093580][T20595] RIP: 0033:0x7ff9a1e8c4cb
[  436.093598][T20595] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01
[  436.093650][T20595] RSP: 002b:00007ff9a093ce10 EFLAGS: 00010246
[  436.093667][T20595] RAX: 00007ff9a093ef30 RBX: 00007ff9a2107640 RCX: 0000000000000000
[  436.093682][T20595] RDX: 00007ff9a093ef78 RSI: 00007ff9a1f3edf8 RDI: 00007ff9a093ce30
[  436.093697][T20595] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000
[  436.093711][T20595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  436.093788][T20595] R13: 00007ff9a2136038 R14: 00007ff9a2135fa0 R15: 00007ffc7b003de8
[  436.093812][T20595]  </TASK>
[  436.267531][T20595] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  436.552603][T20603] bond1 (unregistering): Released all slaves
[  436.671045][T20609] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6027'.
[  436.684443][T20352] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  436.712284][T20609] netlink: 'syz.7.6027': attribute type 1 has an invalid length.
[  436.720339][T20609] netlink: 224 bytes leftover after parsing attributes in process `syz.7.6027'.
[  436.752695][T20611] loop3: detected capacity change from 0 to 512
[  436.771260][T13947] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  436.807296][T20611] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.6028: EA inode hash validation failed
[  436.833839][T20611] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.6028: corrupted inode contents
[  436.863633][T20616] loop7: detected capacity change from 0 to 2048
[  436.870108][T20611] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #15: comm syz.3.6028: mark_inode_dirty error
[  436.893976][T20611] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.6028: corrupted inode contents
[  436.906348][T20611] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2996: inode #15: comm syz.3.6028: mark_inode_dirty error
[  436.926835][T20611] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.6028: mark inode dirty (error -117)
[  436.940869][T20611] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117)
[  436.950912][T20624] netlink: 'syz.6.6032': attribute type 10 has an invalid length.
[  436.971872][T20625] loop8: detected capacity change from 0 to 2048
[  436.980575][T20611] EXT4-fs (loop3): 1 orphan inode deleted
[  437.005616][T20611] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  437.031763][T20616]  loop7: unable to read partition table
[  437.045816][T20616] loop7: partition table beyond EOD, truncated
[  437.052105][T20616] loop_reread_partitions: partition scan of loop7 () failed (rc=-5)
[  437.088632][T20352] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  437.124281][T20625]  loop8: unable to read partition table
[  437.135584][T20625] loop8: partition table beyond EOD, truncated
[  437.141927][T20625] loop_reread_partitions: partition scan of loop8 () failed (rc=-5)
[  437.197110][T20635] loop6: detected capacity change from 0 to 2048
[  437.203981][T20632] Falling back ldisc for ttyS3.
[  437.226348][T20638] $Hÿ: renamed from bond0 (while UP)
[  437.234423][T20635] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  437.259239][T20638] $Hÿ: entered promiscuous mode
[  437.264416][T20638] bond_slave_0: entered promiscuous mode
[  437.270193][T20638] bond_slave_1: entered promiscuous mode
[  437.286772][T20635] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  437.306732][   T29] kauditd_printk_skb: 66 callbacks suppressed
[  437.306751][   T29] audit: type=1400 audit(1761180199.015:44180): avc:  denied  { append } for  pid=20642 comm="syz.7.6038" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  437.359073][T20638] dummy0: entered promiscuous mode
[  437.380176][T20072] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  437.389273][   T29] audit: type=1326 audit(1761180199.085:44181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20648 comm="syz.7.6039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a1edefc9 code=0x7ffc0000
[  437.413088][   T29] audit: type=1326 audit(1761180199.085:44182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20648 comm="syz.7.6039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff9a1edd810 code=0x7ffc0000
[  437.413438][   T29] audit: type=1326 audit(1761180199.105:44183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20648 comm="syz.7.6039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a1edefc9 code=0x7ffc0000
[  437.460655][   T29] audit: type=1326 audit(1761180199.105:44184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20648 comm="syz.7.6039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a1edefc9 code=0x7ffc0000
[  437.484284][   T29] audit: type=1326 audit(1761180199.105:44185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20648 comm="syz.7.6039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7ff9a1edefc9 code=0x7ffc0000
[  437.507847][   T29] audit: type=1326 audit(1761180199.105:44186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20648 comm="syz.7.6039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a1edefc9 code=0x7ffc0000
[  437.531492][   T29] audit: type=1326 audit(1761180199.105:44187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20648 comm="syz.7.6039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a1edefc9 code=0x7ffc0000
[  437.555117][   T29] audit: type=1326 audit(1761180199.105:44188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20648 comm="syz.7.6039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff9a1edd810 code=0x7ffc0000
[  437.578744][   T29] audit: type=1400 audit(1761180199.105:44189): avc:  denied  { write } for  pid=20648 comm="syz.7.6039" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  437.632663][T20654] bond1 (unregistering): Released all slaves
[  437.648174][T20660] netlink: 'syz.7.6043': attribute type 10 has an invalid length.
