last executing test programs:

3.138875288s ago: executing program 4 (id=153):
ioperm(0x0, 0x5, 0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x18)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil)
brk(0x200000001000)

2.747473374s ago: executing program 1 (id=167):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001800), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000062b80da5864de041e7ceb0ff2e", @ANYRES16=0x0, @ANYBLOB="000028bd7000fddbdf250d00000005002d0001000000060028000100000005002e000000000008003200040000000800320003000000080039000100010008003b00f7ffffff"], 0x4c}, 0x1, 0x0, 0x0, 0x880}, 0x40000)
r2 = fsmount(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000003680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELCHAIN={0x54, 0x5, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x486ce938}]}]}, @NFT_MSG_NEWOBJ={0x88, 0x12, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_DATA={0x74, 0x4, 0x0, 0x1, [@NFTA_CT_TIMEOUT_L3PROTO={0x6, 0x1, 0x1, 0x0, 0x10}, @NFTA_CT_TIMEOUT_DATA={0x1c, 0x3, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0xffff}]}, @NFTA_CT_TIMEOUT_DATA={0x44, 0x3, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x81}]}, @NFTA_CT_TIMEOUT_L3PROTO={0x6, 0x1, 0x1, 0x0, 0x58f6ae2461cd6d08}]}}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x900, 0x0, 0x0, {0xa}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_NEWSET={0x298, 0x9, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_SET_EXPRESSIONS={0xe4, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x50, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}, {0x5c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xaa}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x40}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}, @NFTA_SET_USERDATA={0xc4, 0xd, 0x1, 0x0, "361acd7c66610d4939a3635af796027cf52f5afe65e016502bcfb676c923201021496d9c2344c5baec3c7ee4de2b6f73e5eacbd53886a9b9b090ad3d7dd29d184c8f3da65cd782465f585c2e4e88d090e3eb8483bc6baa9392b1614191a56bab26287eaf2025dc806b4e80f2d6926eea57348b764d352c4d702b00cde408ad69101c2adb1fc98c0e03080a46631396c632d50e407904bbff706e97f3e0a1aa454a21ca47db7992bd012147dc5c893911c0de4c1d215089b7b4136b7b28da59f7"}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_EXPRESSIONS={0xbc, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x34, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x14}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}, {0x40, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}]}, @NFT_MSG_NEWTABLE={0x70, 0x0, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x1cc, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x7}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x73}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0xfbcb725b1d5e8c99}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_RULE_USERDATA={0xa1, 0x7, 0x1, 0x0, "351c1cf36c989bb31ee3acfea5be3eefc2277816c49e77512918033b83d118e2f05a03db8f6bc0c33f637f582b64f68d019fd4a1e92ea78dd605795ac3619e1d5e6b0edab72fc0bfc28465240344eef09188d27aeb4e0122380abc465e7dc70ec6b3c4097b197a699a3d9733bc3b9500d2abdbefcbf628bebc06746e7468730a3b8f2ed27aa3e67fce1397b277584022375f5b3282f4d44d4604738f97"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0x90, 0x4, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}]}, @NFT_MSG_DELSETELEM={0x1660, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1638, 0x3, 0x0, 0x1, [{0x13bc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1150, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xfe, 0x1, "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"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xffffffffffff441c}, @NFTA_SET_ELEM_KEY_END={0x1bc, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xbd, 0x1, "e8afbd07bef3f54ed12bd7c1805628bfcf50b26e05e7f93e136fee562cf920376ac7e198ce2096c2c683dd922305234265719256aa26e57c1937d45237ac6eda6e7ccf218ff59ec5a69957e5d82c088071f1aa4c00e6a375a24f964e1d78b42ce346dfd1ab400a18a035a75aa4cd8c2dc5602bd3770d4d7e02e9e76799faeb0fb0770eae4e3885e39cbd2c7e4a538bc194051c35e9f0d6aa7736f096ce50e5e5638894644637388ce2a1bdf2ee40aa68d731384eb5a703949c"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x78, 0x1, "2c46985e04bc213b6e7abf90084d0d5c5c12e4cd622a685d9dbd870dad0b6711bd798f462f04a3da394ae54a4492fc800c5e1c7230f8be961e82f2fdbb7c8235b563c6ed72042b812c89c83fcc8e3f8898fbcdbc0cce6753e773738472a043283896948b7a412cd09466e1bfb464ff9fa1b9a926"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xa0, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x8c, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x7c, 0x2, 0x0, 0x1, [@NFTA_DYNSET_EXPRESSIONS={0x78, 0xa, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8}]}}}, {0x58, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_LAST_SET={0x8}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x40}]}}}]}]}}}]}]}, {0x138, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x6c, 0xb, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xe5a0}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0xe025}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x7f}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8000000000000000}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x20, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_USERDATA={0xa0, 0x6, 0x1, 0x0, "0a20151b8edc3fec70350a4af9c45009aeaf551d6e689078d612504ff46883831f6654e467745ec6236bc9d743919fe62628dcda2df6ebb3e936e3e309c0134ffeb8495fa20fed2846f936ba1898359b7f19ed07e9c219144d7732998ebf9c1eafea673ab6843a4e74120817d4bf63a7f33e8eec880d951923edc6e2b0b7cae4c2188b620732b78cda9bbc5958ceae299c666e3594ddd03cf34251b2"}]}, {0x140, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x23, 0x6, 0x1, 0x0, "252a3a5958fb2759903bfcf2e0d1cf92ba233da97c8f8a3389e82ccf8dc21c"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4cf7241ad47df0f6}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @notrack={{0xc}, @void}}, @NFTA_SET_ELEM_KEY={0xe8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe1, 0x1, "f277b362231d185d5c6adc0bfd1d1f6be543cb65fbf5d50a76e6ae31ab6bfe03e967ab37868c4327c9a6792cfb68124505ced31a4d9a0dd0b88b3c16a4d0df5606e3b392328e7d9e527b80c079784b00bf7c45dc25da96a43f3741187042793139780b96ae90e031eaaead553ddea3fb9164dcf3507c2caf3b8ff2f3652c7c0fb18eaeee530417616edfbf73f8f8c8f84cda669353a0ed4123f9715aa7f5dbf130b780b149bb646dbaa622d9d73070df27d1d5cd41580c5661d0c4dc34dca7f4e2da21e10dfa728351c8a54d56d0fc2d2baa03e4e0b743cc0a53c05402"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1cac}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x85}, 0x20000010)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x83, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0xc014}, 0x0)

2.536017496s ago: executing program 1 (id=172):
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000005c0)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x74c, &(0x7f0000000f40)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xfffffd26)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401c5820, &(0x7f0000000080)=0x8)

2.024304103s ago: executing program 1 (id=182):
socket(0x10, 0x3, 0x0)
socket(0x10, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000840), 0x10, 0x4d3, &(0x7f0000000ec0)="$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")
r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000880), 0x12)
getpid()
connect$unix(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

