last executing test programs:

2.35963798s ago: executing program 0 (id=211):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002820207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b000000000000000000009500000000000000dd66d08329fb721ce7c1b33a10c1440eeb93b82e1b2dc05054cac8ff85db9447b626d01b67c54a40a0fd0d"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xcc0, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860186dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10)
r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0x20)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0)
perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x2, 0x0, 0x7, 0x2, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff40, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1)
unshare(0x2c020400)
r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20, 0x800, 0xfffffffc, 0x8, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20)
r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x110)
r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r9}, 0x10)
getxattr(0x0, 0x0, 0x0, 0x0)
fcntl$setlease(r6, 0x400, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$eJzs3c9vFGUfAPDvs7stlAItb97kfZGDTUiERG1pwWiMiRDx5sEfJJ5IrG0hhAUaWhNBjJDgf6B/gIk3E2M8EmOIevHqzcSriSESA714WzO7s2WB3f7cMsh8PsnQ55mnk+8zu3z7zDw7MxtAaY1l/1Qi9kbEfIoY6WirRd441vq9u3euzCzduTKTotF4568UKV/X/v2U/xzON94eEb/8kOI/1YfjLly6fHa6Xp+7mNcnFs/NTyxcuvz8mXPTp+dOz52fmnxx8oUjh6eOHOrLfu6KiJ/Gj9eun3pt3zczX+755LuvbqQ4Gjvz9s796JexGFt+TTplr+tL/Q5WkGq+P51vcaoV2CHWpf3+DUTE/2IkqnHvzRuJT98qtHPAlmqkiAZQUkn+Q0m1jwOy89/2UuwRCfCo3D7WmgC4m1pze0vL+V9rzQ3G9ubcwI6lFJ3TOiki+jEzl8WYfyaNZEts0Twc0N3VaxHx/27jf2rm5mhzFj/L/8p9+V+JiDfzn9n6tzcYf+yBuvyHR2cz+f9eR/6/v8H48h8AAAAAAAD65+axiHiu2+d/leXrf6LL9T/DEXG0D/FX//yvcqsPYYAubh+LeCUi2tf+LXXkf260mtd2Na8HGEinztTnDkXE7og4GAPbsvrkCjHG9v080LOt4/q/bMnit68FzPtxq7bt/m1mpxenN7PPQMvtaxFP1brlf1oe/1OX8T8b++fXGKNx/NUfe7Wtnv/AVml8EXGg6/h/78kVaeXnc0w0jwcm2kcFD/vo5I1ve8WX/1CcbPzfsXL+j6bO5/UsrD/Gx3/+ton87378P5hONB85M5iv+3B6cfHiZMRgeuPh9VPr7zM8idr50M6XLP8P7u9+/r/S8f9QRFxdY8wT379+vVeb8R+KM3QtYnZd4//6C/vf/fzvXvHXNv4faY7pB/M15v9gZWtN0KL7CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/RpWI2BmpMr5crlTGxyOGI+K/saNSv7Cw+OypCx+cn83amt//X2l/0+9Iq57a3/8/2lGfeqB+OCL2RMRn1aFmfXzmQn226J0HAAAAAAAAAAAAAAAAAACAx8Rwj/v/M39Ui+4dsOVqRXcAKIz8h/KS/1Be8h/KS/5Decl/KC/5D+Ul/6G85D+UV7Xx9cmi+wAAAAAAAPTNnqdv/poi4urLQ80lM5i3DRTaM2CrHS26A0BhPOIHysulf1Beq53jmwOAJ19apX37hrcEAAAAAAAAAAAAAPrlwF73/0NZVYruAFCY3vf/ezIAPOnc/w/l5RwfcP8/AAAAAAAAAAAAADz+Fi5dPjtdr89d3Ghh2+Y2V1BYa+H33a3/s49Lf9ZfiNSHjHtEhaL/MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG3/BAAA//9r5fVk")

1.888868098s ago: executing program 4 (id=220):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4048084)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1, 0x0, 0x400007}, 0x18)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0)
membarrier(0x10, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x17, 0x55, 0x2e5, 0x70bd2c, 0x13160000, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0xffe, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000100)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x8744, 0x100, 0x2}}}}]}, 0x44}}, 0x4048000)
bind$can_j1939(r3, &(0x7f0000000300)={0x1d, r5, 0x1, {0x1, 0x0, 0x4}, 0xfe}, 0x18)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000540)={0x1, 0x1, 0x0, 0x8, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x3c}, @loopback}, 0x10)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
r7 = syz_open_dev$hidraw(&(0x7f0000000440), 0x243c2917, 0x14a042)
write$hidraw(r7, &(0x7f0000000040)='F', 0xfffffe41)
syz_open_dev$hidraw(&(0x7f0000000000), 0x5, 0x200)
ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f00000004c0)=@get={0x1, &(0x7f0000000340)=""/234, 0x4})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESDEC=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYRESDEC, @ANYRES64=r6, @ANYRES8=r0, @ANYBLOB="af3826aca0b471611b5d3d25c2169618701ea18f410c2258fb1d56c5222896b926415ff11bef14dc74a680ea473f49be49e899e39908f24ce41abf3c85fccd3cad06d5c2e7a269737e5bc0a17824f1a53c676e40de4e323bcaf5dbda104c945aac27f6ebc9810ff4781b737d0aea20f4029ec9b2fa565069659f96f978c90b4160336d6858fa61139186ae1ce8f640da7a1ed51bdea0d662745dc2fa5e400b83258ba47d59c74a0336c2b6675d3d5e0169b4c0e645914087ed9ca71236c61b37a1ef76befd62c3f32b2afe1b3ed9e1731888b3a95d70e673a64020b78d15df"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x1, '\x00', r5, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.727854761s ago: executing program 2 (id=223):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x18)
ioperm(0x1, 0x9, 0xfffffffffffffff8)

1.704375902s ago: executing program 2 (id=224):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f00000010c0)='kfree\x00', r1, 0x0, 0x8}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
mount$9p_fd(0x0, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000003c0), 0x200000, &(0x7f0000000580)=ANY=[@ANYBLOB=',loose,access=client,access=any,version=9p2000,version=9p2000.L,fscontext='])
setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="0002"], 0x18)

1.665806066s ago: executing program 0 (id=225):
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x6, 0xfff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x7fffffff}, 0x0, 0x0)

1.61594709s ago: executing program 2 (id=226):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002600000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x91}, 0x18)
unshare(0x22020400)

1.61541482s ago: executing program 0 (id=227):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f00000010c0)='kfree\x00', r1, 0x0, 0x8}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
mount$9p_fd(0x0, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000003c0), 0x200000, &(0x7f0000000580)=ANY=[@ANYBLOB=',loose,access=client,access=any,version=9p2000,version=9p2000.L,fscontext='])
r2 = socket$inet6(0xa, 0x3, 0x3c)
setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="0002"], 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5, 0x0, 0x5}, 0x18)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x4000000)
open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98)
syz_emit_ethernet(0x46, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0)
pread64(r7, &(0x7f00000024c0)=""/209, 0xd1, 0x8)

1.595098151s ago: executing program 2 (id=229):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000640), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf250400000008000800640101020800020007000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000e00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r2, 0x0, 0x9}, 0x18)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1700000055003d0926bd70000200000007"], 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7, 0x0, 0x3}, 0x18)
r8 = fsmount(0xffffffffffffffff, 0x0, 0x83)
r9 = syz_open_procfs(0xffffffffffffffff, 0x0)
read$msr(r9, &(0x7f0000000d40)=""/43, 0x2b)
getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, 0x0, &(0x7f0000000d40))
mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000d00), 0x80000, &(0x7f0000000f40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno', @ANYRESHEX=r3, @ANYBLOB="2c667363616386158c9ef502ffb59168652c6c6f6f63616368653d6c7f6f73652c64b95a747569643d", @ANYRESHEX, @ANYBLOB=',noxattr,fsmagic=0x00000000000000'])
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x94)
getrlimit(0x0, &(0x7f0000000d80))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r10, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a3731677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x2, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==")
setxattr$system_posix_acl(0x0, &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010004000000000004000500a9930000100000000000000020"], 0x24, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r11)
sendmsg$NLBL_CIPSOV4_C_ADD(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="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"], 0x28}}, 0x0)
r13 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000380), r0)
sendmsg$NET_DM_CMD_START(r11, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x14, r13, 0x1, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x44)
r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r14}, 0x18)

1.413270426s ago: executing program 0 (id=231):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000640), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf250400000008000800640101020800020007000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000e00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r2, 0x0, 0x9}, 0x18)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1700000055003d0926bd70000200000007"], 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7, 0x0, 0x3}, 0x18)
r8 = fsmount(0xffffffffffffffff, 0x0, 0x83)
r9 = syz_open_procfs(0xffffffffffffffff, 0x0)
read$msr(r9, &(0x7f0000000d40)=""/43, 0x2b)
getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, 0x0, &(0x7f0000000d40))
mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000d00), 0x80000, &(0x7f0000000f40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno', @ANYRESHEX=r3, @ANYBLOB="2c667363616386158c9ef502ffb59168652c6c6f6f63616368653d6c7f6f73652c64b95a747569643d", @ANYRESHEX, @ANYBLOB=',noxattr,fsmagic=0x00000000000000'])
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x94)
getrlimit(0x0, &(0x7f0000000d80))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r10, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a3731677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x2, 0x571, &(0x7f0000000780)="$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")
setxattr$system_posix_acl(0x0, &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010004000000000004000500a9930000100000000000000020"], 0x24, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r11)
sendmsg$NLBL_CIPSOV4_C_ADD(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01000000000000000000010000000800020000000000080001000000080004000c802dadf55bcc124e6086df3680f6217a83bcdfc31fb2c35ddd67efaf3f75c7dab4477201c747a9a6f3eae8e09d267ef308af5b304567cd81f8ad273c128094406b159a023fc9d381fc24f545feee678f2f4ae2f7e596386d09d51660e56ecb45046617078225d9dcbd174aa7d4fac3c666832811248627a16e04cac214aa89cf684324943265a116be931c40b4c0289521b4ce2ca70abc63274df19095e8cb350d32c67b544952391f47131f5f3bf02ec157fbb393e95be35a57fda25a0943d27f1dcf773ded33ad510d2a99ebfefb9b59ec18bd905a70a869d2000000000000cd83c90cc26d70c9efd44c4952e4dd2e5378b781e9423dbb418a14fb07e1811de7eab551ad3220fc993121a88d4c2012498af7bdbd96a66fd2ef6831bbad1c5683804b2143a726cea9f2433cc6ad6b90e3f60be04d4c2af0c99021e4cf79ffa6ca322f7b11478f5fc46354a0ed5200cbb574a5e8f7ea6fce650563bba5"], 0x28}}, 0x0)
r13 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000380), r0)
sendmsg$NET_DM_CMD_START(r11, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x14, r13, 0x1, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x44)
r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r14}, 0x18)