[  437.675666][T20665] FAULT_INJECTION: forcing a failure.
[  437.675666][T20665] name failslab, interval 1, probability 0, space 0, times 0
[  437.688476][T20665] CPU: 0 UID: 0 PID: 20665 Comm: syz.7.6044 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  437.688510][T20665] Tainted: [W]=WARN
[  437.688519][T20665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  437.688533][T20665] Call Trace:
[  437.688540][T20665]  <TASK>
[  437.688548][T20665]  __dump_stack+0x1d/0x30
[  437.688579][T20665]  dump_stack_lvl+0xe8/0x140
[  437.688603][T20665]  dump_stack+0x15/0x1b
[  437.688667][T20665]  should_fail_ex+0x265/0x280
[  437.688706][T20665]  should_failslab+0x8c/0xb0
[  437.688734][T20665]  __kmalloc_cache_node_noprof+0x54/0x4a0
[  437.688774][T20665]  ? __get_vm_area_node+0x106/0x1d0
[  437.688812][T20665]  __get_vm_area_node+0x106/0x1d0
[  437.688850][T20665]  __vmalloc_node_range_noprof+0x28c/0xed0
[  437.688944][T20665]  ? do_replace+0x188/0x320
[  437.688975][T20665]  ? __rcu_read_unlock+0x4f/0x70
[  437.689012][T20665]  ? avc_has_perm+0xf7/0x180
[  437.689103][T20665]  ? __rcu_read_unlock+0x4f/0x70
[  437.689144][T20665]  ? avc_has_perm_noaudit+0x1b1/0x200
[  437.689172][T20665]  ? do_replace+0x188/0x320
[  437.689273][T20665]  __vmalloc_noprof+0x83/0xc0
[  437.689313][T20665]  ? do_replace+0x188/0x320
[  437.689345][T20665]  do_replace+0x188/0x320
[  437.689458][T20665]  do_ebt_set_ctl+0x12e/0xac0
[  437.689493][T20665]  ? _parse_integer_limit+0x170/0x190
[  437.689535][T20665]  ? __rcu_read_unlock+0x4f/0x70
[  437.689568][T20665]  ? __pfx_ip4_datagram_release_cb+0x10/0x10
[  437.689659][T20665]  ? ip4_datagram_release_cb+0x351/0x380
[  437.689683][T20665]  ? _parse_integer+0x27/0x40
[  437.689724][T20665]  ? lock_sock_nested+0x112/0x140
[  437.689756][T20665]  ? _raw_spin_unlock_bh+0x36/0x40
[  437.689821][T20665]  ? release_sock+0x116/0x150
[  437.689856][T20665]  ? sockopt_release_sock+0x42/0x50
[  437.689892][T20665]  ? do_ip_setsockopt+0x1af3/0x2240
[  437.689956][T20665]  nf_setsockopt+0x199/0x1b0
[  437.689985][T20665]  ip_setsockopt+0x102/0x110
[  437.690121][T20665]  udp_setsockopt+0x99/0xb0
[  437.690161][T20665]  sock_common_setsockopt+0x69/0x80
[  437.690191][T20665]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  437.690251][T20665]  __sys_setsockopt+0x184/0x200
[  437.690356][T20665]  __x64_sys_setsockopt+0x64/0x80
[  437.690443][T20665]  x64_sys_call+0x20ec/0x3000
[  437.690470][T20665]  do_syscall_64+0xd2/0x200
[  437.690490][T20665]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  437.690516][T20665]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  437.690557][T20665]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.690583][T20665] RIP: 0033:0x7ff9a1edefc9
[  437.690599][T20665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  437.690620][T20665] RSP: 002b:00007ff9a093f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  437.690696][T20665] RAX: ffffffffffffffda RBX: 00007ff9a2135fa0 RCX: 00007ff9a1edefc9
[  437.690712][T20665] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000005
[  437.690725][T20665] RBP: 00007ff9a093f090 R08: 0000000000000108 R09: 0000000000000000
[  437.690807][T20665] R10: 0000200000001d80 R11: 0000000000000246 R12: 0000000000000001
[  437.690821][T20665] R13: 00007ff9a2136038 R14: 00007ff9a2135fa0 R15: 00007ffc7b003de8
[  437.690845][T20665]  </TASK>
[  437.690855][T20665] syz.7.6044: vmalloc error: size 128, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null)
[  437.735739][T20655] lo speed is unknown, defaulting to 1000
[  437.735984][T20665] ,cpuset=
[  437.741047][T20655] lo speed is unknown, defaulting to 1000
[  437.745321][T20665] /,mems_allowed=0
[  438.034164][T20665] CPU: 0 UID: 0 PID: 20665 Comm: syz.7.6044 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  438.034256][T20665] Tainted: [W]=WARN
[  438.034322][T20665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  438.034338][T20665] Call Trace:
[  438.034351][T20665]  <TASK>