1.823457906s ago: executing program 2 (id=184):
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
r0 = syz_io_uring_setup(0x10c, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"})
r3 = syz_open_pts(r2, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2)
read(r3, 0x0, 0x2006)
close_range(r1, 0xffffffffffffffff, 0x0)

1.809585826s ago: executing program 1 (id=185):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0, 0x307, &(0x7f0000000200)="$eJzs3UtrG1cUwPEzeliSXddalFJKCxcXSkvxYAu666Km2FAqaLGtQhwIjONxIjSWjEYYZEKsRSDbrLPwIssQCIHssgkhW2/yCZI4O2+8ixciE0bzsB4TRSLIj+T/W1hHc8+Zez1zZeNraebwjzubpY20iGhyIt7ISkzi/rOG/Pp879WPy8++8p4rtTi/MpdTKiYil288mH5am/j/8ddPUrKfvXJ4lHuz/8OKyLuV6xJTRVuVHUcZaq1SqbldqPWiXdKV+s8yDdtUxbJtVmt+u7FmmWrDqmxt1ZVRXp8c36qatq2Mcl2VzLqqVVStWlfGNaNYVrquq8lxgYhkwyjW06b1KyzcP3YcOXIcx0k1xHGciOxGECT9x9SnDRbnSdf575vbMznioxwZTsOxkxj4/OPz473+X98d7Pw7u6c0LJyS5Uur/8zn8wtLSqVFNm9vF7YL3qPX/nJCimKJKXtLv602xZ0jPtHcr4t/5xdmVUtWft7c9et3twveL4f5jVb9QVDUVi9B/ZxXrzrrkzJ+Um9KTqbkG4mszwX1EmurH5Nffmqr12VKXlyViliy7s7ktvqbc0r99W++q/9MKw8AAAAAAAAAgItIV6GT9Xst/FdvRtdTrXd8hO0Zd7Ob5yWE6+uzMiXN6PX52cj1/YR8nzjDbxwAAAAAgC+IXd8pGZZlVkcTxO9l+nSRFBE3ELk17Q6m7w6/9Uc8WO9jItLbFO/fRUeQ+d3r7+GSPzAZ5YEKgvQQI4wIgg9rlIzmo6ApI1HJsaEmwMxY5JFPVzUZ6fzpCGSQZEkPPbG1hF3fSQ08tXrKm8GW7yJzHO3j+3EMK+ltkfAM9q/6c6iXwweDdPeBmjnw9mv1+aHxNlziAwAAAHCBtP3hBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzkj4+X/Nv9P/IBcPC67b39kk/i3iey/J1n2feK77DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAceh8AAP//8yCz0A==")
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101343)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00'}, 0x10)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800702, &(0x7f0000000300)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8001}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@resuid}]}, 0x2, 0x454, &(0x7f0000000940)="$eJzs209sFNUfAPDvTLvl9+NfK+IfELVKjI1/WlpQOXjRaOIBo4ke8LhuCyEs1NCaACFSjcGLiSFRr8ajiQfP3rwY9WTiVe+GhCgX0FPN7M6U3WW3UNjuAvv5JNO+t/N23/vuzJt5M282gIE1nv1JIjZHxO8RMVrPNhcYr/+7culM5Z9LZypJLC+/9VdSK3f50plKUbR436Y8M5FGpB8neSXNFk6dPlquVudO5PmpxWPvTS2cOv3skWPlw3OH547P7N+/b+/0C8/PPNeVOLO4Lu/8YH7XjtfeOf965eD5d3/+Nmvv5nx9YxzdMp4F/vdyTeu6J7pdWZ9taUgnw31sCGsyFBHZ5irV+v9oDMXVjTcar37U18YB6yo7N23ovHppGbiLJdHvFgD9UZzos+vfYunR0OO2cPGl+gVQFveVfKmvGY40L1Nqub7tpvGIOLj071fZEut0HwIAoNGnlS8OxDPtxn/p8fsbym3N51DGIuKeiNgWEfdGxPaIuC8isrIPRMSDa6y/dWro2vFPeuGmArtB2fjvxXxuq3n8V4z+Ymwoz22pxV9KDh2pzu3Jv5OJKG3I8tOr1PHDK7991mld4/gvW7L6i7Fg3o4Lwy036GbLi+XaoLQLLn4YsXO4XfzJykxAEhE7ImLn2j56a5E48tQ3uzoVun78q+jCPNPy1xFP1rf/UrTEX0hWn5+c+l9U5/ZMFXvFtX759dybneq/pfi7INv+G5v3/9YiY0njfO3C2us498cnHa9pbnb/H0nerh2PRvLXTpYXF09MR4wkB2r5ptdnrr63yJ8sl1bin9jdvv9vy9+Txf9QRGQ78cMR8UhEPJq3/bGIeDwidq8S/08vd153O2z/2bbHv5X9v2X7rz0xdPTH7zvVf2Pbf18tNZG/Ujv+XceNNvBWvjsAAAC4U6S1Z+CTdHIlnaaTk/Vn+LfHxrQ6v7D49KH594/P1p+VH4tSWtzpGm24HzqdLOWfWM/P5PeKi/V78/vGnw/9v5afrMxXZ/scOwy6TR36f+bPoX63Dlh37ebRZkb60BCg51r7f9qcPftGLxsD9JTfa8Pguk7/T3vVDqD3nP9hcF3t/1+upM62lDEXAHcn538YXPo/DC79HwaX/g8D6VZ+1y8xyIlIb4tmSKxTos3B4jtPAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHee/wIAAP//1KjvDA==")
creat(&(0x7f0000000080)='./file0\x00', 0x18)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x400454a4, &(0x7f0000000040))

1.686086517s ago: executing program 4 (id=187):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r2}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)

1.655808518s ago: executing program 2 (id=188):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r2, 0x0)
connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

1.572636699s ago: executing program 1 (id=190):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10)
listen(r1, 0xf)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)='E', 0x1}], 0x1)
r3 = accept4$unix(r1, 0x0, 0x0, 0x0)
recvmsg(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x22}], 0x1}, 0x4c2103a0)

1.4986864s ago: executing program 0 (id=191):
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x2, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1400}}, 0x1c}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETAF(r2, 0x5408, 0xffffffffffffffff)
ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000300)="9efd635a7326ace56b43b4012ebddf9e796a8d07dd8e80734d5a81856293e074d082ee955477aeaa52d024c8dca4a3eb596ead7d919e45a28e1af945327ea49f985b62ad2157a365bac8966a620240f59d9b1013526fac4889e18673b7ffe178ba53cd11d078e15dc79ab1a103b7eb7faf1498f85f14a3461c25dd2b68f503d67578cb0597788f6a8142a0ba1983ee6ffd3697932b20810baa849904ef5462e0d0adcaabcca04209f99792e715526a83a551a92e7fabeeca59a01fb2b9c7477bbc9a8f487d95d3e3578566144c73544136d24f4ce21df89d9b43002fe510e521b3fe0154c2040fe6be1bb6d36c60fb6c5413ba0b35d710035c5ba899eb463196")
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0xff, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0)