1.385196089s ago: executing program 2 (id=232):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002820207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b000000000000000000009500000000000000dd66d08329fb721ce7c1b33a10c1440eeb93b82e1b2dc05054cac8ff85db9447b626d01b67c54a40a0fd0d"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xcc0, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860186dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10)
r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0x20)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0)
perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x2, 0x0, 0x7, 0x2, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff40, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1)
unshare(0x2c020400)
r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20, 0x800, 0xfffffffc, 0x8, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20)
r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x110)
r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r9}, 0x10)
getxattr(0x0, 0x0, 0x0, 0x0)
fcntl$setlease(r6, 0x400, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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")

1.23848605s ago: executing program 3 (id=233):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000005}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'erspan0\x00', <r6=>0x0})
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
openat$vcs(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000380), &(0x7f00000003c0)=r7}, 0x20)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newlink={0x48, 0x10, 0x401, 0x0, 0x4, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r6, 0x10820, 0x343}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000014}, 0x0)

1.206532333s ago: executing program 0 (id=234):
r0 = getpgrp(0x0)
syz_pidfd_open(r0, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8004, 0x0, 0x4, 0x16, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9c25d07fde460e677df7009000000fab4afaaf755a3f6a004000000000000000000000000000200", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f2835966c10000000000d300e6d60200000000555c581a0000000100", [0x205]})
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0)
syz_io_uring_setup(0x49d, &(0x7f0000000e80)={0x0, 0xa5be, 0x10, 0x1, 0x32c, 0x0, r2}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000040))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000240)={&(0x7f0000000f00)=""/80, 0x328000, 0x1000}, 0x20)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10)
syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48)
syz_emit_ethernet(0x4e, &(0x7f0000000800)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60ecff8000181100fc000000000000000000000000940000ff02000000000000000000000000000100004e220018907803000000000800"/78], 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r6}, &(0x7f0000000380), &(0x7f0000000ac0)}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10)
write$selinux_validatetrans(0xffffffffffffffff, &(0x7f0000001cc0)=ANY=[@ANYBLOB='system_u'], 0x79)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r11, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0x192}, {&(0x7f0000000f80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e4a7c6bafd0ea79d39d330e70e6776bf6a926de227e5a43653bba04883e98d67bb64aa86e8bf271ba87604bc598e47f2992c7618ad25068860a481554b53352c7339de7e79c3bd1aed5bef8f398432858c888a5d8651969ea40eb3d486e9fe61d49b20500fdfd1548f567da970103d36730657c35d03d2c36b142665f62203b1fb12d616478cfef6f38b34cda87a634dd06d359f33e98b94a5e5b46b2a8d73126352d1d5b65af75055455cc903e384c41876fbdff935d047284d9d203b147a6ba0e9cb50beef7798886c33d2f2f0c0d9abe0e32c7c809f8b0b28fc59471987353c862a311776b8275bf319d5cb9a59f8f103b6e567ef5dd8859973cc3fe41e356bf5bd3186240e49286977eca36a8ad44185973b276cd7958b73e14a221b7fd567818bebf54ad27ee95161bd2aeeb356482ff467500a7d36f0464f58a591ec6b728f984ec78d0abe14c6d3411ac3ffc4c3179d1f95d029f26cceb545723519d3d4209a2b1243e78767273c13dc2bd320512674b6f1a50313bae7b9d16aebb476dbc829e8fd8dd46a1696efaff5795cf75de57c90f05ed9ef4a5cdfbf20d3d9ed95fb4114b1d5c9ade0856212e7ba330ce5bccf2c993dff89112b28bd3b17d3fcfacef7590f62bf948977dd79e2d8025946c80bf263e34035409b5ba1443d4929727180761bd56d258c3670a0aa4de21111fc3172367582de2d164ff3a18d0696b8dd8e5c1423b2ea1e2c0cfe141e4cf04f8cdaed48976b94c40d6a581300458661bbdbfeeb4969af6319eb1798843d0872f68f0c6537bbc9c7dd1e9b0564bf442d8d25f8aa884aba1df074d374f99750d9227bb821ba0355f60de2829a5c8cd47c89d29a2e3d7d53d59db5c3ace8f484664202c210c68a3b33076fb00d59938e84fbad6d6618c0bb89cf94035fa2de4da351e0d71df416450ea7ec3af33aa5c0313c63e654bd79c73b39dc1933636956761058d76648746daca469f8fce62c17a8160cdefc6a927eef9ec4a8dd684e46f35282546ce2362ab8afedd39bf699fd7c2cde538f52ea43c08558f42ba77b2986b800c45fa76a130b30919b3e1d504573e3c1e7dd2dc5d81379df53d736511f1da4ad8791e46adb27bb5c38129e89edda0aed99dcc03fe400f7d05d48e3e9e17744e8487f8ac464c86f7332211fb9799e9d27a6832d5f17ccd1a2da255f6da047e4728dd80860c04391bca4b7833f0346866401ec20033bcf6dfa85fd1520de5a03b4f9f6f5d2f8d7b6e7d7df1cbe5c05e23e080cf335639c94c48aaeb0bfebbe79530d67d35fb101c91839954c0e50dd4b90a86428b22b0be1e906fee30f68d7ce4bf9c68eafe695f07f5e4e4d473d77104b7b1b5dcfeb84e8c83624c0068d4e1cccfe740f8e5d5699603f8481ef2a1f2d4b8fd2314c5cb1985fe34cf8ede7d2e8bddea269422490903489c7f5951114d7ccb29a19455a987d538955712a460243105b25ccb6e6f34c370a6bbb234bee150dbcea5188e45305253f1014f7c0b5d60d517d2d05707f5ca9249a921d6c5307caf41deca0509b49102d801320db65c00f6e1c05fb8c2e1cc554673bf6168dd64086b19af28eec508fd0c304837e802173ac9947c4d73929c61d9632ab929a25f2a04350954612c2de705c1c25215284fe933fc8ccfd30ab3fc9ff5e04dd68d4720d95a29d6da176ac9d332c9ce77358f3c262777ea828fe6473638bc77be2aa586a3733e275744bc42c3742c1ad8f89d25c31958902f2f498c58fc85e9b78fb7a331734cb081cfa9ccfd262df927c0ff46983f8765af4add3532de2b91f2436df028", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x1}}], 0x3, 0x0)

1.203161613s ago: executing program 1 (id=235):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
writev(r2, &(0x7f0000000680)=[{&(0x7f0000000080)='v', 0x1}, {&(0x7f0000000840)="38c26076afab870afebbe516c371ffa325ec4b8fd29e6d52d055b7fc363f3e307d9869da6677bb9e1a1bf285b7680514fdcd0e2876a824fee5991d5b26a66c47d55de05593ff6f02739faffd056421b08e17138abfc9c7cb2320f48f4cd5442e298b0b8a509e88d7487c91b1893dd25af33590d1fb02555423b37040f729c949", 0x80}, {&(0x7f0000001500)="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", 0x4fe}], 0x3)

1.191564674s ago: executing program 4 (id=236):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r4}, 0x3d)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x26e8}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', <r5=>0x0})
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r5}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca4000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r3, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x15, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x6a, 0x8, 0x8, &(0x7f0000000700)}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000900)={'ip6gre0\x00', &(0x7f0000001080)={'syztnl2\x00', 0x0, 0x29, 0x8, 0x7, 0xfffffffe, 0x1c, @mcast1, @private2, 0x8000, 0x20, 0xd8000000, 0x7fff}})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d40)={r3, 0xe0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000940)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000980)=[0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x51, &(0x7f0000000a80)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000ac0), &(0x7f0000000bc0), 0x8, 0x96, 0x8, 0x8, &(0x7f0000000c00)}}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0x48)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'bond0\x00', <r7=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)

1.124321309s ago: executing program 1 (id=237):
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x6, 0xfff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x7fffffff}, 0x0, 0x0)

1.104283181s ago: executing program 3 (id=238):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x18)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), 0x0, 0x835, 0x0)

1.087139963s ago: executing program 1 (id=239):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002600000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x91}, 0x18)
unshare(0x22020400)

1.086866112s ago: executing program 4 (id=240):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f00000010c0)='kfree\x00', r1, 0x0, 0x8}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
mount$9p_fd(0x0, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000003c0), 0x200000, &(0x7f0000000580)=ANY=[@ANYBLOB=',loose,access=client,access=any,version=9p2000,version=9p2000.L,fscontext='])
r2 = socket$inet6(0xa, 0x3, 0x3c)
setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="0002"], 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x4000000)

1.086497952s ago: executing program 3 (id=241):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d6163736563000014000280050006000000000005000f000204000008000500", @ANYRES32=r1], 0x4c}}, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r6, 0x0, 0x100}, 0x18)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r7}, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)
unshare(0x62040200)

947.803004ms ago: executing program 4 (id=242):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000640), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf250400000008000800640101020800020007000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000e00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r2, 0x0, 0x9}, 0x18)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1700000055003d0926bd70000200000007"], 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7, 0x0, 0x3}, 0x18)
r8 = fsmount(0xffffffffffffffff, 0x0, 0x83)
r9 = syz_open_procfs(0xffffffffffffffff, 0x0)
read$msr(r9, &(0x7f0000000d40)=""/43, 0x2b)
getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, 0x0, &(0x7f0000000d40))
mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000d00), 0x80000, &(0x7f0000000f40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno', @ANYRESHEX=r3, @ANYBLOB="2c667363616386158c9ef502ffb59168652c6c6f6f63616368653d6c7f6f73652c64b95a747569643d", @ANYRESHEX, @ANYBLOB=',noxattr,fsmagic=0x00000000000000'])
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x94)
getrlimit(0x0, &(0x7f0000000d80))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r10, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a3731677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x2, 0x571, &(0x7f0000000780)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010004000000000004000500a9930000100000000000000020"], 0x24, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r11)
sendmsg$NLBL_CIPSOV4_C_ADD(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="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"], 0x28}}, 0x0)
r13 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000380), r0)
sendmsg$NET_DM_CMD_START(r11, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x14, r13, 0x1, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x44)
r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r14}, 0x18)

902.537247ms ago: executing program 1 (id=243):
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
pipe2(&(0x7f0000000040), 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socket(0x2, 0x80805, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x400000000000004)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1)