[  438.034361][T20665]  __dump_stack+0x1d/0x30
[  438.034460][T20665]  dump_stack_lvl+0xe8/0x140
[  438.034480][T20665]  dump_stack+0x15/0x1b
[  438.034499][T20665]  warn_alloc+0x12b/0x1a0
[  438.034545][T20665]  __vmalloc_node_range_noprof+0x2b1/0xed0
[  438.034586][T20665]  ? __rcu_read_unlock+0x4f/0x70
[  438.034702][T20665]  ? avc_has_perm+0xf7/0x180
[  438.034722][T20665]  ? __rcu_read_unlock+0x4f/0x70
[  438.034753][T20665]  ? avc_has_perm_noaudit+0x1b1/0x200
[  438.034785][T20665]  ? do_replace+0x188/0x320
[  438.034811][T20665]  __vmalloc_noprof+0x83/0xc0
[  438.034842][T20665]  ? do_replace+0x188/0x320
[  438.034874][T20665]  do_replace+0x188/0x320
[  438.034922][T20665]  do_ebt_set_ctl+0x12e/0xac0
[  438.034989][T20665]  ? _parse_integer_limit+0x170/0x190
[  438.035026][T20665]  ? __rcu_read_unlock+0x4f/0x70
[  438.035088][T20665]  ? __pfx_ip4_datagram_release_cb+0x10/0x10
[  438.035130][T20665]  ? ip4_datagram_release_cb+0x351/0x380
[  438.035148][T20665]  ? _parse_integer+0x27/0x40
[  438.035194][T20665]  ? lock_sock_nested+0x112/0x140
[  438.035245][T20665]  ? _raw_spin_unlock_bh+0x36/0x40
[  438.035268][T20665]  ? release_sock+0x116/0x150
[  438.035295][T20665]  ? sockopt_release_sock+0x42/0x50
[  438.035358][T20665]  ? do_ip_setsockopt+0x1af3/0x2240
[  438.035455][T20665]  nf_setsockopt+0x199/0x1b0
[  438.035521][T20665]  ip_setsockopt+0x102/0x110
[  438.035556][T20665]  udp_setsockopt+0x99/0xb0
[  438.035670][T20665]  sock_common_setsockopt+0x69/0x80
[  438.035713][T20665]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  438.035745][T20665]  __sys_setsockopt+0x184/0x200
[  438.035783][T20665]  __x64_sys_setsockopt+0x64/0x80
[  438.035892][T20665]  x64_sys_call+0x20ec/0x3000
[  438.035921][T20665]  do_syscall_64+0xd2/0x200
[  438.035937][T20665]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  438.036044][T20665]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  438.036088][T20665]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.036177][T20665] RIP: 0033:0x7ff9a1edefc9
[  438.036196][T20665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  438.036217][T20665] RSP: 002b:00007ff9a093f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  438.036238][T20665] RAX: ffffffffffffffda RBX: 00007ff9a2135fa0 RCX: 00007ff9a1edefc9
[  438.036253][T20665] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000005
[  438.036340][T20665] RBP: 00007ff9a093f090 R08: 0000000000000108 R09: 0000000000000000
[  438.036355][T20665] R10: 0000200000001d80 R11: 0000000000000246 R12: 0000000000000001
[  438.036366][T20665] R13: 00007ff9a2136038 R14: 00007ff9a2135fa0 R15: 00007ffc7b003de8
[  438.036384][T20665]  </TASK>
[  438.036390][T20665] Mem-Info:
[  438.084373][T20655] chnl_net:caif_netlink_parms(): no params data found
[  438.085906][T20665] active_anon:18290 inactive_anon:25 isolated_anon:0
[  438.085906][T20665]  active_file:12697 inactive_file:14440 isolated_file:0
[  438.085906][T20665]  unevictable:851 dirty:52 writeback:0
[  438.085906][T20665]  slab_reclaimable:6763 slab_unreclaimable:230269
[  438.085906][T20665]  mapped:29766 shmem:8915 pagetables:1101
[  438.085906][T20665]  sec_pagetables:0 bounce:0
[  438.085906][T20665]  kernel_misc_reclaimable:0
[  438.085906][T20665]  free:1622218 free_pcp:13324 free_cma:0
[  438.165420][T20674] siw: device registration error -23
[  438.165926][T20665] Node 0 active_anon:73160kB inactive_anon:100kB active_file:50788kB inactive_file:57760kB unevictable:3404kB isolated(anon):0kB isolated(file):0kB mapped:119064kB dirty:208kB writeback:0kB shmem:35660kB kernel_stack:6880kB pagetables:4404kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  438.412111][T20665] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  438.441797][T20665] lowmem_reserve[]: 0 2881 7859 7859
[  438.447232][T20665] Node 0 DMA32 free:2946744kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950272kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB
[  438.478957][T20665] lowmem_reserve[]: 0 0 4978 4978