1.47327163s ago: executing program 0 (id=192):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0xf)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="458d", 0x2}], 0x1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
r3 = accept4$unix(r0, 0x0, 0x0, 0x0)
recvmsg(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x22}], 0x1}, 0x4c2103a0)

1.449348791s ago: executing program 0 (id=193):
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x41, &(0x7f0000000300)={[{@bsdgroups}, {@nodiscard}, {@dioread_nolock}, {@grpjquota}, {@grpjquota}, {@orlov}, {@discard}, {@grpid}, {@barrier}]}, 0x64, 0x520, &(0x7f0000000400)="$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")
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000005c0)={0x2, {0x2, 0x5, 0x7, 0xffff, 0x5}})

1.418047121s ago: executing program 3 (id=194):
syz_read_part_table(0x5a6, &(0x7f0000000b40)="$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")
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000200)=0x7ffffffc)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000b40)={0x54, 0x1, 0x1, {0x0, 0x1}, {0x60, 0x2}, @period={0x59, 0x1, 0x8, 0x2, 0x448, {0x2, 0x26, 0x8, 0x401}, 0x0, 0x0}})
write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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")
r2 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="f166b703b436f4d33e12dcbac807801382a5a583b1ee7cb1054b80a97cbee83c162ea0e8814a73d777475f8f5edc106aaca50736bee449ac2a938b010df784c6356e40ec5d254a20a10923729a3de4affe175d6365a496163608ec6f6dbacb774fd3fdf2697b0211722f39e09919bbb3e62cd4da06c1ecd58900d27e12aee43e6e97949b361d190093fcf14e1258c03a", 0x90, 0xfffffffffffffffc)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000001c0)='trusted\x00', &(0x7f0000000200))
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000f40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])

1.391677022s ago: executing program 4 (id=195):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x9}, 0x18)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff})
r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
open(&(0x7f00000003c0)='.\x00', 0x800, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

1.358735652s ago: executing program 4 (id=196):
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff})
write$binfmt_script(0xffffffffffffffff, 0x0, 0xb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x2052, 0xffffffffffffffff, 0x3000)
splice(r3, 0x0, r2, 0x0, 0x1000, 0x0)

1.268853603s ago: executing program 0 (id=197):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x16060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000280)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@bsdgroups}, {@auto_da_alloc}, {@usrjquota}, {@nouid32}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@grpjquota}, {}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$eJzs3c9rHNcdAPDvrFY/7VYqFFr3JCi0BuNV5ap2C4Wq9FAKNRjaUw+1xWotHK20RrsylhCJTQjkEkhCbsnF5/y8hFzz45BL8n8EGyeRTRxyCAqzP6SVtCvvOtKuHX8+MNZ7M2/2ve+82TfPmtFuAE+tyfSfTMSJiHg5iRivr08iYrCaykbM1so92NzIp0sSW1v/+Sqplrm/uZGPpn1Sx+qZX0fExy9EnMrsr7e8tr44VywWVur5qcrS1any2vrpK0tzC4WFwvLZ6ZmZM+f+dO7s4cX6zefrx++88s/fvzP73fO/evelT5KYjeP1bc1xHJbJmKwfk8H0EO7yj8OurG/ef7aDQk1nQPYoG0OX0o4ZqPfKiRiPgYP6Z7SXLQMAjspzEbHVzkDbLQDAEy2pXf//1u92AAC90vg9wP3NjXxj6e9vJHrr7t8jYqQWf+P+Zm1Ltn7PbqR6H3TsfrLrzkgSEROHUP9kRLzxwf/fSpc4ovuQAK3cuBkRlyYm94//yb5nFrr1h9arF5ozk3s2Gv+gdz5M5z9/bjX/y2zPf6LF/Ge4xXv3UTz8/Z+5fQjVtJXO//7a9Gzbg6b46yYG6rmfVed8g8nlK8VCOrb9PCJOxuBwmp8+oI6T976/125b8/zv61efeTOtP/25UyJzOzu8e5/5ucrcj4m52d2bEb/Jtoo/Hf+Hq/2ftJn/Xuiwjn/95cXX221L40/jbSz74z9aW7ciftey/5PtMsmBzydOVU+HqcZJ0cJ7szHWrv7J7E7/p0taf+P/Ar2Q9v/YwfFPJM3Pa5Y7funtp8U+uzX+UbtCzed/6/hbn/9DyX+r6aH6uutzlcrKdMRQ8u/968/s7NvIN8qn8Z/8bev3f2P8a3H+/y99/UsdHojsnS/ffvT4j1Ya/3xX/d91IkYeLA60q7+z/p/ZtU8n41+nDXzU4wYAAAAAAAAAAAAAAAAAAAAAAAAA3chExPFIMrntdCaTy9W+w/uXMZYplsqVU5dLq8vzUf2u7IkYzDQ+6nK86fNQp+ufh9/In9mT/2NE/CIiXhsereZz+VJxvt/BAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDdsTbf/5/6YnhP4YF+tBAAOBIjLuwA8LRJstl+NwEA6LWRrkqPHlk7AIDe6e76DwD8FLj+A8DT5yHX/71/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADdunD+fLpsfbu5kU/z89fWVhdL107PF8qLuaXVfC5fWrmaWyiVFoqFXL601PaFbtR+FEulqzOxvHp9qlIoV6bKa+sXl0qry5WLV5bmFgoXC4M9iwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOldeW1+cKxYLKxJ9SSx+WuuHx6U9Et0l4kat/x6X9hxeIoZ2RonR/gxOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+AHwIAAP//4VQjgA==")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000004c0)='kfree\x00', r3}, 0x18)

1.206103514s ago: executing program 3 (id=198):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0x3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0xffffffffffffffff, 0xea, 0x100004}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

1.127982425s ago: executing program 3 (id=199):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000240)='sched_switch\x00', r0, 0x0, 0x6}, 0x18)
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x6)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x10)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf4fffff7, 0x12, r2, 0x0)
write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x36)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x1f}}, 0x3c)

1.034940156s ago: executing program 3 (id=200):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
r1 = getpid()
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)

789.294939ms ago: executing program 2 (id=201):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xcc90, 0x400, 0x3, 0x288}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r2, 0x3513, 0x217, 0xa1, 0x0, 0x0)
close_range(r0, r1, 0x0)

647.004421ms ago: executing program 1 (id=202):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)

570.309552ms ago: executing program 2 (id=203):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000000c0)=ANY=[], 0xfe44, 0x3)
socket(0x29, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x50, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x24, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x4}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x8}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x28d}]}}]}, 0x50}}, 0x0)

504.836323ms ago: executing program 2 (id=204):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4004110)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000e3ffffffb703000008000000b704000000000000850000008200000095000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x10)
ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0x7000000)