511.033849ms ago: executing program 0 (id=244):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e880000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8f0, &(0x7f0000002400)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="2800ffff0000", 0x6, 0x0, 0x0, 0x2}])
socket$netlink(0x10, 0x3, 0x0)
r3 = gettid()
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f00000001c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28)
writev(r5, &(0x7f0000000400)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a62c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a92e9539f3513af3a1e6f78608890f912f087214dac06387a94d5e1b31c35be117ee540dc4560aa500269b81a0bbc", 0xf0}, {&(0x7f0000000100)="1d4ac370cf8c47025bd7a6", 0xb}], 0x2)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
readv(r5, &(0x7f00000003c0)=[{&(0x7f0000000f40)=""/250, 0xfa}, {&(0x7f0000000240)=""/29, 0x1d}], 0x2)
ioprio_set$pid(0x2, 0x0, 0x0)
r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
sendfile(r6, r6, 0x0, 0x800000009)

460.141883ms ago: executing program 4 (id=245):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xa00, 0x1c2)
r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
sendfile(r2, r1, 0x0, 0x3a)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000100)={r0, 0x8, 0xffff, 0x4406c25f})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000785ceb2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002)

225.354812ms ago: executing program 2 (id=246):
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000023c0), 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={<r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800300}, 0x20000801)
io_setup(0x5, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r3, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r3, 0x89ed, 0x0)
io_submit(0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0001}]})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x128, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@TCA_STAB={0x104, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x94, 0x2, 0x0, 0x2, 0xfffffff9, 0xd0a9, 0x2}}, {0x8, 0x2, [0x5, 0x2]}}, {{0x1c, 0x1, {0x9, 0x3e, 0xe1, 0xfff, 0x0, 0xf, 0x7386a7d5, 0xa}}, {0x18, 0x2, [0x4, 0x4, 0x3, 0x6, 0x0, 0x6, 0x6, 0x4, 0x5, 0x7]}}, {{0x1c, 0x1, {0x4, 0x3, 0x7ff, 0x9, 0x1, 0x2, 0x5, 0x3}}, {0xa, 0x2, [0x0, 0xfffb, 0x3]}}, {{0x1c, 0x1, {0x8, 0x8, 0x0, 0x5, 0x2, 0x3, 0x7, 0x7}}, {0x12, 0x2, [0x40, 0xbabd, 0x0, 0x7ff, 0x7, 0x5, 0x3a]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x40, 0x2, 0x6, 0x7fff, 0x6}}, {0x10, 0x2, [0x6, 0x7f, 0xe, 0x7, 0x1000, 0x5]}}, {{0x1c, 0x1, {0x2, 0xb5, 0x0, 0x800, 0x2, 0x3, 0x3d, 0x1}}, {0x6, 0x2, [0x4000]}}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
setresgid(0x0, 0xee01, 0x0)
syz_read_part_table(0x1060, &(0x7f0000000000)="$eJzsz89NwzAcBeDnBIeECyOwBhsgBmACJAZgAf4sU6mXLtdDD5VcJanUDdoevu/gn2W9Z8vhpsZ56R9eS4b2k7w/n8/3X8vo0y2z/iVd+U1ehiTtcalu6pqtY9qhzfXkbfqfyrzZrTcd2+ca+k7JkJTLq/UpH9tr/hUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7tUpAAD//83YEHU=")
setfsgid(0x0)
r5 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)

216.904062ms ago: executing program 4 (id=247):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x38, r5, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x6, 0x5c}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x44854}, 0x80)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x60, r2, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x30, 0x1e}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xc0}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000800}, 0x400c010)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x4c, r1, 0x7, 0x2, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x32}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '@{/.-\x00'}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x8040)

170.559946ms ago: executing program 3 (id=248):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
writev(r2, &(0x7f0000000680)=[{&(0x7f0000000080)='v', 0x1}, {&(0x7f0000000840)="38c26076afab870afebbe516c371ffa325ec4b8fd29e6d52d055b7fc363f3e307d9869da6677bb9e1a1bf285b7680514fdcd0e2876a824fee5991d5b26a66c47d55de05593ff6f02739faffd056421b08e17138abfc9c7cb2320f48f4cd5442e298b0b8a509e88d7487c91b1893dd25af33590d1fb02555423b37040f729c949", 0x80}, {&(0x7f0000001500)="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", 0x4fe}], 0x3)

137.182859ms ago: executing program 3 (id=249):
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x6, 0xfff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x7fffffff}, 0x0, 0x0)

94.525873ms ago: executing program 3 (id=250):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002820207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b000000000000000000009500000000000000dd66d08329fb721ce7c1b33a10c1440eeb93b82e1b2dc05054cac8ff85db9447b626d01b67c54a40a0fd0d"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xcc0, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860186dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10)
r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0x20)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0)
perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x2, 0x0, 0x7, 0x2, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff40, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1)
unshare(0x2c020400)
r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20, 0x800, 0xfffffffc, 0x8, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20)
r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x110)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r8}, 0x10)
fcntl$setlease(r6, 0x400, 0x0)

93.829972ms ago: executing program 1 (id=251):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000005}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'erspan0\x00', <r6=>0x0})
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
openat$vcs(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000380), &(0x7f00000003c0)=r7}, 0x20)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newlink={0x48, 0x10, 0x401, 0x0, 0x4, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r6, 0x10820, 0x343}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000014}, 0x0)