[  438.484202][T20665] Node 0 Normal free:3526640kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:73160kB inactive_anon:100kB active_file:50788kB inactive_file:57760kB unevictable:3404kB writepending:208kB zspages:0kB present:5242880kB managed:5098240kB mlocked:3404kB bounce:0kB free_pcp:49400kB local_pcp:41620kB free_cma:0kB
[  438.518022][T20665] lowmem_reserve[]: 0 0 0 0
[  438.522605][T20665] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  438.535459][T20665] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 6*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946744kB
[  438.551697][T20665] Node 0 Normal: 1488*4kB (ME) 1016*8kB (ME) 295*16kB (M) 473*32kB (UME) 202*64kB (UM) 45*128kB (ME) 540*256kB (UME) 399*512kB (UME) 98*1024kB (UM) 56*2048kB (UM) 712*4096kB (UM) = 3526544kB
[  438.570785][T20665] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  438.580147][T20665] 36524 total pagecache pages
[  438.584875][T20665] 34 pages in swap cache
[  438.589184][T20665] Free swap  = 124860kB
[  438.593435][T20665] Total swap = 124996kB
[  438.597630][T20665] 2097051 pages RAM
[  438.601447][T20665] 0 pages HighMem/MovableOnly
[  438.606177][T20665] 81083 pages reserved
[  438.724711][T18737] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  438.776992][T20685] FAULT_INJECTION: forcing a failure.
[  438.776992][T20685] name failslab, interval 1, probability 0, space 0, times 0
[  438.789706][T20685] CPU: 1 UID: 0 PID: 20685 Comm: syz.8.6048 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  438.789749][T20685] Tainted: [W]=WARN
[  438.789758][T20685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  438.789850][T20685] Call Trace:
[  438.789858][T20685]  <TASK>
[  438.789866][T20685]  __dump_stack+0x1d/0x30
[  438.789889][T20685]  dump_stack_lvl+0xe8/0x140
[  438.789967][T20685]  dump_stack+0x15/0x1b
[  438.789992][T20685]  should_fail_ex+0x265/0x280
[  438.790057][T20685]  ? audit_log_d_path+0x8d/0x150
[  438.790086][T20685]  should_failslab+0x8c/0xb0
[  438.790177][T20685]  __kmalloc_cache_noprof+0x4c/0x4a0
[  438.790221][T20685]  audit_log_d_path+0x8d/0x150
[  438.790249][T20685]  audit_log_d_path_exe+0x42/0x70
[  438.790289][T20685]  audit_log_task+0x1e9/0x250
[  438.790327][T20685]  ? kstrtouint+0x76/0xc0
[  438.790369][T20685]  audit_seccomp+0x61/0x100
[  438.790459][T20685]  ? __seccomp_filter+0x82d/0x1250
[  438.790530][T20685]  __seccomp_filter+0x83e/0x1250
[  438.790564][T20685]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  438.790606][T20685]  ? vfs_write+0x7e8/0x960
[  438.790639][T20685]  ? __rcu_read_unlock+0x4f/0x70
[  438.790744][T20685]  ? __fget_files+0x184/0x1c0
[  438.790779][T20685]  __secure_computing+0x82/0x150
[  438.790814][T20685]  syscall_trace_enter+0xcf/0x1e0
[  438.790865][T20685]  do_syscall_64+0xac/0x200
[  438.790889][T20685]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  438.790927][T20685]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  438.790968][T20685]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.790998][T20685] RIP: 0033:0x7fe97e21efc9
[  438.791013][T20685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  438.791070][T20685] RSP: 002b:00007fe97cc7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000008d
[  438.791091][T20685] RAX: ffffffffffffffda RBX: 00007fe97e475fa0 RCX: 00007fe97e21efc9
[  438.791103][T20685] RDX: 0000000000000044 RSI: 0000000000000000 RDI: 0000000000000001
[  438.791115][T20685] RBP: 00007fe97cc7f090 R08: 0000000000000000 R09: 0000000000000000
[  438.791131][T20685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  438.791163][T20685] R13: 00007fe97e476038 R14: 00007fe97e475fa0 R15: 00007ffcbffdf878
[  438.791189][T20685]  </TASK>
[  439.021503][T20687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  439.032368][T20687] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  439.071309][T20655] bridge0: port 1(bridge_slave_0) entered blocking state
[  439.078503][T20655] bridge0: port 1(bridge_slave_0) entered disabled state