458.931474ms ago: executing program 3 (id=205):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800001f1a0068099b3c0000000000001860000000000000824d086bb227733218120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_config_ext={0x0, 0x1}, 0x18208, 0x3, 0x0, 0x0, 0x1000, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)
ioctl$EVIOCGABS3F(r0, 0x8018457f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
fallocate(r1, 0x20, 0x4000, 0x8000)

431.893634ms ago: executing program 2 (id=206):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00')
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xc2, 0x42, 0x7a, 0x20, 0x46d, 0x960, 0xa5af, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6f, 0x35, 0x1f}}]}}]}}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
close_range(r3, 0xffffffffffffffff, 0x0)

337.766985ms ago: executing program 4 (id=207):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x80000000000}, 0x18)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
close(r2)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r4=>0x0]}, &(0x7f0000000240)=0x8)
sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000640)="be", 0x1}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x4, 0x28, 0x200000b, r4}}], 0x20, 0x6044}, 0x6)

237.566607ms ago: executing program 4 (id=208):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x410c84, &(0x7f00000003c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}]}, 0x1, 0x775, &(0x7f0000001180)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1cd081, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
write(r1, &(0x7f0000004200)='t', 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)

144.305008ms ago: executing program 0 (id=209):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)

31.271839ms ago: executing program 3 (id=210):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000380)="721fa8beb0dcec6dd07c238b793882ea91d6bfa6654fe625194f27c8134d3403a797c17d711ab4204bc6bf69474eb3aa7c3b294710f70cd5ea12c71776135ee4f0b95996", 0x44}], 0x1)
r2 = accept4$unix(r0, 0x0, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10)
recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0)

0s ago: executing program 0 (id=211):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
fallocate(r0, 0x0, 0x0, 0x8000c62)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21)
pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x300, 0x0, 0x3)

kernel console output (not intermixed with test programs):