0s ago: executing program 1 (id=252):
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
pipe2(&(0x7f0000000040), 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socket(0x2, 0x80805, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x400000000000004)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.10.1' (ED25519) to the list of known hosts.
[   33.441883][   T29] audit: type=1400 audit(1756383831.295:62): avc:  denied  { mounton } for  pid=3292 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   33.443068][ T3292] cgroup: Unknown subsys name 'net'
[   33.464728][   T29] audit: type=1400 audit(1756383831.295:63): avc:  denied  { mount } for  pid=3292 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   33.492351][   T29] audit: type=1400 audit(1756383831.325:64): avc:  denied  { unmount } for  pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   33.669660][ T3292] cgroup: Unknown subsys name 'cpuset'
[   33.676106][ T3292] cgroup: Unknown subsys name 'rlimit'
[   33.797229][   T29] audit: type=1400 audit(1756383831.645:65): avc:  denied  { setattr } for  pid=3292 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   33.820692][   T29] audit: type=1400 audit(1756383831.645:66): avc:  denied  { create } for  pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   33.841512][   T29] audit: type=1400 audit(1756383831.645:67): avc:  denied  { write } for  pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   33.861897][   T29] audit: type=1400 audit(1756383831.645:68): avc:  denied  { read } for  pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   33.882456][   T29] audit: type=1400 audit(1756383831.675:69): avc:  denied  { mounton } for  pid=3292 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   33.907652][   T29] audit: type=1400 audit(1756383831.675:70): avc:  denied  { mount } for  pid=3292 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   33.936624][ T3295] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   33.945567][   T29] audit: type=1400 audit(1756383831.795:71): avc:  denied  { relabelto } for  pid=3295 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   33.999446][ T3292] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   35.201135][ T3302] chnl_net:caif_netlink_parms(): no params data found
[   35.274648][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.281828][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.289187][ T3302] bridge_slave_0: entered allmulticast mode
[   35.295690][ T3302] bridge_slave_0: entered promiscuous mode
[   35.304253][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.311491][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.318784][ T3302] bridge_slave_1: entered allmulticast mode
[   35.325268][ T3302] bridge_slave_1: entered promiscuous mode
[   35.352979][ T3306] chnl_net:caif_netlink_parms(): no params data found
[   35.367998][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   35.387706][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   35.415599][ T3302] team0: Port device team_slave_0 added
[   35.434187][ T3302] team0: Port device team_slave_1 added
[   35.440175][ T3315] chnl_net:caif_netlink_parms(): no params data found
[   35.485312][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0
[   35.492418][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   35.518719][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   35.546392][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1
[   35.553520][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   35.579943][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   35.617923][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.625252][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.632670][ T3306] bridge_slave_0: entered allmulticast mode
[   35.639596][ T3306] bridge_slave_0: entered promiscuous mode
[   35.647039][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.654371][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.661819][ T3306] bridge_slave_1: entered allmulticast mode
[   35.668707][ T3306] bridge_slave_1: entered promiscuous mode
[   35.705124][ T3310] chnl_net:caif_netlink_parms(): no params data found
[   35.718937][ T3302] hsr_slave_0: entered promiscuous mode
[   35.725066][ T3302] hsr_slave_1: entered promiscuous mode
[   35.736334][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.743686][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.751332][ T3315] bridge_slave_0: entered allmulticast mode
[   35.757791][ T3315] bridge_slave_0: entered promiscuous mode
[   35.764451][ T3312] chnl_net:caif_netlink_parms(): no params data found
[   35.788022][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   35.798554][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   35.807752][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.814966][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.822136][ T3315] bridge_slave_1: entered allmulticast mode
[   35.828489][ T3315] bridge_slave_1: entered promiscuous mode
[   35.869724][ T3306] team0: Port device team_slave_0 added
[   35.889568][ T3306] team0: Port device team_slave_1 added
[   35.904146][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   35.929405][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   35.950552][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0
[   35.957546][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   35.983733][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   35.996807][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.003945][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.011274][ T3312] bridge_slave_0: entered allmulticast mode
[   36.017721][ T3312] bridge_slave_0: entered promiscuous mode
[   36.040351][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.047437][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.054674][ T3310] bridge_slave_0: entered allmulticast mode
[   36.061216][ T3310] bridge_slave_0: entered promiscuous mode
[   36.068238][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.075247][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.101301][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.117650][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.125097][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.133608][ T3312] bridge_slave_1: entered allmulticast mode
[   36.140647][ T3312] bridge_slave_1: entered promiscuous mode
[   36.147931][ T3315] team0: Port device team_slave_0 added
[   36.153850][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.160977][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.168519][ T3310] bridge_slave_1: entered allmulticast mode
[   36.175355][ T3310] bridge_slave_1: entered promiscuous mode
[   36.196472][ T3315] team0: Port device team_slave_1 added
[   36.217032][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.247638][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.264745][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.277306][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.284493][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.310899][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.332521][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.344282][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.351318][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.377561][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.390738][ T3306] hsr_slave_0: entered promiscuous mode
[   36.396784][ T3306] hsr_slave_1: entered promiscuous mode
[   36.402890][ T3306] debugfs: 'hsr0' already exists in 'hsr'
[   36.408640][ T3306] Cannot create hsr debugfs directory
[   36.422807][ T3310] team0: Port device team_slave_0 added
[   36.445318][ T3310] team0: Port device team_slave_1 added
[   36.473824][ T3315] hsr_slave_0: entered promiscuous mode
[   36.479849][ T3315] hsr_slave_1: entered promiscuous mode
[   36.485708][ T3315] debugfs: 'hsr0' already exists in 'hsr'
[   36.491670][ T3315] Cannot create hsr debugfs directory
[   36.508494][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.515584][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.541662][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.553245][ T3312] team0: Port device team_slave_0 added
[   36.560116][ T3312] team0: Port device team_slave_1 added
[   36.573828][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.581092][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.607067][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.646167][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.653178][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.679154][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.698707][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.705776][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.731933][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.770159][ T3310] hsr_slave_0: entered promiscuous mode
[   36.776298][ T3310] hsr_slave_1: entered promiscuous mode
[   36.782304][ T3310] debugfs: 'hsr0' already exists in 'hsr'
[   36.788229][ T3310] Cannot create hsr debugfs directory
[   36.794317][ T3302] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   36.823316][ T3312] hsr_slave_0: entered promiscuous mode
[   36.829349][ T3312] hsr_slave_1: entered promiscuous mode
[   36.835339][ T3312] debugfs: 'hsr0' already exists in 'hsr'
[   36.841283][ T3312] Cannot create hsr debugfs directory
[   36.846876][ T3302] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   36.866740][ T3302] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   36.897509][ T3302] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   36.980185][ T3315] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   36.988772][ T3315] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   37.012224][ T3315] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   37.021205][ T3315] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   37.054111][ T3306] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   37.066107][ T3306] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   37.078405][ T3306] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   37.094268][ T3306] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   37.123713][ T3310] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   37.140724][ T3310] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   37.152090][ T3310] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   37.162380][ T3310] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   37.206056][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.215546][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.228396][ T3312] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   37.237138][ T3312] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   37.248939][ T3312] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   37.258343][ T3312] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   37.272576][ T3315] 8021q: adding VLAN 0 to HW filter on device team0
[   37.282700][ T3302] 8021q: adding VLAN 0 to HW filter on device team0
[   37.300590][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.308261][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.323763][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.330982][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.349786][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.357576][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.368675][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.386313][ T3315] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   37.396777][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   37.412279][  T139] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.419481][  T139] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.439252][ T3306] 8021q: adding VLAN 0 to HW filter on device team0
[   37.460368][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.467830][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.486738][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.511252][ T3310] 8021q: adding VLAN 0 to HW filter on device team0
[   37.520987][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.528353][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.553974][ T1621] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.561192][ T1621] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.592258][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.599511][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.642118][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.661683][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.677409][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.698637][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.713947][ T3312] 8021q: adding VLAN 0 to HW filter on device team0
[   37.738873][  T139] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.746151][  T139] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.780524][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.787759][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.887367][ T3306] veth0_vlan: entered promiscuous mode
[   37.904990][ T3315] veth0_vlan: entered promiscuous mode
[   37.921396][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.934786][ T3306] veth1_vlan: entered promiscuous mode
[   37.947403][ T3315] veth1_vlan: entered promiscuous mode
[   37.956668][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.990578][ T3302] veth0_vlan: entered promiscuous mode
[   38.002075][ T3315] veth0_macvtap: entered promiscuous mode
[   38.015876][ T3306] veth0_macvtap: entered promiscuous mode
[   38.024468][ T3302] veth1_vlan: entered promiscuous mode
[   38.031912][ T3315] veth1_macvtap: entered promiscuous mode
[   38.044690][ T3306] veth1_macvtap: entered promiscuous mode
[   38.074654][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.085510][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.096519][ T3302] veth0_macvtap: entered promiscuous mode
[   38.105003][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.112712][ T3302] veth1_macvtap: entered promiscuous mode
[   38.128731][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.149596][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.163387][ T3310] veth0_vlan: entered promiscuous mode
[   38.178313][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.187915][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.205843][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.215856][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.227985][ T3310] veth1_vlan: entered promiscuous mode