[  439.087745][T20655] bridge_slave_0: entered allmulticast mode
[  439.110431][T20655] bridge_slave_0: entered promiscuous mode
[  439.123149][T20655] bridge0: port 2(bridge_slave_1) entered blocking state
[  439.130413][T20692] loop6: detected capacity change from 0 to 2048
[  439.130424][T20655] bridge0: port 2(bridge_slave_1) entered disabled state
[  439.144112][T20690] netlink: 'syz.3.6050': attribute type 10 has an invalid length.
[  439.153926][T20655] bridge_slave_1: entered allmulticast mode
[  439.160810][T20655] bridge_slave_1: entered promiscuous mode
[  439.170398][T20690] 8021q: adding VLAN 0 to HW filter on device batadv0
[  439.175029][T20693] netlink: 'syz.3.6050': attribute type 10 has an invalid length.
[  439.179203][T20690] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  439.185073][T20693] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6050'.
[  439.202694][T20693] batadv0: entered promiscuous mode
[  439.207990][T20693] batadv0: entered allmulticast mode
[  439.215287][T20692] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  439.227448][T20692] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  439.227607][T20693] bond0: (slave batadv0): Releasing backup interface
[  439.253270][T20693] bridge0: port 3(batadv0) entered blocking state
[  439.259914][T20693] bridge0: port 3(batadv0) entered disabled state
[  439.266845][T20072] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  439.337808][T20705] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6055'.
[  439.348693][T20700] bond1 (unregistering): Released all slaves
[  439.369794][T20655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  439.379917][T20705] netlink: 'syz.8.6055': attribute type 1 has an invalid length.
[  439.381308][T20655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  439.387761][T20705] netlink: 224 bytes leftover after parsing attributes in process `syz.8.6055'.
[  439.416639][T20655] team0: Port device team_slave_0 added
[  439.425389][T20655] team0: Port device team_slave_1 added
[  439.464030][T20655] batman_adv: batadv0: Adding interface: batadv_slave_0
[  439.471039][T20655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  439.497077][T20655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  439.520487][T20713] loop3: detected capacity change from 0 to 512
[  439.521190][T20655] batman_adv: batadv0: Adding interface: batadv_slave_1
[  439.531283][T20713] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.6057: iget: bad extra_isize 90 (inode size 256)
[  439.534073][T20655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  439.547838][T20713] EXT4-fs (loop3): Remounting filesystem read-only
[  439.573503][T20655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  439.580497][T20713] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -30)
[  439.599845][T20713] EXT4-fs (loop3): 1 orphan inode deleted
[  439.606437][T20713] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  439.625114][T16368] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  439.634463][T16368] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  439.646580][T20709] loop8: detected capacity change from 0 to 2048
[  439.657675][T20352] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  439.682058][T20655] hsr_slave_0: entered promiscuous mode
[  439.690042][T20719] loop3: detected capacity change from 0 to 128
[  439.697761][T20719] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  439.697883][T20655] hsr_slave_1: entered promiscuous mode
[  439.710683][T20719] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  439.716430][T20655] debugfs: 'hsr0' already exists in 'hsr'
[  439.730266][T20655] Cannot create hsr debugfs directory
[  439.775921][T20709]  loop8: unable to read partition table
[  439.781796][T20709] loop8: partition table beyond EOD, truncated
[  439.788048][T20709] loop_reread_partitions: partition scan of loop8 () failed (rc=-5)
[  439.810812][T20723] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6059'.