[   20.321842][   T29] audit: type=1400 audit(1745798216.130:81): avc:  denied  { read } for  pid=2986 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
Warning: Permanently added '10.128.0.67' (ED25519) to the list of known hosts.
[   26.881577][   T29] audit: type=1400 audit(1745798222.690:82): avc:  denied  { mounton } for  pid=3293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   26.882626][ T3293] cgroup: Unknown subsys name 'net'
[   26.904395][   T29] audit: type=1400 audit(1745798222.690:83): avc:  denied  { mount } for  pid=3293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   26.931872][   T29] audit: type=1400 audit(1745798222.720:84): avc:  denied  { unmount } for  pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   27.070826][ T3293] cgroup: Unknown subsys name 'cpuset'
[   27.076976][ T3293] cgroup: Unknown subsys name 'rlimit'
[   27.187404][   T29] audit: type=1400 audit(1745798222.990:85): avc:  denied  { setattr } for  pid=3293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   27.210913][   T29] audit: type=1400 audit(1745798222.990:86): avc:  denied  { create } for  pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   27.231442][   T29] audit: type=1400 audit(1745798222.990:87): avc:  denied  { write } for  pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   27.251897][   T29] audit: type=1400 audit(1745798222.990:88): avc:  denied  { read } for  pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   27.258883][ T3297] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   27.272255][   T29] audit: type=1400 audit(1745798222.990:89): avc:  denied  { mounton } for  pid=3293 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   27.305635][   T29] audit: type=1400 audit(1745798222.990:90): avc:  denied  { mount } for  pid=3293 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   27.329041][   T29] audit: type=1400 audit(1745798223.090:91): avc:  denied  { relabelto } for  pid=3297 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   27.363186][ T3293] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   28.402527][ T3303] chnl_net:caif_netlink_parms(): no params data found
[   28.469315][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.476501][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.483713][ T3303] bridge_slave_0: entered allmulticast mode
[   28.490351][ T3303] bridge_slave_0: entered promiscuous mode
[   28.497067][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.504219][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.511353][ T3303] bridge_slave_1: entered allmulticast mode
[   28.517702][ T3303] bridge_slave_1: entered promiscuous mode
[   28.537516][ T3309] chnl_net:caif_netlink_parms(): no params data found
[   28.555257][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   28.565587][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   28.615324][ T3303] team0: Port device team_slave_0 added
[   28.621904][ T3303] team0: Port device team_slave_1 added
[   28.641679][ T3304] chnl_net:caif_netlink_parms(): no params data found
[   28.684391][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0
[   28.691468][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.717402][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   28.728699][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1
[   28.735705][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.761706][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   28.793272][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.800458][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.807544][ T3309] bridge_slave_0: entered allmulticast mode
[   28.814035][ T3309] bridge_slave_0: entered promiscuous mode
[   28.821308][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.828463][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.835651][ T3309] bridge_slave_1: entered allmulticast mode
[   28.842194][ T3309] bridge_slave_1: entered promiscuous mode
[   28.890747][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   28.914096][ T3306] chnl_net:caif_netlink_parms(): no params data found
[   28.928165][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   28.946669][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.953751][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.960989][ T3304] bridge_slave_0: entered allmulticast mode
[   28.967422][ T3304] bridge_slave_0: entered promiscuous mode
[   28.976147][ T3303] hsr_slave_0: entered promiscuous mode
[   28.982212][ T3303] hsr_slave_1: entered promiscuous mode
[   28.988225][ T3310] chnl_net:caif_netlink_parms(): no params data found
[   29.006427][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.013547][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.020710][ T3304] bridge_slave_1: entered allmulticast mode
[   29.027228][ T3304] bridge_slave_1: entered promiscuous mode
[   29.056029][ T3309] team0: Port device team_slave_0 added
[   29.062532][ T3309] team0: Port device team_slave_1 added
[   29.073659][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.099570][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.106569][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.132490][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.144256][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.176493][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.183506][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.209429][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.236483][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.243748][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.250886][ T3306] bridge_slave_0: entered allmulticast mode
[   29.257192][ T3306] bridge_slave_0: entered promiscuous mode
[   29.263848][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.270951][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.278102][ T3306] bridge_slave_1: entered allmulticast mode
[   29.284569][ T3306] bridge_slave_1: entered promiscuous mode
[   29.299227][ T3304] team0: Port device team_slave_0 added
[   29.307848][ T3304] team0: Port device team_slave_1 added
[   29.340331][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.347302][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.373264][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.385400][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.395784][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.405002][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.412091][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.419283][ T3310] bridge_slave_0: entered allmulticast mode
[   29.425767][ T3310] bridge_slave_0: entered promiscuous mode
[   29.444708][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.451790][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.477813][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.504025][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.511198][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.518458][ T3310] bridge_slave_1: entered allmulticast mode
[   29.525112][ T3310] bridge_slave_1: entered promiscuous mode
[   29.535937][ T3309] hsr_slave_0: entered promiscuous mode
[   29.542052][ T3309] hsr_slave_1: entered promiscuous mode
[   29.547928][ T3309] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   29.555593][ T3309] Cannot create hsr debugfs directory
[   29.570188][ T3306] team0: Port device team_slave_0 added
[   29.592416][ T3306] team0: Port device team_slave_1 added
[   29.629342][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.645663][ T3304] hsr_slave_0: entered promiscuous mode
[   29.651685][ T3304] hsr_slave_1: entered promiscuous mode
[   29.657545][ T3304] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   29.665226][ T3304] Cannot create hsr debugfs directory
[   29.678469][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.685451][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.711447][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.724789][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.731795][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.757715][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.769703][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.808272][ T3310] team0: Port device team_slave_0 added
[   29.816829][ T3310] team0: Port device team_slave_1 added
[   29.856659][ T3306] hsr_slave_0: entered promiscuous mode
[   29.862685][ T3306] hsr_slave_1: entered promiscuous mode
[   29.868435][ T3306] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   29.876106][ T3306] Cannot create hsr debugfs directory
[   29.884174][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.891347][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.917540][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.928710][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.935688][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.961626][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.015647][ T3310] hsr_slave_0: entered promiscuous mode
[   30.021697][ T3310] hsr_slave_1: entered promiscuous mode
[   30.027599][ T3310] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   30.035204][ T3310] Cannot create hsr debugfs directory
[   30.040883][ T3303] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   30.049415][ T3303] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   30.073905][ T3303] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   30.092146][ T3303] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   30.140640][ T3309] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   30.161150][ T3309] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   30.181427][ T3309] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   30.193402][ T3309] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   30.218030][ T3304] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   30.239774][ T3304] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   30.257590][ T3304] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   30.273849][ T3304] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   30.305683][ T3306] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   30.314951][ T3306] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   30.324222][ T3306] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   30.335298][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.346936][ T3306] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   30.388967][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.397113][ T3303] 8021q: adding VLAN 0 to HW filter on device team0
[   30.408633][ T3310] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   30.417661][ T3310] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   30.426323][ T3310] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   30.435074][ T3310] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   30.458005][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.465087][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.474191][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.481346][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.491223][ T3309] 8021q: adding VLAN 0 to HW filter on device team0
[   30.517067][ T3303] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   30.527531][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   30.541832][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.548948][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.559065][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.566183][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.599080][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.621850][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   30.656801][ T3304] 8021q: adding VLAN 0 to HW filter on device team0
[   30.670072][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.695072][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.709237][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.724623][ T3306] 8021q: adding VLAN 0 to HW filter on device team0
[   30.732771][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.739843][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.751535][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.758629][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.768801][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.783899][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.791038][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.813794][ T3304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   30.824309][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   30.849545][ T3396] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.856654][ T3396] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.867169][ T3310] 8021q: adding VLAN 0 to HW filter on device team0
[   30.889348][ T3396] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.896560][ T3396] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.921834][ T3396] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.928971][ T3396] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.958666][ T3309] veth0_vlan: entered promiscuous mode
[   30.972063][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   30.994332][ T3309] veth1_vlan: entered promiscuous mode
[   31.004021][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.037129][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.068004][ T3309] veth0_macvtap: entered promiscuous mode
[   31.085240][ T3303] veth0_vlan: entered promiscuous mode
[   31.097690][ T3309] veth1_macvtap: entered promiscuous mode
[   31.111889][ T3303] veth1_vlan: entered promiscuous mode
[   31.127145][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.142324][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.151680][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.171738][ T3309] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.180549][ T3309] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.189267][ T3309] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.198132][ T3309] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.213919][ T3304] veth0_vlan: entered promiscuous mode
[   31.231227][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.251543][ T3304] veth1_vlan: entered promiscuous mode
[   31.265016][ T3303] veth0_macvtap: entered promiscuous mode
[   31.292415][ T3309] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   31.294561][ T3304] veth0_macvtap: entered promiscuous mode
[   31.317096][ T3303] veth1_macvtap: entered promiscuous mode
[   31.327005][ T3306] veth0_vlan: entered promiscuous mode
[   31.340806][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.351336][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.362738][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.372524][ T3304] veth1_macvtap: entered promiscuous mode
[   31.382391][ T3306] veth1_vlan: entered promiscuous mode
[   31.391807][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.402313][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.413242][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.421704][ T3303] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.430561][ T3303] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.439415][ T3303] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.448199][ T3303] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.469816][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.480412][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.490287][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.500731][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.511907][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.528360][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.539170][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.549047][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.559527][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.573397][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.593066][ T3306] veth0_macvtap: entered promiscuous mode
[   31.602003][ T3310] veth0_vlan: entered promiscuous mode
[   31.608427][ T3304] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.617234][ T3304] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.626080][ T3304] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.634873][ T3304] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.650805][ T3306] veth1_macvtap: entered promiscuous mode
[   31.660218][ T3310] veth1_vlan: entered promiscuous mode
[   31.675385][ T3310] veth0_macvtap: entered promiscuous mode
[   31.685160][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.695690][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.705666][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.716162][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.726044][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.736639][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.747519][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.756575][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.767195][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.777104][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.787648][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.797521][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.808043][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.818745][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.827354][ T3310] veth1_macvtap: entered promiscuous mode
[   31.855435][ T3453] sg_write: data in/out 124/14 bytes for SCSI command 0x0-- guessing data in;
[   31.855435][ T3453]    program syz.2.8 not setting count and/or reply_len properly
[   31.856559][ T3306] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.880818][ T3306] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.889593][ T3306] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.898390][ T3306] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.948991][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.959664][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.964642][   T29] kauditd_printk_skb: 43 callbacks suppressed
[   31.964658][   T29] audit: type=1400 audit(1745798227.770:135): avc:  denied  { create } for  pid=3456 comm="syz.2.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   31.969635][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.005191][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.015087][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.025531][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.035351][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.045788][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.056463][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.089642][ T3451] tipc: Started in network mode
[   32.094671][ T3451] tipc: Node identity be095355fd8d, cluster identity 4711
[   32.102090][ T3451] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   32.111619][   T29] audit: type=1400 audit(1745798227.890:136): avc:  denied  { create } for  pid=3460 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   32.113044][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.141672][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.151642][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.162264][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.172115][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.182595][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.192530][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.203044][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.216266][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.223567][   T29] audit: type=1400 audit(1745798228.030:137): avc:  denied  { create } for  pid=3462 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   32.245119][ T3450] tipc: Resetting bearer <eth:syzkaller0>
[   32.265635][   T29] audit: type=1400 audit(1745798228.050:138): avc:  denied  { create } for  pid=3464 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   32.285104][   T29] audit: type=1400 audit(1745798228.050:139): avc:  denied  { connect } for  pid=3464 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   32.304565][   T29] audit: type=1400 audit(1745798228.050:140): avc:  denied  { name_connect } for  pid=3464 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[   32.324594][   T29] audit: type=1400 audit(1745798228.050:141): avc:  denied  { listen } for  pid=3464 comm="syz.2.11" lport=37352 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   32.353887][ T3450] tipc: Disabling bearer <eth:syzkaller0>
[   32.386379][ T3310] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.395184][ T3310] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.399506][   T29] audit: type=1400 audit(1745798228.160:142): avc:  denied  { accept } for  pid=3464 comm="syz.2.11" lport=37352 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   32.404013][ T3310] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.426702][   T29] audit: type=1400 audit(1745798228.160:143): avc:  denied  { write } for  pid=3464 comm="syz.2.11" lport=37352 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[   32.435403][ T3310] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.458621][   T29] audit: type=1400 audit(1745798228.160:144): avc:  denied  { setopt } for  pid=3464 comm="syz.2.11" lport=37352 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[   32.706518][ T3498] loop0: detected capacity change from 0 to 2048
[   32.762858][ T3506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   32.772769][ T3294] Alternate GPT is invalid, using primary GPT.
[   32.779178][ T3294]  loop0: p2 p3 p7
[   32.783235][ T3506] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   32.808998][ T3498] Alternate GPT is invalid, using primary GPT.
[   32.815389][ T3498]  loop0: p2 p3 p7
[   32.905485][ T3513] udevd[3513]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[   32.911835][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory
[   32.915388][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[   32.928505][ T3515] vlan2: entered allmulticast mode
[   32.948735][ T3513] udevd[3513]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[   32.960440][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[   32.971883][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory
[   33.267011][    C0] hrtimer: interrupt took 38115 ns
[   33.277449][ T3543] netlink: 96 bytes leftover after parsing attributes in process `syz.0.38'.
[   33.346813][ T3506] +}[@ (3506) used greatest stack depth: 10888 bytes left
[   33.481089][ T3555] pim6reg1: entered promiscuous mode
[   33.486520][ T3555] pim6reg1: entered allmulticast mode
[   33.525550][ T3562] serio: Serial port pts0
[   33.685553][ T3579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.53'.
[   33.715141][ T3579] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   33.725898][ T3581] netlink: 64 bytes leftover after parsing attributes in process `syz.4.52'.
[   33.727149][ T3579] syz.1.53 (3579) used greatest stack depth: 10272 bytes left
[   33.810392][ T3584] loop1: detected capacity change from 0 to 1024
[   33.821629][ T3584] =======================================================
[   33.821629][ T3584] WARNING: The mand mount option has been deprecated and
[   33.821629][ T3584]          and is ignored by this kernel. Remove the mand
[   33.821629][ T3584]          option from the mount to silence this warning.
[   33.821629][ T3584] =======================================================
[   33.874791][ T3584] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   33.923830][ T3584] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt.
[   33.954583][ T3593] Zero length message leads to an empty skb
[   33.981151][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.986566][ T3596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.58'.
[   33.999218][ T3596] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   34.161837][ T3607] SELinux: ebitmap start bit (9) is not a multiple of the map unit size (64)
[   34.172176][ T3607] SELinux: failed to load policy
[   34.324498][ T3624] netlink: 'syz.1.68': attribute type 39 has an invalid length.
[   34.417949][ T3633] loop3: detected capacity change from 0 to 256
[   34.493486][ T3626] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[   34.561067][ T3638] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   34.575284][ T3638] IPVS: set_ctl: invalid protocol: 4 255.255.255.255:20001
[   34.586998][ T3638] netlink: 'syz.3.75': attribute type 32 has an invalid length.
[   34.637201][ T3645] loop4: detected capacity change from 0 to 2048
[   34.683300][ T3645]  loop4: p2 p3 p7
[   34.744719][ T3652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.79'.
[   34.768430][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[   34.769646][ T3513] udevd[3513]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[   34.799318][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory
[   34.966534][ T3662] syzkaller0: entered promiscuous mode
[   34.972169][ T3662] syzkaller0: entered allmulticast mode
[   35.056532][ T3671] loop0: detected capacity change from 0 to 512
[   35.121072][ T3671] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[   35.158884][ T3671] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.88: invalid indirect mapped block 2683928664 (level 1)
[   35.233321][ T3671] EXT4-fs (loop0): Remounting filesystem read-only
[   35.255759][ T3671] EXT4-fs (loop0): 1 truncate cleaned up
[   35.274049][ T3671] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.483202][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.529890][ T3677] loop0: detected capacity change from 0 to 512
[   35.542249][ T3677] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   35.555376][ T3677] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   35.609337][ T3677] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   35.650036][ T3677] EXT4-fs (loop0): 1 truncate cleaned up
[   35.656093][ T3677] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.745470][ T3677] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2798: inode #15: comm syz.0.90: corrupted xattr block 33: invalid header
[   35.776543][ T3682] loop4: detected capacity change from 0 to 1024
[   35.801534][ T3682] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   35.812568][ T3682] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   35.825656][ T3677] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2962: inode #15: comm syz.0.90: corrupted xattr block 33: invalid header
[   35.839607][ T3682] JBD2: no valid journal superblock found
[   35.845514][ T3682] EXT4-fs (loop4): Could not load journal inode
[   35.888563][ T3677] EXT4-fs warning (device loop0): ext4_evict_inode:279: xattr delete (err -117)
[   35.908829][ T3684] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[   35.917428][   T23] IPVS: starting estimator thread 0...
[   35.945522][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.983774][ T3692] loop0: detected capacity change from 0 to 512
[   35.984662][ T3691] loop1: detected capacity change from 0 to 1024
[   35.999433][ T3692] EXT4-fs: Ignoring removed nobh option
[   36.009013][ T3691] EXT4-fs: Ignoring removed orlov option
[   36.010095][ T3688] IPVS: using max 2112 ests per chain, 105600 per kthread
[   36.030601][ T3692] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13
[   36.031041][ T3691] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled
[   36.051429][ T3692] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.95: attempt to clear invalid blocks 2 len 1
[   36.080549][ T3692] EXT4-fs (loop0): Remounting filesystem read-only
[   36.080764][ T3692] EXT4-fs (loop0): 1 truncate cleaned up
[   36.081263][ T3692] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.081619][ T3691] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.112943][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.164772][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.191294][ T3700] xt_hashlimit: max too large, truncated to 1048576
[   36.202303][ T3659] syz.2.82 (3659) used greatest stack depth: 7000 bytes left
[   36.347256][ T3716] pim6reg1: entered promiscuous mode
[   36.352815][ T3716] pim6reg1: entered allmulticast mode
[   36.475229][ T3724] ref_ctr_offset mismatch. inode: 0x7d offset: 0x0 ref_ctr_offset(old): 0x230000 ref_ctr_offset(new): 0x0
[   36.490330][ T3726] loop3: detected capacity change from 0 to 128
[   36.510461][ T3724] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1
[   36.518853][ T3724] ref_ctr decrement failed for inode: 0x7d offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888107fb3700
[   36.550953][ T3724] uprobe: syz.2.110:3724 failed to unregister, leaking uprobe
[   36.619239][ T3735] tipc: Started in network mode
[   36.624192][ T3735] tipc: Node identity e2616c1dcb3, cluster identity 4711
[   36.632015][ T3735] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   36.653922][ T3726] syz.3.111: attempt to access beyond end of device
[   36.653922][ T3726] loop3: rw=2049, sector=153, nr_sectors = 8 limit=128
[   36.670661][ T3735] tipc: Disabling bearer <eth:syzkaller0>
[   36.677688][ T3726] syz.3.111: attempt to access beyond end of device
[   36.677688][ T3726] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128
[   36.692924][ T3726] syz.3.111: attempt to access beyond end of device
[   36.692924][ T3726] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128
[   36.706435][ T3726] syz.3.111: attempt to access beyond end of device
[   36.706435][ T3726] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128
[   36.723941][ T3726] syz.3.111: attempt to access beyond end of device
[   36.723941][ T3726] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128
[   36.737456][ T3726] syz.3.111: attempt to access beyond end of device
[   36.737456][ T3726] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128
[   36.766980][ T3739] capability: warning: `syz.4.115' uses deprecated v2 capabilities in a way that may be insecure
[   36.810903][ T3726] syz.3.111: attempt to access beyond end of device
[   36.810903][ T3726] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128
[   36.900142][ T3726] syz.3.111: attempt to access beyond end of device
[   36.900142][ T3726] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128
[   36.918131][ T3726] syz.3.111: attempt to access beyond end of device
[   36.918131][ T3726] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128
[   36.941026][ T3726] syz.3.111: attempt to access beyond end of device
[   36.941026][ T3726] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128
[   37.006817][   T29] kauditd_printk_skb: 125 callbacks suppressed
[   37.006853][   T29] audit: type=1400 audit(1745798232.810:270): avc:  denied  { create } for  pid=3749 comm="syz.4.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   37.126078][   T29] audit: type=1400 audit(1745798232.920:271): avc:  denied  { bind } for  pid=3749 comm="syz.4.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   37.145248][   T29] audit: type=1400 audit(1745798232.920:272): avc:  denied  { write } for  pid=3749 comm="syz.4.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   37.194073][   T29] audit: type=1400 audit(1745798232.990:273): avc:  denied  { watch watch_reads } for  pid=3759 comm="syz.4.125" path="/29" dev="tmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   37.216901][   T29] audit: type=1400 audit(1745798232.990:274): avc:  denied  { create } for  pid=3759 comm="syz.4.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   37.242868][ T3761] loop3: detected capacity change from 0 to 512
[   37.273032][ T3761] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.124: bg 0: block 248: padding at end of block bitmap is not set
[   37.290338][   T29] audit: type=1400 audit(1745798233.100:275): avc:  denied  { name_bind } for  pid=3763 comm="syz.1.126" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   37.325581][ T3761] Quota error (device loop3): write_blk: dquota write failed
[   37.333127][ T3761] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[   37.359503][   T29] audit: type=1400 audit(1745798233.160:276): avc:  denied  { create } for  pid=3769 comm="syz.4.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   37.378960][ T3761] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.124: Failed to acquire dquot type 1