[   38.247266][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.262371][ T3306] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   38.280902][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.290451][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.314912][ T3312] veth0_vlan: entered promiscuous mode
[   38.340832][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.366668][ T3310] veth0_macvtap: entered promiscuous mode
[   38.374815][ T3312] veth1_vlan: entered promiscuous mode
[   38.382535][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.393441][ T3310] veth1_macvtap: entered promiscuous mode
[   38.403690][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.416588][ T3474] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[   38.439181][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.456650][ T3474] SELinux: failed to load policy
[   38.464373][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.474422][   T29] kauditd_printk_skb: 63 callbacks suppressed
[   38.474439][   T29] audit: type=1400 audit(1756383836.325:135): avc:  denied  { ioctl } for  pid=3473 comm="syz.1.2" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[   38.514603][ T3479] loop4: detected capacity change from 0 to 2048
[   38.521934][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.533946][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.544616][ T3312] veth0_macvtap: entered promiscuous mode
[   38.552964][ T3312] veth1_macvtap: entered promiscuous mode
[   38.570904][   T29] audit: type=1400 audit(1756383836.325:136): avc:  denied  { allowed } for  pid=3473 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   38.579706][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.589949][   T29] audit: type=1400 audit(1756383836.335:137): avc:  denied  { create } for  pid=3473 comm="syz.1.2" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   38.619792][   T29] audit: type=1400 audit(1756383836.335:138): avc:  denied  { map } for  pid=3473 comm="syz.1.2" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3863 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   38.634920][ T3479] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.644025][   T29] audit: type=1400 audit(1756383836.335:139): avc:  denied  { read write } for  pid=3473 comm="syz.1.2" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3863 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   38.680467][   T29] audit: type=1400 audit(1756383836.345:140): avc:  denied  { create } for  pid=3473 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   38.699917][   T29] audit: type=1400 audit(1756383836.345:141): avc:  denied  { write } for  pid=3473 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   38.719480][   T29] audit: type=1400 audit(1756383836.545:142): avc:  denied  { create } for  pid=3486 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   38.728156][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.740183][   T29] audit: type=1400 audit(1756383836.555:143): avc:  denied  { write } for  pid=3486 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   38.755712][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.768567][ T3479] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   38.788087][   T29] audit: type=1400 audit(1756383836.615:144): avc:  denied  { mount } for  pid=3478 comm="syz.4.5" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   38.825694][  T172] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.836321][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.858003][  T172] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.876584][  T172] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.904154][  T172] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.917474][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.927054][  T172] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.958494][  T172] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.967429][  T172] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.009887][ T3493] syz.4.10 uses obsolete (PF_INET,SOCK_PACKET)
[   39.070554][ T3495] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[   39.082002][ T3495] SELinux: failed to load policy
[   39.083600][ T3503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'.
[   39.190569][ T3507] loop4: detected capacity change from 0 to 512
[   39.240632][ T3509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14'.
[   40.387148][ T3507] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.400246][ T3500] loop3: detected capacity change from 0 to 8192
[   40.415687][ T3507] ext4 filesystem being mounted at /1/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   40.452350][ T3296]  loop3: p1 p2 p3 p4
[   40.458091][ T3296] loop3: p1 start 4294508288 is beyond EOD, truncated
[   40.465029][ T3296] loop3: p2 start 2936012800 is beyond EOD, truncated
[   40.471907][ T3296] loop3: p3 start 1912602624 is beyond EOD, truncated
[   40.478708][ T3296] loop3: p4 size 656640 extends beyond EOD, truncated
[   40.588729][ T3500]  loop3: p1 p2 p3 p4
[   40.611896][ T3500] loop3: p1 start 4294508288 is beyond EOD, truncated
[   40.618757][ T3500] loop3: p2 start 2936012800 is beyond EOD, truncated
[   40.625663][ T3500] loop3: p3 start 1912602624 is beyond EOD, truncated
[   40.632528][ T3500] loop3: p4 size 656640 extends beyond EOD, truncated
[   40.648302][ T3526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18'.
[   40.663904][ T3493] syz.4.10 (3493) used greatest stack depth: 10552 bytes left
[   40.755828][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.781735][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[   40.834876][ T3538] FAULT_INJECTION: forcing a failure.
[   40.834876][ T3538] name failslab, interval 1, probability 0, space 0, times 1
[   40.847704][ T3538] CPU: 0 UID: 0 PID: 3538 Comm: syz.3.20 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   40.847744][ T3538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   40.847759][ T3538] Call Trace:
[   40.847765][ T3538]  <TASK>
[   40.847774][ T3538]  __dump_stack+0x1d/0x30
[   40.847794][ T3538]  dump_stack_lvl+0xe8/0x140
[   40.847815][ T3538]  dump_stack+0x15/0x1b
[   40.847848][ T3538]  should_fail_ex+0x265/0x280
[   40.847872][ T3538]  should_failslab+0x8c/0xb0
[   40.847901][ T3538]  kmem_cache_alloc_node_noprof+0x57/0x320
[   40.847935][ T3538]  ? __alloc_skb+0x101/0x320
[   40.848025][ T3538]  __alloc_skb+0x101/0x320
[   40.848045][ T3538]  netlink_alloc_large_skb+0xba/0xf0
[   40.848105][ T3538]  netlink_sendmsg+0x3cf/0x6b0
[   40.848131][ T3538]  ? __pfx_netlink_sendmsg+0x10/0x10
[   40.848174][ T3538]  __sock_sendmsg+0x145/0x180
[   40.848276][ T3538]  ____sys_sendmsg+0x31e/0x4e0
[   40.848329][ T3538]  ___sys_sendmsg+0x17b/0x1d0
[   40.848421][ T3538]  __x64_sys_sendmsg+0xd4/0x160
[   40.848519][ T3538]  x64_sys_call+0x191e/0x2ff0
[   40.848547][ T3538]  do_syscall_64+0xd2/0x200
[   40.848577][ T3538]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   40.848666][ T3538]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   40.848699][ T3538]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   40.848734][ T3538] RIP: 0033:0x7f286edaebe9
[   40.848753][ T3538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   40.848837][ T3538] RSP: 002b:00007f286d80f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   40.848861][ T3538] RAX: ffffffffffffffda RBX: 00007f286efd5fa0 RCX: 00007f286edaebe9
[   40.848875][ T3538] RDX: 0000000010040080 RSI: 0000200000000000 RDI: 0000000000000003
[   40.848889][ T3538] RBP: 00007f286d80f090 R08: 0000000000000000 R09: 0000000000000000
[   40.848903][ T3538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   40.848917][ T3538] R13: 00007f286efd6038 R14: 00007f286efd5fa0 R15: 00007ffe557c1388
[   40.848938][ T3538]  </TASK>
[   41.055812][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[   41.079576][ T3541] tun0: tun_chr_ioctl cmd 1074025677
[   41.085004][ T3541] tun0: linktype set to 774
[   41.090987][ T3539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19'.
[   41.094793][ T3545] sctp: [Deprecated]: syz.1.24 (pid 3545) Use of struct sctp_assoc_value in delayed_ack socket option.
[   41.094793][ T3545] Use struct sctp_sack_info instead
[   41.099957][ T3539] netlink: 40 bytes leftover after parsing attributes in process `syz.4.19'.
[   41.168777][ T3548] program syz.2.23 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   41.223495][ T3554] loop1: detected capacity change from 0 to 128
[   41.318495][ T3551] loop0: detected capacity change from 0 to 8192
[   41.351130][ T3296]  loop0: p1 p2 p3 p4[DM]
[   41.359394][ T3296] loop0: p1 size 835331 extends beyond EOD, truncated
[   41.364197][ T3554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.27'.
[   41.371127][ T3559] loop3: detected capacity change from 0 to 512
[   41.389454][ T3296] loop0: p2 size 16777223 extends beyond EOD, truncated
[   41.402289][ T3559] =======================================================
[   41.402289][ T3559] WARNING: The mand mount option has been deprecated and
[   41.402289][ T3559]          and is ignored by this kernel. Remove the mand
[   41.402289][ T3559]          option from the mount to silence this warning.
[   41.402289][ T3559] =======================================================
[   41.403960][ T3557] loop4: detected capacity change from 0 to 8192
[   41.452060][ T3296] loop0: p3 start 1052673 is beyond EOD, truncated
[   41.458645][ T3296] loop0: p4 size 262144 extends beyond EOD, truncated
[   41.489732][ T3551]  loop0: p1 p2 p3 p4[DM]
[   41.494578][ T3551] loop0: p1 size 835331 extends beyond EOD, truncated
[   41.503128][ T3557]  loop4: p1 p2 p3 p4
[   41.507303][ T3557] loop4: p1 start 4294508288 is beyond EOD, truncated
[   41.514348][ T3557] loop4: p2 start 2936012800 is beyond EOD, truncated
[   41.520947][ T3559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.521219][ T3557] loop4: p3 start 1912602624 is beyond EOD, truncated
[   41.540485][ T3557] loop4: p4 size 656640 extends beyond EOD, truncated
[   41.542395][ T3551] loop0: p2 size 16777223 extends beyond EOD, truncated
[   41.554674][ T3559] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   41.569229][ T3559] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.29: corrupted inode contents
[   41.583708][ T2993]  loop4: p1 p2 p3 p4
[   41.587874][ T2993] loop4: p1 start 4294508288 is beyond EOD, truncated
[   41.594879][ T2993] loop4: p2 start 2936012800 is beyond EOD, truncated
[   41.601849][ T2993] loop4: p3 start 1912602624 is beyond EOD, truncated
[   41.608730][ T2993] loop4: p4 size 656640 extends beyond EOD, truncated
[   41.610877][ T3551] loop0: p3 start 1052673 is beyond EOD, truncated
[   41.618528][ T3559] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.29: mark_inode_dirty error
[   41.622451][ T3551] loop0: p4 size 262144 extends beyond EOD, truncated
[   41.645406][ T3569] netlink: 'syz.2.32': attribute type 10 has an invalid length.
[   41.653171][ T3569] netlink: 40 bytes leftover after parsing attributes in process `syz.2.32'.
[   41.670762][ T3559] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.29: corrupted inode contents
[   41.688574][ T3569] team0: Port device geneve1 added
[   41.709455][ T3551] netlink: 'syz.0.26': attribute type 27 has an invalid length.
[   41.748350][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[   41.748378][ T3546] udevd[3546]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[   41.759863][ T3563] udevd[3563]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[   41.785219][ T3573] FAULT_INJECTION: forcing a failure.
[   41.785219][ T3573] name failslab, interval 1, probability 0, space 0, times 0
[   41.798690][ T3573] CPU: 0 UID: 0 PID: 3573 Comm: syz.2.35 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   41.798720][ T3573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   41.798775][ T3573] Call Trace:
[   41.798782][ T3573]  <TASK>
[   41.798789][ T3573]  __dump_stack+0x1d/0x30
[   41.798949][ T3573]  dump_stack_lvl+0xe8/0x140
[   41.798969][ T3573]  dump_stack+0x15/0x1b
[   41.798988][ T3573]  should_fail_ex+0x265/0x280
[   41.799010][ T3573]  should_failslab+0x8c/0xb0
[   41.799033][ T3573]  kmem_cache_alloc_node_noprof+0x57/0x320
[   41.799126][ T3573]  ? __alloc_skb+0x101/0x320
[   41.799147][ T3573]  __alloc_skb+0x101/0x320
[   41.799168][ T3573]  netlink_alloc_large_skb+0xba/0xf0
[   41.799206][ T3573]  netlink_sendmsg+0x3cf/0x6b0
[   41.799308][ T3573]  ? __pfx_netlink_sendmsg+0x10/0x10
[   41.799333][ T3573]  __sock_sendmsg+0x145/0x180
[   41.799434][ T3573]  ____sys_sendmsg+0x31e/0x4e0
[   41.799525][ T3573]  ___sys_sendmsg+0x17b/0x1d0
[   41.799558][ T3573]  __x64_sys_sendmsg+0xd4/0x160
[   41.799582][ T3573]  x64_sys_call+0x191e/0x2ff0
[   41.799603][ T3573]  do_syscall_64+0xd2/0x200
[   41.799653][ T3573]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   41.799683][ T3573]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   41.799765][ T3573]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   41.799849][ T3573] RIP: 0033:0x7ff8e1d1ebe9
[   41.799867][ T3573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   41.799941][ T3573] RSP: 002b:00007ff8e0787038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   41.799963][ T3573] RAX: ffffffffffffffda RBX: 00007ff8e1f45fa0 RCX: 00007ff8e1d1ebe9
[   41.799975][ T3573] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000003
[   41.799986][ T3573] RBP: 00007ff8e0787090 R08: 0000000000000000 R09: 0000000000000000
[   41.799997][ T3573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   41.800009][ T3573] R13: 00007ff8e1f46038 R14: 00007ff8e1f45fa0 R15: 00007ffe16d4f9b8
[   41.800031][ T3573]  </TASK>
[   42.017574][ T3563] udevd[3563]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[   42.033772][ T3578] netlink: 'syz.4.34': attribute type 10 has an invalid length.
[   42.042489][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[   42.043130][ T3546] udevd[3546]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[   42.063963][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[   42.074224][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.102940][ T3551] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.110333][ T3551] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.126515][ T3563] udevd[3563]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[   42.146044][ T3575] loop1: detected capacity change from 0 to 1024
[   42.157244][ T3575] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.33: Failed to acquire dquot type 0