[  440.039648][T20655] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  440.049706][T20655] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  440.060097][T20655] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  440.072696][T20655] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  440.140069][T20655] 8021q: adding VLAN 0 to HW filter on device bond0
[  440.158805][T20655] 8021q: adding VLAN 0 to HW filter on device team0
[  440.172558][T16368] bridge0: port 1(bridge_slave_0) entered blocking state
[  440.179755][T16368] bridge0: port 1(bridge_slave_0) entered forwarding state
[  440.208407][T16368] bridge0: port 2(bridge_slave_1) entered blocking state
[  440.215694][T16368] bridge0: port 2(bridge_slave_1) entered forwarding state
[  440.247757][T20733] loop6: detected capacity change from 0 to 512
[  440.271786][T20733] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  440.303991][T20733] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  440.318462][T20655] 8021q: adding VLAN 0 to HW filter on device batadv0
[  440.455301][T20655] veth0_vlan: entered promiscuous mode
[  440.475190][T20655] veth1_vlan: entered promiscuous mode
[  440.502472][T20655] veth0_macvtap: entered promiscuous mode
[  440.511771][T20655] veth1_macvtap: entered promiscuous mode
[  440.536317][T20655] batman_adv: batadv0: Interface activated: batadv_slave_0
[  440.551662][T20655] batman_adv: batadv0: Interface activated: batadv_slave_1
[  440.561990][T16413] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  440.578297][T16413] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  440.587820][T16413] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  440.605205][T16413] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  440.626097][T16413] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  440.639917][T20755] netlink: 'syz.7.6065': attribute type 10 has an invalid length.
[  440.694513][T20758] bond1 (unregistering): Released all slaves
[  440.852437][T20773] loop3: detected capacity change from 0 to 2048
[  441.026906][T20773]  loop3: unable to read partition table
[  441.034257][T20773] loop3: partition table beyond EOD, truncated
[  441.040471][T20773] loop_reread_partitions: partition scan of loop3 () failed (rc=-5)
[  441.149923][T20784] $Hÿ: renamed from bond0 (while UP)
[  441.166004][T20784] $Hÿ: entered promiscuous mode
[  441.171091][T20784] bond_slave_0: entered promiscuous mode
[  441.176888][T20784] bond_slave_1: entered promiscuous mode
[  441.241750][T20785] lo speed is unknown, defaulting to 1000
[  441.264927][T20785] lo speed is unknown, defaulting to 1000
[  441.286396][T20788] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6074'.
[  441.320285][T20788] loop3: detected capacity change from 0 to 128
[  441.344677][T20788] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  441.357626][T20788] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  441.386993][T20790] FAULT_INJECTION: forcing a failure.