[   37.380708][   T29] audit: type=1400 audit(1745798233.170:277): avc:  denied  { ioctl } for  pid=3769 comm="syz.4.128" path="socket:[4805]" dev="sockfs" ino=4805 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   37.451810][ T3777] netlink: 'syz.4.130': attribute type 1 has an invalid length.
[   37.470033][ T3761] EXT4-fs (loop3): 1 truncate cleaned up
[   37.479277][ T3761] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.514153][ T3761] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   37.585957][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.627718][ T3786] loop4: detected capacity change from 0 to 1024
[   37.662869][ T3786] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.701509][ T3786] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.135: bg 0: block 88: padding at end of block bitmap is not set
[   37.741412][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.852838][ T3797] tipc: Started in network mode
[   37.857816][ T3797] tipc: Node identity ac14140f, cluster identity 4711
[   37.865345][ T3797] tipc: New replicast peer: 10.1.1.2
[   37.870852][ T3797] tipc: Enabled bearer <udp:s>, priority 10
[   38.489678][ T3842] loop2: detected capacity change from 0 to 8192
[   38.503238][ T3842] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1)
[   38.511286][ T3842] FAT-fs (loop2): Filesystem has been set read-only
[   38.527624][ T3842] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1)
[   38.557976][ T3846] netlink: 'syz.0.160': attribute type 1 has an invalid length.
[   38.607870][ T3846] 8021q: adding VLAN 0 to HW filter on device bond1
[   38.676052][ T3859] netlink: 'syz.2.163': attribute type 11 has an invalid length.
[   38.718092][ T3859] netlink: 448 bytes leftover after parsing attributes in process `syz.2.163'.
[   38.737165][ T3856] bond1: (slave veth3): Enslaving as an active interface with a down link
[   38.750307][ T3866] serio: Serial port pts0
[   38.780650][ T3862] bond1: (slave ip6gretap1): making interface the new active one
[   38.800466][ T3862] ip6gretap1: entered promiscuous mode
[   38.807559][ T3862] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[   38.817801][ T3864] tipc: Started in network mode
[   38.822713][ T3864] tipc: Node identity d1, cluster identity 4711
[   38.828967][ T3864] tipc: Node number set to 209
[   38.837453][ T3864] tipc: Cannot configure node identity twice
[   38.934136][ T3881] loop1: detected capacity change from 0 to 2048
[   38.981833][ T3881] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.994009][    T9] tipc: Node number set to 2886997007
[   39.007501][ T3889] loop2: detected capacity change from 0 to 128
[   39.043767][ T3885] netlink: 'syz.3.175': attribute type 10 has an invalid length.
[   39.044634][ T3891] loop0: detected capacity change from 0 to 512
[   39.067335][ T3885] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.076834][ T3885] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   39.111545][ T3891] EXT4-fs error (device loop0): ext4_iget_extra_inode:4693: inode #15: comm syz.0.176: corrupted in-inode xattr: invalid ea_ino
[   39.172594][ T3891] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.176: couldn't read orphan inode 15 (err -117)
[   39.210439][ T3891] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.276998][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.346312][ T3904] random: crng reseeded on system resumption
[   39.375395][ T3900] loop3: detected capacity change from 0 to 4096
[   39.419896][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.435073][ T3900] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.489031][ T3910] loop1: detected capacity change from 0 to 512
[   39.522801][ T3910] EXT4-fs (loop1): blocks per group (71) and clusters per group (32768) inconsistent
[   39.646830][ T3918] loop1: detected capacity change from 0 to 128
[   39.657001][ T3916] serio: Serial port pts0
[   39.674131][ T3918] loop1: detected capacity change from 0 to 512
[   39.691660][ T3918] EXT4-fs: Ignoring removed oldalloc option
[   39.733567][ T3922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.186'.
[   39.761988][ T3918] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.185: Parent and EA inode have the same ino 15
[   39.794052][ T3918] EXT4-fs (loop1): 1 orphan inode deleted
[   39.801764][ T3918] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.849625][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.878368][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.003604][ T3934] loop0: detected capacity change from 0 to 512
[   40.011500][ T3934] EXT4-fs: Ignoring removed orlov option
[   40.046803][ T3934] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   40.063456][ T3936] loop3: detected capacity change from 0 to 2048
[   40.071265][ T3934] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   40.079777][ T3934] EXT4-fs (loop0): orphan cleanup on readonly fs
[   40.087052][ T3934] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.193: bg 0: block 248: padding at end of block bitmap is not set
[   40.102977][ T3934] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.193: Failed to acquire dquot type 1
[   40.114997][ T3934] EXT4-fs (loop0): 1 truncate cleaned up
[   40.122927][ T3934] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   40.169555][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.332282][ T3950] ref_ctr_offset mismatch. inode: 0xea offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8
[   40.406018][ T3946] loop0: detected capacity change from 0 to 2048
[   40.455391][ T3946] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.041336][    T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   41.049388][ T3969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   41.063611][ T3969] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   41.087913][    T9] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   41.172865][ T3967] loop3: detected capacity change from 0 to 1024
[   41.228496][ T3974] loop4: detected capacity change from 0 to 2048
[   41.228585][ T3946] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.197: bg 0: block 234: padding at end of block bitmap is not set
[   41.251517][ T3946] EXT4-fs (loop0): Remounting filesystem read-only
[   41.261487][ T3967] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.280915][ T3974] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.310623][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.401209][ T3981] hub 2-0:1.0: USB hub found
[   41.407437][ T3981] hub 2-0:1.0: 8 ports detected
[   41.409261][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.453668][ T3974] ==================================================================
[   41.461796][ T3974] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark
[   41.469714][ T3974] 
[   41.472039][ T3974] write to 0xffff888109d59464 of 4 bytes by task 3982 on cpu 1:
[   41.479676][ T3974]  xas_set_mark+0x12b/0x140
[   41.484183][ T3974]  __folio_start_writeback+0x1dd/0x430
[   41.489652][ T3974]  ext4_bio_write_folio+0x590/0x9d0
[   41.494856][ T3974]  mpage_process_page_bufs+0x46c/0x5b0
[   41.500363][ T3974]  mpage_prepare_extent_to_map+0x775/0xb80
[   41.506204][ T3974]  ext4_do_writepages+0xa25/0x2270
[   41.511328][ T3974]  ext4_writepages+0x176/0x300
[   41.516127][ T3974]  do_writepages+0x1d2/0x480
[   41.520732][ T3974]  file_write_and_wait_range+0x156/0x2c0
[   41.526371][ T3974]  generic_buffers_fsync_noflush+0x45/0x120
[   41.532274][ T3974]  ext4_sync_file+0x1ab/0x690
[   41.536962][ T3974]  vfs_fsync_range+0x10a/0x130
[   41.541736][ T3974]  ext4_buffered_write_iter+0x34f/0x3c0
[   41.547291][ T3974]  ext4_file_write_iter+0xdbf/0xf00
[   41.553050][ T3974]  iter_file_splice_write+0x5ef/0x970
[   41.558425][ T3974]  direct_splice_actor+0x153/0x2a0
[   41.563553][ T3974]  splice_direct_to_actor+0x30f/0x680
[   41.568934][ T3974]  do_splice_direct+0xda/0x150
[   41.573718][ T3974]  do_sendfile+0x380/0x640
[   41.578150][ T3974]  __x64_sys_sendfile64+0x105/0x150
[   41.583359][ T3974]  x64_sys_call+0xb39/0x2fb0
[   41.587985][ T3974]  do_syscall_64+0xd0/0x1a0
[   41.592493][ T3974]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   41.598405][ T3974] 
[   41.600727][ T3974] read to 0xffff888109d59464 of 4 bytes by task 3974 on cpu 0:
[   41.608268][ T3974]  __writeback_single_inode+0x1f9/0x7c0
[   41.613832][ T3974]  writeback_single_inode+0x167/0x3e0
[   41.619218][ T3974]  sync_inode_metadata+0x5b/0x90
[   41.624169][ T3974]  generic_buffers_fsync_noflush+0xd9/0x120
[   41.630079][ T3974]  ext4_sync_file+0x1ab/0x690
[   41.634886][ T3974]  vfs_fsync_range+0x10a/0x130
[   41.639924][ T3974]  ext4_buffered_write_iter+0x34f/0x3c0
[   41.645490][ T3974]  ext4_file_write_iter+0xdbf/0xf00
[   41.650787][ T3974]  iter_file_splice_write+0x5ef/0x970
[   41.656165][ T3974]  direct_splice_actor+0x153/0x2a0
[   41.661283][ T3974]  splice_direct_to_actor+0x30f/0x680
[   41.666662][ T3974]  do_splice_direct+0xda/0x150
[   41.671432][ T3974]  do_sendfile+0x380/0x640
[   41.675859][ T3974]  __x64_sys_sendfile64+0x105/0x150
[   41.681239][ T3974]  x64_sys_call+0xb39/0x2fb0
[   41.685850][ T3974]  do_syscall_64+0xd0/0x1a0
[   41.690378][ T3974]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   41.696293][ T3974] 
[   41.698611][ T3974] value changed: 0x0a000021 -> 0x04000021
[   41.704688][ T3974] 
[   41.707009][ T3974] Reported by Kernel Concurrency Sanitizer on:
[   41.713176][ T3974] CPU: 0 UID: 0 PID: 3974 Comm: syz.4.208 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(voluntary) 
[   41.723764][ T3974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   41.733826][ T3974] ==================================================================
[   41.794242][ T3986] loop0: detected capacity change from 0 to 1024
[   41.829334][ T3986] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.847235][ T3986] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.211: Allocating blocks 385-513 which overlap fs metadata
[   41.880092][ T3986] EXT4-fs (loop0): pa ffff88810650c1c0: logic 16, phys. 129, len 24
[   41.888146][ T3986] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8
[   41.899380][ T3986] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 20 with max blocks 4 with error 28
[   41.911914][ T3986] EXT4-fs (loop0): This should not happen!! Data will be lost
[   41.911914][ T3986] 
[   41.921689][ T3986] EXT4-fs (loop0): Total free blocks count 0
[   41.927686][ T3986] EXT4-fs (loop0): Free/Dirty block details
[   41.933705][ T3986] EXT4-fs (loop0): free_blocks=128
[   41.938831][ T3986] EXT4-fs (loop0): dirty_blocks=0
[   41.943906][ T3986] EXT4-fs (loop0): Block reservation details
[   41.950012][ T3986] EXT4-fs (loop0): i_reserved_data_blocks=0
[   42.129152][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.160037][  T347] ip6gretap1: left promiscuous mode