[   42.187277][ T3575] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[   42.235040][ T3575] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.33: corrupted inode contents
[   42.237903][ T3551] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   42.249081][ T3575] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #13: comm syz.1.33: mark_inode_dirty error
[   42.262167][ T3551] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   42.269014][ T3575] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.33: corrupted inode contents
[   42.288275][ T3575] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.33: mark_inode_dirty error
[   42.303855][ T3575] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.33: corrupted inode contents
[   42.315950][ T3575] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[   42.326361][ T3575] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.33: corrupted inode contents
[   42.342156][ T3575] EXT4-fs error (device loop1): ext4_truncate:4666: inode #13: comm syz.1.33: mark_inode_dirty error
[   42.353579][ T3575] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[   42.354452][ T3588] loop2: detected capacity change from 0 to 8192
[   42.363216][ T3575] EXT4-fs (loop1): 1 truncate cleaned up
[   42.375177][ T3575] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.390743][ T3575] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.391507][ T3578] team0: Device hsr_slave_0 failed to register rx_handler
[   42.410182][ T3296]  loop2: p1 p2 p3 p4
[   42.414470][ T3296] loop2: p1 start 4294508288 is beyond EOD, truncated
[   42.421485][ T3296] loop2: p2 start 2936012800 is beyond EOD, truncated
[   42.428468][ T3296] loop2: p3 start 1912602624 is beyond EOD, truncated
[   42.435357][ T3296] loop2: p4 size 656640 extends beyond EOD, truncated
[   42.443508][   T31] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   42.476503][   T31] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   42.492065][ T3588]  loop2: p1 p2 p3 p4
[   42.496200][ T3588] loop2: p1 start 4294508288 is beyond EOD, truncated
[   42.503161][ T3588] loop2: p2 start 2936012800 is beyond EOD, truncated
[   42.510021][ T3588] loop2: p3 start 1912602624 is beyond EOD, truncated
[   42.516812][ T3588] loop2: p4 size 656640 extends beyond EOD, truncated
[   42.525953][ T3578] syz.4.34 (3578) used greatest stack depth: 10528 bytes left
[   42.534062][   T31] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   42.538148][ T3592] loop0: detected capacity change from 0 to 512
[   42.557496][   T31] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   42.611623][ T3592] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   42.653712][ T3592] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   42.691676][ T3597] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.693880][ T3592] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.39: Failed to acquire dquot type 0
[   42.718183][ T3604] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.051736][ T3597] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.155550][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   43.189847][ T3597] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.264079][ T3604] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.283141][ T3597] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.329847][ T3618] loop0: detected capacity change from 0 to 8192
[   43.344279][ T3604] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.404161][ T3296]  loop0: p1 p2 p3 p4
[   43.410214][ T3604] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.421010][ T3296] loop0: p1 start 4294508288 is beyond EOD, truncated
[   43.427878][ T3296] loop0: p2 start 2936012800 is beyond EOD, truncated
[   43.434842][ T3296] loop0: p3 start 1912602624 is beyond EOD, truncated
[   43.441723][ T3296] loop0: p4 size 656640 extends beyond EOD, truncated
[   43.455966][ T3622] netlink: 'syz.3.49': attribute type 10 has an invalid length.
[   43.464981][ T3618]  loop0: p1 p2 p3 p4
[   43.466903][  T139] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   43.472265][ T3618] loop0: p1 start 4294508288 is beyond EOD, truncated
[   43.482149][ T3622] team0: Port device dummy0 added
[   43.484309][ T3618] loop0: p2 start 2936012800 is beyond EOD, truncated
[   43.495562][ T3622] netlink: 'syz.3.49': attribute type 10 has an invalid length.
[   43.496073][ T3618] loop0: p3 start 1912602624 is beyond EOD, truncated
[   43.505084][ T3622] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   43.510621][ T3618] loop0: p4 size 656640 extends beyond EOD, truncated
[   43.526577][ T3622] team0: Failed to send options change via netlink (err -105)
[   43.538911][   T29] kauditd_printk_skb: 383 callbacks suppressed
[   43.538928][   T29] audit: type=1326 audit(1756383841.385:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3617 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f6f43b5d3fa code=0x7ffc0000
[   43.568531][   T29] audit: type=1326 audit(1756383841.385:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3617 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f6f43b5d3fa code=0x7ffc0000
[   43.580370][ T3622] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   43.591907][   T29] audit: type=1326 audit(1756383841.385:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3617 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f6f43b5d3fa code=0x7ffc0000
[   43.591944][   T29] audit: type=1326 audit(1756383841.385:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3617 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f6f43b5d3fa code=0x7ffc0000
[   43.592040][   T29] audit: type=1326 audit(1756383841.385:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3617 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f6f43b5e167 code=0x7ffc0000
[   43.608174][ T3622] team0: Port device dummy0 removed
[   43.624488][   T29] audit: type=1326 audit(1756383841.385:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3617 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f6f43b5d3fa code=0x7ffc0000
[   43.624525][   T29] audit: type=1326 audit(1756383841.385:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3617 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f6f43b5d3fa code=0x7ffc0000
[   43.624555][   T29] audit: type=1326 audit(1756383841.385:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3617 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f6f43b5d3fa code=0x7ffc0000
[   43.653311][ T3622] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   43.671383][   T29] audit: type=1326 audit(1756383841.385:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3617 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6f43b5d84a code=0x7ffc0000
[   43.671421][   T29] audit: type=1326 audit(1756383841.385:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3617 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f43b5ebe9 code=0x7ffc0000
[   43.802675][   T51] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   43.814177][   T51] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   43.831156][  T172] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   43.848975][ T1621] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   43.859937][ T3624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.50'.
[   43.901265][ T1621] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   43.923462][ T1621] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   43.932039][ T1621] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   43.968722][ T3622] syz.3.49 (3622) used greatest stack depth: 9968 bytes left
[   44.017972][ T3630] netlink: 'syz.0.51': attribute type 178 has an invalid length.
[   44.032196][ T3632] netlink: 'syz.1.52': attribute type 10 has an invalid length.
[   44.042750][ T3632] team0: Device hsr_slave_0 failed to register rx_handler
[   44.323087][ T3630] loop0: detected capacity change from 0 to 512
[   44.363335][ T3645] netlink: 12 bytes leftover after parsing attributes in process `syz.3.54'.
[   44.380382][ T3641] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[   44.408042][ T3641] SELinux: failed to load policy
[   44.480177][ T3648] loop1: detected capacity change from 0 to 512
[   44.507383][ T3648] EXT4-fs: Ignoring removed orlov option
[   44.558521][ T3648] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   44.558548][ T3630] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   44.574294][ T3648] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[   44.590386][ T3648] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.58: corrupted in-inode xattr: e_value size too large
[   44.610445][ T3648] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.58: couldn't read orphan inode 15 (err -117)
[   44.632555][ T3630] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.645710][ T3630] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   44.646004][ T3648] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.665125][ T3630] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.51: corrupted xattr block 19: overlapping e_value 
[   44.682658][ T3630] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[   44.691802][ T3630] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.51: corrupted xattr block 19: overlapping e_value 
[   44.735543][ T3630] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[   44.746322][ T3630] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.51: corrupted xattr block 19: overlapping e_value 
[   44.801019][ T3660] loop2: detected capacity change from 0 to 2048
[   44.831348][ T3648] netlink: 48 bytes leftover after parsing attributes in process `syz.1.58'.
[   44.832366][ T3660] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.847513][    C1] hrtimer: interrupt took 37094 ns
[   44.866918][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.880171][ T3660] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   44.903140][ T3661] loop4: detected capacity change from 0 to 512
[   44.936156][ T3661] EXT4-fs: Ignoring removed nobh option
[   45.005455][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.009322][ T3661] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   45.067016][ T3665] loop3: detected capacity change from 0 to 4096
[   45.074933][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.112211][ T3665] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.169413][ T3665] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.62: corrupted inode contents
[   45.197702][ T3665] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #15: comm syz.3.62: mark_inode_dirty error
[   45.204422][ T3661] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.60: corrupted inode contents
[   45.222387][ T3661] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.60: mark_inode_dirty error
[   45.242294][ T3661] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.60: corrupted inode contents
[   45.252801][ T3687] loop1: detected capacity change from 0 to 2048
[   45.269186][ T3665] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.62: corrupted inode contents
[   45.284161][ T3661] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.60: mark_inode_dirty error
[   45.306244][ T3690] loop0: detected capacity change from 0 to 2048
[   45.318119][ T3665] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #15: comm syz.3.62: mark_inode_dirty error
[   45.321182][ T3661] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.60: Failed to acquire dquot type 0
[   45.333199][ T3665] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.62: corrupted inode contents
[   45.357881][ T3690] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.379592][ T3687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.395097][ T3690] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   45.414277][ T3661] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.60: corrupted inode contents
[   45.414363][ T3687] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   45.423931][ T3665] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #15: comm syz.3.62: mark_inode_dirty error
[   45.459053][ T3661] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.60: mark_inode_dirty error
[   45.471884][ T3665] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.62: corrupted inode contents
[   45.484068][ T3665] EXT4-fs error (device loop3): ext4_truncate:4666: inode #15: comm syz.3.62: mark_inode_dirty error
[   45.501474][ T3661] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.60: corrupted inode contents
[   45.503144][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.523271][ T3665] EXT4-fs error (device loop3) in ext4_setattr:6071: Corrupt filesystem
[   45.536591][ T3661] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.60: mark_inode_dirty error
[   45.554247][ T3661] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.60: corrupted inode contents
[   45.577028][ T3661] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[   45.596912][ T3661] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.60: corrupted inode contents
[   45.618042][ T3661] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.60: mark_inode_dirty error
[   45.639537][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.662308][ T3661] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[   45.674336][ T3699] loop1: detected capacity change from 0 to 2048
[   45.693343][ T3661] EXT4-fs (loop4): 1 truncate cleaned up
[   45.711459][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.723270][ T3703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.71'.
[   45.724118][ T3699] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.769104][ T3699] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   45.784632][ T3661] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.813438][ T3661] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   45.893098][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.109726][ T3712] loop0: detected capacity change from 0 to 8192
[   46.173230][ T3661] syz.4.60 (3661) used greatest stack depth: 9608 bytes left
[   46.285704][ T3719] netlink: 'syz.1.77': attribute type 10 has an invalid length.
[   46.340191][ T3721] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.375598][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.389152][ T3719] team0: Device hsr_slave_0 failed to register rx_handler
[   46.415087][ T3712]  loop0: p1 p2 p3 p4
[   46.419943][ T3712] loop0: p1 start 4294508288 is beyond EOD, truncated
[   46.426760][ T3712] loop0: p2 start 2936012800 is beyond EOD, truncated
[   46.433633][ T3712] loop0: p3 start 1912602624 is beyond EOD, truncated