[  441.386993][T20790] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  441.400181][T20790] CPU: 1 UID: 0 PID: 20790 Comm: syz.8.6075 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  441.400235][T20790] Tainted: [W]=WARN
[  441.400244][T20790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  441.400328][T20790] Call Trace:
[  441.400334][T20790]  <TASK>
[  441.400341][T20790]  __dump_stack+0x1d/0x30
[  441.400377][T20790]  dump_stack_lvl+0xe8/0x140
[  441.400419][T20790]  dump_stack+0x15/0x1b
[  441.400443][T20790]  should_fail_ex+0x265/0x280
[  441.400486][T20790]  should_fail+0xb/0x20
[  441.400501][T20790]  should_fail_usercopy+0x1a/0x20
[  441.400542][T20790]  _copy_from_user+0x1c/0xb0
[  441.400594][T20790]  restore_altstack+0x4b/0x2d0
[  441.400704][T20790]  ? __set_task_blocked+0x23a/0x2a0
[  441.400735][T20790]  __ia32_sys_rt_sigreturn+0xdc/0x350
[  441.400757][T20790]  ? _raw_spin_unlock_irq+0x26/0x50
[  441.400783][T20790]  ? signal_setup_done+0x266/0x290
[  441.400877][T20790]  ? xfd_validate_state+0x45/0xf0
[  441.400897][T20790]  ? fpu__clear_user_states+0x63/0x1e0
[  441.400929][T20790]  ? fpregs_mark_activate+0x66/0x140
[  441.400968][T20790]  ? fpu__clear_user_states+0x63/0x1e0
[  441.401049][T20790]  ? arch_do_signal_or_restart+0x2b5/0x440
[  441.401073][T20790]  ? __rcu_read_unlock+0x4f/0x70
[  441.401108][T20790]  x64_sys_call+0x2d4b/0x3000
[  441.401211][T20790]  do_syscall_64+0xd2/0x200
[  441.401234][T20790]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  441.401265][T20790]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  441.401306][T20790]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  441.401349][T20790] RIP: 0033:0x7fe97e1bb099
[  441.401364][T20790] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25
[  441.401381][T20790] RSP: 002b:00007fe97cc7ea80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f
[  441.401403][T20790] RAX: ffffffffffffffda RBX: 00007fe97e475fa0 RCX: 00007fe97e1bb099
[  441.401419][T20790] RDX: 00007fe97cc7ea80 RSI: 00007fe97cc7ebb0 RDI: 0000000000000021
[  441.401461][T20790] RBP: 00007fe97cc7f090 R08: 0000000000000000 R09: 0000000000000000
[  441.401478][T20790] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001
[  441.401494][T20790] R13: 00007fe97e476038 R14: 00007fe97e475fa0 R15: 00007ffcbffdf878
[  441.401534][T20790]  </TASK>
[  441.664547][T20352] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  441.739468][T20796] netlink: 'syz.8.6077': attribute type 10 has an invalid length.
[  441.892356][T20810] bond0 (unregistering): Released all slaves
[  441.919132][T20817] netlink: 'syz.0.6084': attribute type 10 has an invalid length.
[  441.955905][T20817] 8021q: adding VLAN 0 to HW filter on device batadv0
[  441.969932][T20819] netlink: 'syz.0.6084': attribute type 10 has an invalid length.
[  441.977915][T20819] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6084'.
[  441.979060][T20817] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  442.003625][T20819] batadv0: entered promiscuous mode
[  442.008985][T20819] batadv0: entered allmulticast mode
[  442.027398][T20819] bond0: (slave batadv0): Releasing backup interface
[  442.039488][T20819] bridge0: port 3(batadv0) entered blocking state
[  442.046082][T20819] bridge0: port 3(batadv0) entered disabled state
[  442.112507][T20826] vhci_hcd: invalid port number 236
[  442.205310][T16413] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  442.214684][T16413] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  442.351309][   T29] kauditd_printk_skb: 107 callbacks suppressed
[  442.351325][   T29] audit: type=1326 audit(1761180204.055:44297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20834 comm="syz.0.6089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f64fdefc9 code=0x7ffc0000
[  442.382389][   T29] audit: type=1326 audit(1761180204.085:44298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20834 comm="syz.0.6089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f64fdefc9 code=0x7ffc0000
[  442.406152][   T29] audit: type=1326 audit(1761180204.085:44299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20834 comm="syz.0.6089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f64fdefc9 code=0x7ffc0000
[  442.429795][   T29] audit: type=1326 audit(1761180204.085:44300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20834 comm="syz.0.6089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f64fdefc9 code=0x7ffc0000
[  442.454545][   T29] audit: type=1326 audit(1761180204.085:44301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20834 comm="syz.0.6089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f64fdefc9 code=0x7ffc0000
[  442.479024][   T29] audit: type=1326 audit(1761180204.085:44302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20834 comm="syz.0.6089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f64fdefc9 code=0x7ffc0000
[  442.502755][   T29] audit: type=1326 audit(1761180204.085:44303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20834 comm="syz.0.6089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f64fdefc9 code=0x7ffc0000
[  442.526405][   T29] audit: type=1326 audit(1761180204.085:44304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20834 comm="syz.0.6089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f64fdefc9 code=0x7ffc0000
[  442.550069][   T29] audit: type=1326 audit(1761180204.085:44305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20834 comm="syz.0.6089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f64fdefc9 code=0x7ffc0000
[  442.573811][   T29] audit: type=1326 audit(1761180204.085:44306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20834 comm="syz.0.6089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f64fdefc9 code=0x7ffc0000
[  442.619028][T20841] loop7: detected capacity change from 0 to 512
[  442.644905][T20841] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  442.657998][T20841] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  442.670488][T20841] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #2: comm syz.7.6091: corrupted inode contents
[  442.692555][T20841] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #2: comm syz.7.6091: mark_inode_dirty error
[  442.714967][T20841] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #2: comm syz.7.6091: corrupted inode contents
[  442.741257][T20124] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  442.787381][T20850] bond0 (unregistering): Released all slaves
[  442.848469][T20854] program syz.8.6096 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  442.857997][T20854] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  442.867692][T20854] atomic_op ffff888117fad128 conn xmit_atomic 0000000000000000
[  442.876751][T20854] loop8: detected capacity change from 0 to 128
[  442.934251][T20858] netlink: 'syz.3.6098': attribute type 10 has an invalid length.
[  442.942462][T20858] batadv0: left allmulticast mode
[  442.947587][T20858] batadv0: left promiscuous mode
[  442.952816][T20858] bridge0: port 3(batadv0) entered disabled state
[  442.961079][T20858] 8021q: adding VLAN 0 to HW filter on device batadv0
[  442.969101][T20858] batadv0: entered promiscuous mode
[  442.975274][T20858] $Hÿ: (slave batadv0): Enslaving as an active interface with an up link
[  442.985561][T20858] netlink: 'syz.3.6098': attribute type 10 has an invalid length.
[  442.993446][T20858] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6098'.
[  443.002600][T20858] batadv0: entered allmulticast mode
[  443.021208][T20860] loop8: detected capacity change from 0 to 512
[  443.027888][T20858] $Hÿ: (slave batadv0): Releasing backup interface
[  443.037476][T20858] bridge0: port 3(batadv0) entered blocking state
[  443.044121][T20858] bridge0: port 3(batadv0) entered disabled state
[  443.064344][T20860] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  443.084234][T20860] ext4 filesystem being mounted at /514/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  443.149977][T13947] ==================================================================
[  443.158107][T13947] BUG: KCSAN: data-race in kernfs_iop_permission / kernfs_iop_permission
[  443.166555][T13947] 
[  443.168888][T13947] write to 0xffff8881006c2070 of 4 bytes by task 20072 on cpu 1:
[  443.176621][T13947]  kernfs_iop_permission+0x12b/0x220
[  443.181938][T13947]  inode_permission+0x1ca/0x310
[  443.186823][T13947]  link_path_walk+0x63c/0x900
[  443.191537][T13947]  __filename_parentat+0x15c/0x3f0
[  443.196672][T13947]  do_unlinkat+0x99/0x480
[  443.201025][T13947]  __x64_sys_unlink+0x2e/0x40
[  443.205724][T13947]  x64_sys_call+0x2dcf/0x3000
[  443.210424][T13947]  do_syscall_64+0xd2/0x200
[  443.214957][T13947]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  443.220876][T13947] 
[  443.223205][T13947] write to 0xffff8881006c2070 of 4 bytes by task 13947 on cpu 0:
[  443.230939][T13947]  kernfs_iop_permission+0x12b/0x220
[  443.236251][T13947]  inode_permission+0x1ca/0x310
[  443.241128][T13947]  link_path_walk+0x63c/0x900
[  443.245840][T13947]  path_lookupat+0x63/0x2a0
[  443.250379][T13947]  filename_lookup+0x147/0x340
[  443.255191][T13947]  user_path_at+0x3e/0x130
[  443.259664][T13947]  __x64_sys_umount+0x85/0xe0
[  443.264386][T13947]  x64_sys_call+0xdd2/0x3000
[  443.268997][T13947]  do_syscall_64+0xd2/0x200
[  443.273520][T13947]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  443.279437][T13947] 
[  443.281770][T13947] value changed: 0x32f93ca6 -> 0x08a77da5
[  443.287534][T13947] 
[  443.289865][T13947] Reported by Kernel Concurrency Sanitizer on:
[  443.296034][T13947] CPU: 0 UID: 0 PID: 13947 Comm: syz-executor Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  443.307593][T13947] Tainted: [W]=WARN
[  443.311569][T13947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  443.321653][T13947] ==================================================================
[  443.380515][T20867] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  443.527151][T20864] lo speed is unknown, defaulting to 1000
[  443.533982][T20864] lo speed is unknown, defaulting to 1000
[  443.601231][T20868] lo speed is unknown, defaulting to 1000
[  443.614032][T20868] lo speed is unknown, defaulting to 1000