[   46.440541][ T3712] loop0: p4 size 656640 extends beyond EOD, truncated
[   46.458268][ T3726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.79'.
[   46.467362][ T3726] netlink: 40 bytes leftover after parsing attributes in process `syz.4.79'.
[   46.484325][ T3721] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.499713][ T3725] SELinux: security_context_str_to_sid () failed with errno=-22
[   46.513768][ T3725] netlink: 'syz.1.80': attribute type 21 has an invalid length.
[   46.536756][ T3721] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.738640][ T3721] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.764336][ T3736] veth0_to_bridge: entered promiscuous mode
[   46.780205][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[   46.790848][ T3732] loop1: detected capacity change from 0 to 1024
[   46.812064][ T3732] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.829284][ T3732] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.833958][ T3737] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[   46.876254][   T51] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.892096][   T51] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.892726][ T3737] SELinux: failed to load policy
[   46.929847][ T3740] loop3: detected capacity change from 0 to 8192
[   46.950622][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.961444][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.989337][ T3296]  loop3: p1 p2 p3 p4[DM]
[   46.991598][ T3746] hub 6-0:1.0: USB hub found
[   46.995362][ T3296] loop3: p1 size 835331 extends beyond EOD, truncated
[   46.998671][ T3746] hub 6-0:1.0: 8 ports detected
[   47.015773][ T3296] loop3: p2 size 16777223 extends beyond EOD, truncated
[   47.024157][ T3746] random: crng reseeded on system resumption
[   47.110760][ T3296] loop3: p3 start 1052673 is beyond EOD, truncated
[   47.117746][ T3296] loop3: p4 size 262144 extends beyond EOD, truncated
[   47.148514][ T3740]  loop3: p1 p2 p3 p4[DM]
[   47.171912][ T3740] loop3: p1 size 835331 extends beyond EOD, truncated
[   47.191367][ T3740] loop3: p2 size 16777223 extends beyond EOD, truncated
[   47.200656][ T3740] loop3: p3 start 1052673 is beyond EOD, truncated
[   47.207237][ T3740] loop3: p4 size 262144 extends beyond EOD, truncated
[   47.236721][ T3752] loop1: detected capacity change from 0 to 8192
[   47.245242][ T3756] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[   47.257095][ T3756] SELinux: failed to load policy
[   47.276274][ T2993]  loop3: p1 p2 p3 p4[DM]
[   47.284268][ T2993] loop3: p1 size 835331 extends beyond EOD, truncated
[   47.293429][ T3752]  loop1: p1 p2 p3 p4
[   47.302584][ T3752] loop1: p1 start 4294508288 is beyond EOD, truncated
[   47.309543][ T3752] loop1: p2 start 2936012800 is beyond EOD, truncated
[   47.316359][ T3752] loop1: p3 start 1912602624 is beyond EOD, truncated
[   47.323330][ T3752] loop1: p4 size 656640 extends beyond EOD, truncated
[   47.333347][ T2993] loop3: p2 size 16777223 extends beyond EOD, truncated
[   47.351512][ T2993] loop3: p3 start 1052673 is beyond EOD, truncated
[   47.358103][ T2993] loop3: p4 size 262144 extends beyond EOD, truncated
[   47.439422][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[   47.462373][ T3579] udevd[3579]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[   47.476356][ T3563] udevd[3563]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[   47.537431][ T3563] udevd[3563]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[   47.550834][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[   47.563179][ T3579] udevd[3579]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[   47.575289][ T3563] udevd[3563]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   47.605092][ T3579] udevd[3579]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[   47.651142][ T3546] udevd[3546]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[   47.677420][ T3774] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   47.731962][ T3774] loop2: detected capacity change from 0 to 512
[   47.752704][ T3779] netlink: 12 bytes leftover after parsing attributes in process `syz.3.91'.
[   47.781357][ T3779] 8021q: adding VLAN 0 to HW filter on device bond1
[   47.808051][ T3774] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.94: corrupted in-inode xattr: e_value size too large
[   47.834753][ T3733] veth0_to_bridge: left promiscuous mode
[   47.843176][ T3778] loop4: detected capacity change from 0 to 2048
[   47.847398][ T3772] infiniband syz!: set active
[   47.854468][ T3772] infiniband syz!: added team_slave_0
[   47.866101][ T3774] EXT4-fs (loop2): Remounting filesystem read-only
[   47.877900][ T3772] RDS/IB: syz!: added
[   47.882050][ T3772] smc: adding ib device syz! with port count 1
[   47.888240][ T3772] smc:    ib device syz! port 1 has pnetid 
[   47.939692][ T3774] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.942392][ T3778] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.965574][ T3778] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   48.007339][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.103313][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.168364][ T3799] loop4: detected capacity change from 0 to 512
[   48.179022][ T3799] EXT4-fs: Ignoring removed orlov option
[   48.188708][ T3799] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[   48.247233][ T3799] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[   48.257071][ T3799] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.98: corrupted in-inode xattr: e_value size too large
[   48.272464][ T3799] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.98: couldn't read orphan inode 15 (err -117)
[   48.285165][ T3799] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.306937][ T3799] netlink: 48 bytes leftover after parsing attributes in process `syz.4.98'.
[   48.425144][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.504802][ T3819] netlink: 'syz.3.105': attribute type 10 has an invalid length.
[   48.533493][ T3819] team0: Device hsr_slave_0 failed to register rx_handler
[   48.576880][ T3826] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.592316][ T3828] loop0: detected capacity change from 0 to 1024
[   48.622871][ T3828] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.644871][ T3826] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.655523][ T3828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.668447][ T3835] loop3: detected capacity change from 0 to 8192
[   48.708928][   T29] kauditd_printk_skb: 347 callbacks suppressed
[   48.708947][   T29] audit: type=1400 audit(1756383846.555:879): avc:  denied  { read } for  pid=3827 comm="syz.0.109" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   48.738753][   T29] audit: type=1400 audit(1756383846.555:880): avc:  denied  { open } for  pid=3827 comm="syz.0.109" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   48.762764][ T3563]  loop3: p1 p2 p3 p4
[   48.767706][ T3563] loop3: p1 start 4294508288 is beyond EOD, truncated
[   48.767911][   T29] audit: type=1400 audit(1756383846.565:881): avc:  denied  { ioctl } for  pid=3827 comm="syz.0.109" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   48.774687][ T3563] loop3: p2 start 2936012800 is beyond EOD, truncated
[   48.806560][ T3563] loop3: p3 start 1912602624 is beyond EOD, truncated
[   48.813450][ T3563] loop3: p4 size 656640 extends beyond EOD, truncated
[   48.814923][ T3831] netlink: 12 bytes leftover after parsing attributes in process `syz.1.110'.
[   48.838530][ T3842] SELinux: security_context_str_to_sid () failed with errno=-22
[   48.846538][ T3835]  loop3: p1 p2 p3 p4
[   48.847765][ T3826] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.850769][ T3835] loop3: p1 start 4294508288 is beyond EOD, truncated
[   48.867314][ T3835] loop3: p2 start 2936012800 is beyond EOD, truncated
[   48.874406][ T3835] loop3: p3 start 1912602624 is beyond EOD, truncated
[   48.881342][ T3835] loop3: p4 size 656640 extends beyond EOD, truncated
[   48.887533][ T3842] netlink: 'syz.4.112': attribute type 21 has an invalid length.
[   48.905220][ T3831] 8021q: adding VLAN 0 to HW filter on device bond1
[   49.001607][ T3826] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.020343][   T29] audit: type=1326 audit(1756383846.875:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3853 comm="syz.4.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c259ebe9 code=0x7ffc0000
[   49.049272][ T3851] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[   49.244175][   T29] audit: type=1326 audit(1756383846.885:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3853 comm="syz.4.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c259ebe9 code=0x7ffc0000
[   49.267667][   T29] audit: type=1326 audit(1756383846.885:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3853 comm="syz.4.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45c259ebe9 code=0x7ffc0000
[   49.291129][   T29] audit: type=1326 audit(1756383846.885:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3853 comm="syz.4.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c259ebe9 code=0x7ffc0000
[   49.314434][   T29] audit: type=1326 audit(1756383846.885:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3853 comm="syz.4.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45c259ebe9 code=0x7ffc0000
[   49.337784][   T29] audit: type=1326 audit(1756383846.885:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3853 comm="syz.4.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c259ebe9 code=0x7ffc0000
[   49.361078][   T29] audit: type=1326 audit(1756383846.885:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3853 comm="syz.4.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45c259ebe9 code=0x7ffc0000
[   49.421120][ T3851] SELinux: failed to load policy
[   49.624101][ T3875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.123'.
[   49.633215][ T3875] netlink: 40 bytes leftover after parsing attributes in process `syz.3.123'.
[   49.711329][ T3878] netlink: 16 bytes leftover after parsing attributes in process `syz.3.124'.
[   49.900616][ T3892] loop0: detected capacity change from 0 to 512
[   49.907423][ T3892] journal_path: Lookup failure for './file1'
[   49.913581][ T3892] EXT4-fs: error: could not find journal device path
[   49.971884][ T3894] netlink: 12 bytes leftover after parsing attributes in process `syz.4.128'.
[   49.989635][ T3894] 8021q: adding VLAN 0 to HW filter on device bond1
[   50.701958][ T3907] loop3: detected capacity change from 0 to 8192
[   51.034547][ T3907]  loop3: p1 p2 p3 p4
[   51.053043][ T3907] loop3: p1 start 4294508288 is beyond EOD, truncated
[   51.059930][ T3907] loop3: p2 start 2936012800 is beyond EOD, truncated
[   51.066883][ T3907] loop3: p3 start 1912602624 is beyond EOD, truncated
[   51.073793][ T3907] loop3: p4 size 656640 extends beyond EOD, truncated
[   51.287253][ T3923] SELinux: security_context_str_to_sid () failed with errno=-22
[   51.303921][ T3923] netlink: 'syz.0.142': attribute type 21 has an invalid length.
[   51.360092][ T3931] netlink: 16 bytes leftover after parsing attributes in process `syz.3.143'.
[   51.425202][ T3933] netlink: 'syz.0.146': attribute type 10 has an invalid length.
[   51.434015][ T3933] team0: Device hsr_slave_0 failed to register rx_handler
[   51.444093][ T3935] netlink: 'syz.1.147': attribute type 21 has an invalid length.
[   52.113405][ T3951] loop1: detected capacity change from 0 to 8192
[   52.169670][ T3296]  loop1: p1 p2 p3 p4
[   52.176069][ T3296] loop1: p1 start 4294508288 is beyond EOD, truncated
[   52.183075][ T3296] loop1: p2 start 2936012800 is beyond EOD, truncated
[   52.189940][ T3296] loop1: p3 start 1912602624 is beyond EOD, truncated
[   52.196968][ T3296] loop1: p4 size 656640 extends beyond EOD, truncated
[   52.217790][ T3951]  loop1: p1 p2 p3 p4
[   52.223064][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   52.231874][ T3951] loop1: p1 start 4294508288 is beyond EOD, truncated
[   52.236286][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   52.239561][ T3951] loop1: p2 start 2936012800 is beyond EOD, truncated
[   52.255054][ T3951] loop1: p3 start 1912602624 is beyond EOD, truncated
[   52.258558][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   52.261882][ T3951] loop1: p4 size 656640 extends beyond EOD, truncated
[   52.300169][   T51] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   52.329729][ T3963] SELinux: security_context_str_to_sid () failed with errno=-22
[   52.429502][ T3963] netlink: 'syz.3.160': attribute type 21 has an invalid length.
[   52.433443][ T3973] loop0: detected capacity change from 0 to 2048
[   52.473832][ T3973] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   52.482876][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   52.496067][ T3973] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   52.526746][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   52.542109][ T3984] netlink: 16 bytes leftover after parsing attributes in process `syz.1.166'.
[   52.583440][ T3986] loop3: detected capacity change from 0 to 2048
[   52.604933][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.623117][ T3986] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   52.638284][ T3986] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   52.691244][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.802612][ T4004] netlink: 'syz.4.175': attribute type 21 has an invalid length.
[   52.810912][ T4000] loop0: detected capacity change from 0 to 8192
[   52.818415][ T4004] netlink: 'syz.4.175': attribute type 1 has an invalid length.
[   52.826403][ T4004] netlink: 132 bytes leftover after parsing attributes in process `syz.4.175'.
[   52.839216][ T4004] sit0: entered allmulticast mode
[   52.849839][ T3296]  loop0: p1 p2 p3 p4
[   52.854828][ T4004] sit0: entered promiscuous mode
[   52.860900][ T3296] loop0: p1 start 4294508288 is beyond EOD, truncated
[   52.867735][ T3296] loop0: p2 start 2936012800 is beyond EOD, truncated
[   52.874609][ T3296] loop0: p3 start 1912602624 is beyond EOD, truncated
[   52.881554][ T3296] loop0: p4 size 656640 extends beyond EOD, truncated
[   52.898270][ T4000]  loop0: p1 p2 p3 p4
[   52.902982][ T4000] loop0: p1 start 4294508288 is beyond EOD, truncated
[   52.909889][ T4000] loop0: p2 start 2936012800 is beyond EOD, truncated
[   52.916906][ T4000] loop0: p3 start 1912602624 is beyond EOD, truncated
[   52.923804][ T4000] loop0: p4 size 656640 extends beyond EOD, truncated
[   52.987993][ T4011] SELinux: security_context_str_to_sid () failed with errno=-22
[   53.005995][ T4004] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[   53.036320][ T4011] netlink: 'syz.3.178': attribute type 21 has an invalid length.
[   53.055120][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[   53.093729][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[   53.234497][ T4028] netlink: 'syz.4.185': attribute type 21 has an invalid length.
[   53.332495][ T4041] SELinux: security_context_str_to_sid () failed with errno=-22
[   53.406320][ T4050] loop4: detected capacity change from 0 to 1024
[   53.413709][ T4045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.194'.
[   53.422879][ T4045] netlink: 40 bytes leftover after parsing attributes in process `syz.1.194'.
[   53.440739][ T4050] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.190: Failed to acquire dquot type 0
[   53.443452][ T4049] team0: Device hsr_slave_0 failed to register rx_handler
[   53.465451][ T4050] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[   53.490323][ T4050] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.190: corrupted inode contents
[   53.539262][ T4050] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #13: comm syz.4.190: mark_inode_dirty error
[   53.569352][ T4050] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.190: corrupted inode contents
[   53.587287][ T4050] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.190: mark_inode_dirty error
[   53.712024][ T4050] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.190: corrupted inode contents
[   53.733950][ T4050] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[   53.744084][ T4050] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.190: corrupted inode contents
[   53.756164][ T4050] EXT4-fs error (device loop4): ext4_truncate:4666: inode #13: comm syz.4.190: mark_inode_dirty error
[   53.768926][ T4050] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[   53.778947][ T4050] EXT4-fs (loop4): 1 truncate cleaned up
[   53.787075][ T4050] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.814661][ T4050] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.949869][   T29] kauditd_printk_skb: 430 callbacks suppressed
[   53.949887][   T29] audit: type=1326 audit(1756383851.795:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4064 comm="syz.1.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b51a2ebe9 code=0x7ffc0000
[   53.980006][   T29] audit: type=1326 audit(1756383851.795:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4064 comm="syz.1.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b51a2ebe9 code=0x7ffc0000
[   54.003468][   T29] audit: type=1326 audit(1756383851.795:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4064 comm="syz.1.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b51a2ebe9 code=0x7ffc0000
[   54.026920][   T29] audit: type=1326 audit(1756383851.795:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4064 comm="syz.1.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b51a2ebe9 code=0x7ffc0000
[   54.050262][   T29] audit: type=1326 audit(1756383851.805:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4064 comm="syz.1.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b51a2ebe9 code=0x7ffc0000
[   54.073765][   T29] audit: type=1326 audit(1756383851.805:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4064 comm="syz.1.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b51a2ebe9 code=0x7ffc0000
[   54.097534][   T29] audit: type=1326 audit(1756383851.805:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4064 comm="syz.1.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b51a2ebe9 code=0x7ffc0000
[   54.146060][   T29] audit: type=1326 audit(1756383851.975:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4064 comm="syz.1.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b51a2ebe9 code=0x7ffc0000
[   54.169749][   T29] audit: type=1326 audit(1756383851.975:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4064 comm="syz.1.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b51a2ebe9 code=0x7ffc0000
[   54.193405][   T29] audit: type=1326 audit(1756383851.975:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4064 comm="syz.1.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b51a2ebe9 code=0x7ffc0000
[   54.230226][ T4072] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.264146][ T4072] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.337199][ T4081] netlink: 16 bytes leftover after parsing attributes in process `syz.4.204'.
[   54.353199][ T4072] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.361373][ T4084] loop0: detected capacity change from 0 to 1024
[   54.397821][ T4084] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   54.417546][ T4084] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.466745][ T4072] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.507428][ T4088] hub 9-0:1.0: USB hub found
[   54.512624][ T4088] hub 9-0:1.0: 8 ports detected
[   54.545141][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.561278][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.585664][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.625080][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.660747][ T4088] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=4088 comm=syz.2.206
[   54.674099][ T4099] __nla_validate_parse: 1 callbacks suppressed
[   54.674178][ T4099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.210'.
[   54.689374][ T4099] netlink: 40 bytes leftover after parsing attributes in process `syz.1.210'.
[   54.804378][ T4106] loop0: detected capacity change from 0 to 1024
[   54.827397][ T4109] SELinux: security_context_str_to_sid () failed with errno=-22
[   54.860768][ T4109] validate_nla: 1 callbacks suppressed
[   54.860845][ T4109] netlink: 'syz.2.213': attribute type 21 has an invalid length.
[   54.880912][ T4106] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.211: Failed to acquire dquot type 0
[   54.916120][ T4106] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[   54.946681][ T4119] loop1: detected capacity change from 0 to 512
[   54.954054][ T4106] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.211: corrupted inode contents
[   54.968924][ T4106] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #13: comm syz.0.211: mark_inode_dirty error
[   54.977839][ T4119] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.980586][ T4106] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.211: corrupted inode contents
[   55.013477][ T4119] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   55.032868][ T4106] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.211: mark_inode_dirty error
[   55.051797][ T4106] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.211: corrupted inode contents
[   55.075939][ T4106] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[   55.085278][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.095759][ T4106] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.211: corrupted inode contents
[   55.108455][ T4106] EXT4-fs error (device loop0): ext4_truncate:4666: inode #13: comm syz.0.211: mark_inode_dirty error
[   55.133097][ T4106] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[   55.153678][ T4106] EXT4-fs (loop0): 1 truncate cleaned up
[   55.175481][ T4106] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.190189][ T4133] loop1: detected capacity change from 0 to 8192
[   55.220843][ T4133]  loop1: p1 p2 p3 p4[DM]
[   55.223515][ T4106] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.226294][ T4133] loop1: p1 size 835331 extends beyond EOD, truncated
[   55.244635][ T4135] mmap: syz.4.220 (4135) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   55.271968][ T4133] loop1: p2 size 16777223 extends beyond EOD, truncated
[   55.311913][ T4133] loop1: p3 start 1052673 is beyond EOD, truncated
[   55.318590][ T4133] loop1: p4 size 262144 extends beyond EOD, truncated
[   55.343811][ T4143] SELinux: security_context_str_to_sid () failed with errno=-22
[   55.452535][ T4151] SELinux: security_context_str_to_sid () failed with errno=-22
[   55.504233][ T4155] loop2: detected capacity change from 0 to 512
[   55.512145][ T4151] netlink: 'syz.0.227': attribute type 21 has an invalid length.
[   55.516605][ T3579] udevd[3579]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   55.524188][ T3563] udevd[3563]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[   55.540811][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[   55.573435][ T4155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.608457][ T4158] loop1: detected capacity change from 0 to 8192
[   55.615168][ T4155] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   55.639519][ T3563]  loop1: p1 p2 p3 p4
[   55.647114][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.657249][ T3563] loop1: p1 start 4294508288 is beyond EOD, truncated
[   55.664168][ T3563] loop1: p2 start 2936012800 is beyond EOD, truncated
[   55.671119][ T3563] loop1: p3 start 1912602624 is beyond EOD, truncated
[   55.677921][ T3563] loop1: p4 size 656640 extends beyond EOD, truncated
[   55.701662][ T4162] loop0: detected capacity change from 0 to 512
[   55.742083][ T4158]  loop1: p1 p2 p3 p4
[   55.746361][ T4158] loop1: p1 start 4294508288 is beyond EOD, truncated
[   55.753401][ T4158] loop1: p2 start 2936012800 is beyond EOD, truncated
[   55.760382][ T4158] loop1: p3 start 1912602624 is beyond EOD, truncated
[   55.767388][ T4158] loop1: p4 size 656640 extends beyond EOD, truncated
[   55.784789][ T4162] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.805672][ T4162] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   55.840709][ T4164] loop2: detected capacity change from 0 to 1024
[   55.849942][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.862202][ T4164] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.232: Failed to acquire dquot type 0
[   55.870242][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   55.900740][ T4164] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[   55.964223][ T4182] SELinux: security_context_str_to_sid () failed with errno=-22
[   55.985771][ T4164] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.232: corrupted inode contents
[   56.004258][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   56.022353][ T4164] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #13: comm syz.2.232: mark_inode_dirty error
[   56.071373][ T4164] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.232: corrupted inode contents
[   56.104937][ T4189] loop4: detected capacity change from 0 to 512
[   56.119820][ T4164] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.232: mark_inode_dirty error
[   56.143631][ T4189] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   56.157378][ T4189] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   56.179857][ T4164] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.232: corrupted inode contents
[   56.560254][ T4164] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[   56.581291][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.625762][ T4164] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.232: corrupted inode contents
[   56.649046][ T4164] EXT4-fs error (device loop2): ext4_truncate:4666: inode #13: comm syz.2.232: mark_inode_dirty error
[   56.661607][ T4164] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[   56.686512][ T4202] loop4: detected capacity change from 0 to 1024
[   56.708738][ T4164] EXT4-fs (loop2): 1 truncate cleaned up
[   56.711276][ T4202] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   56.726021][ T4164] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   56.740682][ T4164] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.741899][ T4202] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.887159][ T4207] loop2: detected capacity change from 0 to 8192
[   56.959466][ T3563]  loop2: p1 p2 p3 p4
[   56.963595][ T3563] loop2: p1 start 4294508288 is beyond EOD, truncated
[   56.970565][ T3563] loop2: p2 start 2936012800 is beyond EOD, truncated
[   56.977442][ T3563] loop2: p3 start 1912602624 is beyond EOD, truncated
[   56.979393][ T4211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=4211 comm=syz.4.247
[   56.984444][ T3563] loop2: p4 size 656640 extends beyond EOD, truncated
[   57.011002][ T4207]  loop2: p1 p2 p3 p4
[   57.025836][ T4207] loop2: p1 start 4294508288 is beyond EOD, truncated
[   57.032789][ T4207] loop2: p2 start 2936012800 is beyond EOD, truncated
[   57.032985][ T2982] ==================================================================
[   57.039772][ T4207] loop2: p3 start 1912602624 is beyond EOD, 
[   57.047940][ T2982] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
[   57.047994][ T2982] 
[   57.048001][ T2982] write to 0xffffffff86875748 of 8 bytes by task 4207 on cpu 1:
[   57.048019][ T2982]  prb_reserve_in_last+0x861/0xb80
[   57.054060][ T4207] truncated
[   57.061732][ T2982]  vprintk_store+0x494/0x860
[   57.061771][ T2982]  vprintk_emit+0x178/0x650
[   57.061789][ T2982]  vprintk_default+0x26/0x30
[   57.061809][ T2982]  vprintk+0x1d/0x30
[   57.061834][ T2982]  _printk+0x79/0xa0
[   57.061864][ T2982]  bdev_disk_changed+0x950/0xcb0
[   57.061901][ T2982]  loop_set_status+0x567/0x640
[   57.064349][ T4207] loop2: p4 size 656640 extends beyond EOD, 
[   57.071946][ T2982]  lo_ioctl+0x654/0x1240
[   57.077133][ T4207] truncated
[   57.125122][ T2982]  blkdev_ioctl+0x34f/0x440
[   57.129911][ T2982]  __se_sys_ioctl+0xce/0x140
[   57.134595][ T2982]  __x64_sys_ioctl+0x43/0x50
[   57.139207][ T2982]  x64_sys_call+0x1816/0x2ff0
[   57.143898][ T2982]  do_syscall_64+0xd2/0x200
[   57.148415][ T2982]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.154319][ T2982] 
[   57.156739][ T2982] read to 0xffffffff86875740 of 16 bytes by task 2982 on cpu 0:
[   57.164410][ T2982]  _prb_read_valid+0x1bc/0x920
[   57.169200][ T2982]  prb_read_valid+0x3c/0x60
[   57.173718][ T2982]  syslog_print+0xeb/0x540
[   57.178153][ T2982]  do_syslog+0x52b/0x7e0
[   57.182416][ T2982]  __x64_sys_syslog+0x41/0x50
[   57.187117][ T2982]  x64_sys_call+0x2f36/0x2ff0
[   57.191848][ T2982]  do_syscall_64+0xd2/0x200
[   57.196565][ T2982]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.202644][ T2982] 
[   57.204970][ T2982] Reported by Kernel Concurrency Sanitizer on:
[   57.211123][ T2982] CPU: 0 UID: 0 PID: 2982 Comm: klogd Not tainted syzkaller #0 PREEMPT(voluntary) 
[   57.220502][ T2982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   57.230662][ T2982] ==================================================================
[   57.305753][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory