last executing test programs:

5m4.721404741s ago: executing program 32 (id=5695):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = epoll_create(0x2)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000", 0x2c}], 0x1}, 0x40)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x4008084)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18)
syz_emit_ethernet(0x6e, &(0x7f0000000640)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7d0, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, [@srh={0x0, 0x0, 0x4, 0x0, 0x20}]}}}}}}}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r5}, 0x18)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x3}}]}, 0x82, 0x49a, &(0x7f0000000cc0)="$eJzs3c9vVEUcAPDve/2B8qtVUQGJVomx8UdLCyoHLxpNPGA00QPqqbaFEAo1tCaUEKjG4MXEkOjRqEcT/wJvXox6MjHxpHdDQpTEgMbDmvf2Pdnddmmp211gP59k6czO7JuZzpv35s2wEEDXGsr+SCI2R8QvETFQjdZnGKr+uHLp9ORfl05PJlGpvPp7kue7fOn0ZJm1/NymIjKcRqTvJ0Uh9eYWTh2dmJmZPlHER+ePvT06t3DqiSPHJg5PH54+Pr5//769Y08/Nf5kS9qZtevyzjOzu3a8+Pr5lyYPnn/r+6+y+m4u0mvbsSb9S98ayhr+RyXXmPZw3P6/irvRbKkJJ70drAjXpScisu7qy8Z/pVI5W5M2EC+8t8LHN61z9YB1lN2bNizzfnFfXKw0lVwzFbgZJNHpGgCdUd7vs+ff8tXG6UfHXXy2+gCUtftK8aqm9EZa5OlreL5tpaGIOLj492fZK1qxDgEAsIIPJz85EI8vN/9L456afFuLPZTBiLgjIu6MiLsiYltE3B2R5703IravptCaDYLGraGl85/0wtpbt7Js/vdMsbdVP/8rZ38x2FPEtuTt70sOHZmZ3lP8Toajb0MWH7tGGd88/9NHzdJq53/ZKyu/nAsW9bjQ27BANzUxP5FPSlvg4rsRO3vjn0ql0tD+JMpeSiJiR0TsvL5Dby0DRx79clezTCu3f8nhrmrBPlPli4hHqv2/GA3tLyVL9yf7t1zdnxy9LWam94yWZ8VSP/x47pVm5a++/esj6/+N9ed/kfL5QhEYfLN2v3Yumuxcbm5axrlfP2j6TLPW878/eS2/HpXbricn5udPjEX0JwfyeN3741c/W8ZP9lbzZ+0f3p2llO0vP5nm17go+v++iNhV7JfdHxEPFHV/MCIeiojdTVsf8d1zzdNuhP6fqun/JBrP/+1nqj/L/l+47kDP0W+/blb+6vp/Xx4aLt7Jr38rWG0F1/6bAwAAgJtHmq/cJOnIf+E0HRmp/sXebbExnZmdm3/s0Ow7x6eqKzyD0ZeWK10DNeuhY8liccRqfLxYKy7T9xbrxh/3RB4fmZydmepw26HbbWoy/jO/9XS6dsC6W24fbXyZL7QBt57G8Z/WR8++3M7KAG3l+9rQvVYY/2m76gG0n/s/dK/lxv/Zhri9ALg1uf9D9zL+oXsZ/9C9GsZ/T/zcqZoAbbSGr/MLCMwtnIr0hqjGqgJ1/x7Ep52szxutOuCfA+tc1aXXilvrf6wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6xb8BAAD///U+7CA=")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x22)
pwrite64(r6, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x18)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603f7ff000000000000000700000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
epoll_wait(r1, &(0x7f0000000180)=[{}, {}], 0x15555555555555e5, 0x2)

4m34.315404371s ago: executing program 33 (id=6145):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x18)
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)

3m59.877531577s ago: executing program 34 (id=6628):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, <r2=>0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10)
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000300)=r3}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="80000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000086000000280600000400000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000183c0000020000000000000000000000186900000700000000000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000085000000bd00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000"], &(0x7f00000003c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000a00)=""/4096, 0x40e00, 0x60, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x1, 0xa, 0x4}, 0x10, 0xffffffffffffffff, r3, 0x4, &(0x7f0000000500)=[r0, r0], &(0x7f00000006c0)=[{0x0, 0x4, 0xf, 0x5}, {0x2, 0x2, 0xf, 0x8}, {0x4, 0x5, 0xd, 0xfbaf3bda292f0783}, {0x3, 0x4, 0x1, 0x4}], 0x10, 0x2}, 0x94)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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")
r5 = creat(&(0x7f0000000340)='./bus\x00', 0x182)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150)
pwrite64(r6, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
fallocate(r5, 0x0, 0xbf5, 0x2000402)
ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000040)={0xc, r5, 0x0, 0x0, 0x0, 0xfffffffffdffffff})
r7 = socket$inet(0x10, 0x3, 0x0)
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRESDEC=r7, @ANYRES32=0x0, @ANYRESOCT=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000f400850000008600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='rpm_return_int\x00', r9, 0x0, 0xffffffff}, 0x18)
syz_open_dev$usbfs(&(0x7f0000000300), 0xf, 0xc340)

3m28.968420109s ago: executing program 35 (id=7151):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
r2 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f00000005c0)={[{@rodir}, {@shortname_win95}, {@shortname_win95}, {@fat=@dos1xfloppy}, {@shortname_win95}, {@fat=@nfs_stale_rw}, {@shortname_winnt}, {@fat=@errors_continue}, {@shortname_winnt}]}, 0xfc, 0x2b8, &(0x7f0000000300)="$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")
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001100)='/proc/slabinfo\x00', 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10)
preadv(r3, &(0x7f0000002600)=[{&(0x7f00000026c0)=""/4097, 0x1001}], 0x1, 0x40000005, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES16=r2], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0xc2)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008040)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x4, 0x4, 0xc}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r7}, &(0x7f0000000000), &(0x7f0000000200)=r8}, 0x20)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
io_setup(0x5, &(0x7f0000000240)=<r9=>0x0)
r10 = inotify_init()
io_submit(r9, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r10, 0x0}])
inotify_add_watch(r10, &(0x7f0000000340)='.\x00', 0xa50003d1)
readv(r10, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)

3m22.745591248s ago: executing program 3 (id=7240):
creat(&(0x7f0000000100)='./bus\x00', 0x38)
r0 = open(&(0x7f0000000300)='./bus\x00', 0x6200, 0x5d)
preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x2, 0x0, 0x0, 0x0)

3m22.642621562s ago: executing program 3 (id=7243):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x67, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x8c200, 0x0)
openat$ptp0(0xffffffffffffff9c, 0x0, 0x484002, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
unshare(0x22020600)
fcntl$setown(r1, 0x8, 0x0)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote}, {@in6=@remote, 0x4d3, 0x32}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}]}, 0x138}}, 0x0)

3m22.569691756s ago: executing program 3 (id=7245):
socket(0x400000000010, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0)

3m22.527559717s ago: executing program 3 (id=7247):
r0 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./bus\x00', 0x0, &(0x7f0000000180), 0xfe, 0x273, &(0x7f00000009c0)="$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")
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRESOCT=r0], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xfffffffffffff001}, 0x18)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='cgroup\x00')
lseek(r3, 0x339, 0x0)
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0)
setns(r5, 0x24020000)
r6 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = syz_pidfd_open(r6, 0x0)
setns(r7, 0x80)

3m22.369716564s ago: executing program 3 (id=7248):
socket$inet_sctp(0x2, 0x5, 0x84)
sched_setaffinity(0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0)
semop(0x0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2)
semop(0x0, &(0x7f0000001240)=[{}], 0x1)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000480)=[0x6, 0xf4])
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080), 0x1, 0x4cf, &(0x7f0000001180)="$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")
r0 = add_key$user(&(0x7f0000000040), 0x0, &(0x7f00000000c0)="9b", 0x1, 0xfffffffffffffffc)
keyctl$invalidate(0x15, r0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0009000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000001a2aeec3091b15f2f54d24fa5948730ce9acdbd330883ea0d4de"]}, 0x122)
keyctl$describe(0x6, r0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x18)
socket$l2tp6(0xa, 0x2, 0x73)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b}, [@ldst={0x6}]}, &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[], 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)

3m22.158702483s ago: executing program 3 (id=7249):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000039000900f036d6760000000004000000040000000c0001800600060088"], 0x24}}, 0x10)

3m22.158251643s ago: executing program 36 (id=7249):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000039000900f036d6760000000004000000040000000c0001800600060088"], 0x24}}, 0x10)

3m20.523279414s ago: executing program 7 (id=7263):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000400)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000004000000000001811000000", @ANYRES32=r1, @ANYRES32=r1], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r3 = inotify_init1(0x0)
ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000140))
inotify_add_watch(r3, 0x0, 0x2000775)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x50, 0xffffffffffffffff, 0x0)
fremovexattr(r0, &(0x7f0000000000)=@random={'user.', '/[@!\\\x00'})
r4 = socket$igmp6(0xa, 0x3, 0x2)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000004c0)={'tunl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x40, 0x7, 0x376e, 0x8, {{0x5, 0x4, 0x0, 0x6, 0x14, 0x67, 0x0, 0xa6, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x36}, @remote}}}})
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r6, 0x2, 0x6, @remote}, 0x10)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
r9 = dup(r8)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x1, 0x10}, 0xc)
sendmsg$inet6(r8, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x100004}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000480)="88", 0x1}], 0x1}, 0x4048043)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000540)={0x8, 0x4, 0x39, 0x3}, 0x10)
write$RDMA_USER_CM_CMD_BIND_IP(r9, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x6, @private2, 0xed0}}}, 0x30)
setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x4, r6, 0x7f}, 0xc)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES8=r9], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94)

3m20.188972808s ago: executing program 7 (id=7267):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
r2 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f00000005c0)={[{@rodir}, {@shortname_win95}, {@shortname_win95}, {@fat=@dos1xfloppy}, {@shortname_win95}, {@fat=@nfs_stale_rw}, {@shortname_winnt}, {@fat=@errors_continue}, {@shortname_winnt}]}, 0xfc, 0x2b8, &(0x7f0000000300)="$eJzs3EFr02AYwPGnXbt2HVt7EhTEB73oJWz1ExTZQCwocxX1IGQu1dLYjqZWKuJ2E29+juHRm+D8Art48y5ehiB42UEWadLYtBQ3Z7vM7f+DkWd53yfvmzYbTwJ5d+6+eVItO0bZbEo8rRIX2ZBdkVwn6opJwtvGvXhSwjbkyvSPz+dv37t/o1AsLiypLhaWr+ZVdfbCh2cv3l782Jy+8272fUq2cw92vue/bJ/ZPruztxwcvd5UU1fq9aa5Ylu6WnGqhuot2zIdSys1x2r0tZft+tpaW83a6kxmrWE5jpq1tlattjbr2my01XxkVmpqGIbOZOS0mfjrjNLm0pJZGMtkEIWpYTsbjYI54TfGJBZuKW0e2cwAAMCxcbD63zfK+v9xxdGKo7X96v+4UP+Pj1f/7w0tGnEyJDs3AAUz0/377Uf9DwAAAAAAAAAAAAAAAAAAAADA/2DXdbOu62aDbfCTEpG0iAS/Rz1PjMchvv9YhNPFiIVe3EuL2K9apVbJ3/rthbJUxBZL5pIiP73rocuPF68XF+bUk5Mte72b770kmAryA7nh+fN+voby11ulpGTC4+f99w6H5ecH8pMi0ipNyuVLoXxDsvLpodTFllXvOL38l/Oq124WB8af8voBAAAAAHASGPpbrv/+119N0jA0WDZkoN3f2Xs+INl9ng+obE1KLz8h5xLRnTcAAAAAAKeJ035eNW3banQCSYg0+vaMPpge25GPNhj46AaC18dghqMPjLR/0fyxs+u6651O/z5oXEQiOtNvInL0n3NKRMY6xNen/hd4kM5R/lcCAAAAMA69oj/qmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHoddPGwoP9h1h4LDTcRzVkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8OvAAAA//8XzBeO")
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001100)='/proc/slabinfo\x00', 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10)
preadv(r3, &(0x7f0000002600)=[{&(0x7f00000026c0)=""/4097, 0x1001}], 0x1, 0x40000005, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES16=r2], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0xc2)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008040)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x4, 0x4, 0xc}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r7}, &(0x7f0000000000), &(0x7f0000000200)=r8}, 0x20)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
io_setup(0x5, &(0x7f0000000240)=<r9=>0x0)
r10 = inotify_init()
io_submit(r9, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r10, 0x0}])
readv(r10, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)

3m19.289742967s ago: executing program 7 (id=7282):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2)
sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40)

3m19.120188294s ago: executing program 7 (id=7285):
r0 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./bus\x00', 0x0, &(0x7f0000000180), 0xfe, 0x273, &(0x7f00000009c0)="$eJzs3b1rJGUcB/Df7EvWmBCiNja+gIhoIMRCEGy0UQhIEBFBhYiIlSRCTNqslY2FvUoqmyB2Rku5Jlxzf0DuLkWuuSZcceEO7oo9Zmf32Gw2l2z2ZY7M5wObmdl53hb2+zwb2NkJoLBmI+L9iChHxFxEVCMi6SzwavaYbR1uTe4uRzQan95JmuWy40y73lRE1CPi3YhK+9zGzpcH9/Y+euOX9errf+58MTmu19fp8GD/46M/ln7+Z/HtjVLruenWtvN1DFPS47lKEvH8KDp7SiSVvEfA+fx9Pc39CxHxWjP/1Si1Ivvr2sSVarz1e+96E0fjHScwCo1GNV0D6w2gcErNz8BJaT4isv1SaX4++wx/o5zE96trP859t7q+8m3eMxUwBEk9+793/8P/av9OdeX/djnL/7m8M+KRAiOR5v+zT7ZvpvtH5bxHA4zFS9kmzf/c15tvhvzDJfBMX6XlH4pL/qG4npz/iVzGBPTpgmu39R+KS/6huOQfLrFqe6fe8/Tg+b/f+gbhxYcIjNtM86/1H4qrK/+5XI8L5KMz/wBAsTRqOV+ADOQm7/kHAAAAAAAAAAAAAAAAAAA4aWtyd7n9GFefV3+LOPwgIirH+681z5ab9yNu39fs2btJWuyxJKs2kK9eGbCBAf015Kuvl2r9lZ+5Ndz++3Xt5dG0+9Pxw1N/225zJaKeFl6oVE6+/5PW++9Mp7b/3BkVq9+cr4NhSbqO3/t8vP13e7idb/+LexH/p/PPQq/5rxQvNre955/pzp9YvqAfHgzYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGPzKAAA//9pinD7")
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRESOCT=r0], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xfffffffffffff001}, 0x18)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='cgroup\x00')
lseek(r3, 0x339, 0x0)
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0)
setns(r5, 0x24020000)
r6 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = syz_pidfd_open(r6, 0x0)
setns(r7, 0x80)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r10}, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="24000000390009002cbd70000000000004000000040000000c0001800600060006"], 0x24}}, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
clock_gettime(0x0, &(0x7f0000000140)={<r12=>0x0, <r13=>0x0})
setitimer(0x0, &(0x7f0000000200)={{r12, r13/1000+60000}, {0x77359400}}, &(0x7f0000000240))
write$binfmt_script(r11, &(0x7f00000000c0)={'#! ', '', [], 0xa, "bc723cf4212c2d20b3b122df793b86b09400000000a948bdbfe0ae8698b7c01a6cedc2d8bce3eff355fdc1cd0278c8722cf82226"}, 0x38)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r11, 0x0)
mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000009000/0x4000)=nil)
socket$kcm(0x10, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

3m18.862973825s ago: executing program 7 (id=7290):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5f}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x42024, 0x8d85}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x7}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x3)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x2)

3m18.346244887s ago: executing program 7 (id=7296):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
close(0xffffffffffffffff)
socket$inet6_sctp(0xa, 0x1, 0x84)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095", @ANYRESHEX=r0, @ANYRES32, @ANYBLOB="68698be25a486530a9d25901e1fb8ae555971989f9fdba59502181c2728dd4fdcce8b0e43b3c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x10, &(0x7f0000000300)={0x0, 0x1, 0x3})
mq_timedreceive(r2, &(0x7f00000003c0)=""/83, 0x53, 0x8000000000002003, 0x0)
mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0)

3m18.27755627s ago: executing program 37 (id=7296):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
close(0xffffffffffffffff)
socket$inet6_sctp(0xa, 0x1, 0x84)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095", @ANYRESHEX=r0, @ANYRES32, @ANYBLOB="68698be25a486530a9d25901e1fb8ae555971989f9fdba59502181c2728dd4fdcce8b0e43b3c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x10, &(0x7f0000000300)={0x0, 0x1, 0x3})
mq_timedreceive(r2, &(0x7f00000003c0)=""/83, 0x53, 0x8000000000002003, 0x0)
mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0)

3m12.502798729s ago: executing program 4 (id=7392):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x2003, 0x337})
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00')
preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/56, 0x38}], 0x1, 0x6, 0x6)
lseek(r1, 0x8001, 0x1)
r2 = socket$inet(0x2, 0x80001, 0x84)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000900)='kfree\x00', r3}, 0x18)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x20050800)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8e}, 0x94)
r6 = gettid()
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)={0x38, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xea, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0x18, 0x3c, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @binary="2ddd70fcee40c4925b7052dc85bd5a27"}]}]}, 0x38}], 0x1}, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x3)
acct(&(0x7f0000000140)='./file0\x00')
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

3m11.604389478s ago: executing program 4 (id=7396):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff4, 0x2, 0x1, 0x0, 0x5, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4010804)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r8}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0)
close(r9)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r10}, 0x18)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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")
r11 = socket$tipc(0x1e, 0x2, 0x0)
getsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000080), &(0x7f0000000740)=0x4)

3m11.301149151s ago: executing program 4 (id=7404):
r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40)

3m11.192050326s ago: executing program 4 (id=7407):
r0 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./bus\x00', 0x0, &(0x7f0000000180), 0xfe, 0x273, &(0x7f00000009c0)="$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")
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRESOCT=r0], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xfffffffffffff001}, 0x18)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='cgroup\x00')
lseek(r3, 0x339, 0x0)
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0)
setns(r5, 0x24020000)
r6 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = syz_pidfd_open(r6, 0x0)
setns(r7, 0x80)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r10}, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="24000000390009002cbd70000000000004000000040000000c0001800600060006"], 0x24}}, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
clock_gettime(0x0, &(0x7f0000000140)={<r12=>0x0, <r13=>0x0})
setitimer(0x0, &(0x7f0000000200)={{r12, r13/1000+60000}, {0x77359400}}, &(0x7f0000000240))
write$binfmt_script(r11, &(0x7f00000000c0)={'#! ', '', [], 0xa, "bc723cf4212c2d20b3b122df793b86b09400000000a948bdbfe0ae8698b7c01a6cedc2d8bce3eff355fdc1cd0278c8722cf82226"}, 0x38)
mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000009000/0x4000)=nil)
r14 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="d800000019008111e00212ba0d8105040a600000ff0f040b067c55a1bc000900080006990300000015000500fe8081780d001500033f01400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

3m11.080143031s ago: executing program 4 (id=7413):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r0 = socket(0x1, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
lstat(&(0x7f0000001800)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r5 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$selinux_validatetrans(r5, &(0x7f0000001cc0)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 0'], 0x79)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0)
socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x28, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_FLAGS={0x8}, @IFA_FLAGS={0x8, 0x8, 0x370}]}, 0x28}}, 0x0)

3m10.070605614s ago: executing program 4 (id=7431):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(0x0, r0)
sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40)

3m10.069039774s ago: executing program 38 (id=7431):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(0x0, r0)
sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40)

3m7.330569183s ago: executing program 8 (id=7460):
syz_emit_ethernet(0x2f, &(0x7f0000000000)={@random="40ef594897d3", @local, @val={@void, {0x8100, 0x6, 0x0, 0x2}}, {@ipv4={0x800, @generic={{0x7, 0x4, 0x1, 0x2b, 0x1d, 0x67, 0x0, 0xc, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast1, {[@cipso={0x86, 0x6, 0xffffffffffffffff}]}}, "87"}}}}, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f00000004c0)={0xc4, 0x2, 0x9, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7}}, @NFCTH_TUPLE={0x5c, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x5}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x4}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20040800}, 0x20040144)
r0 = fsmount(0xffffffffffffffff, 0x1, 0x0)
symlinkat(0x0, r0, &(0x7f0000000080)='./file0\x00')
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x0)

3m7.141383361s ago: executing program 8 (id=7461):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="0046002040000000000084907c3fffffffac14d6dc6c22036c515d7b5a81686162ddd68ad1b6a3d2355ac23e103f5793412608eeb2b05bb44d6a76d27b56a030f59bc00fae936a695c74c2be4b16c0b248650cc0af40b7d94caf69e66c8113abee17fd0a7c71418a94d4ab7c8fa04c5a6d5b70e2ab3103e8a6757072f9be", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b40003009078001c0e0300050207ffffff000000000002d58838068b91000000"], 0x4e)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a0000000000000028a94b5e633ad443e868f20321489d7c8d259f26fb031f57318dd82e89560a3e95f2a06dcc7f17efe178fd0e2991f6c4fb4faf1eda65432dfb32f203d47b2004320c3cc5f32bac0b2b699c4951b5cbdfea16368deb8e2cfe11ad33e84025981c63b7b3cc6a2abcd68b07eecc9aa081286175af373c0bfad7ba69bf942a6431d8c10e1d4f9446f1921ee5ca734e0cecba9793ebcdbaa17effaecd5506b264ec106bb90cfd39f5f311", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="04000000020000000200"/28], 0x50)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
io_uring_setup(0x6f6, &(0x7f0000005100))
close(0x3)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={<r3=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0)
ioctl$VT_DISALLOCATE(r2, 0x5608)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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")
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0)
ftruncate(r6, 0xb35)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newtaction={0x88c, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0xffff, 0xd, 0x81, 0x7, 0x6, 0x7, 0x9, 0x4, 0x4, 0x6, 0x3, 0x5, 0x3, 0x6, 0x6, 0xffff, 0x6, 0x9, 0x6, 0x0, 0x20, 0xb, 0x5, 0x5, 0x2, 0x62, 0x9, 0xfffffff8, 0x6338, 0x6e, 0x7, 0x9, 0x8, 0x9, 0x7, 0x80000000, 0x7, 0xfff, 0x2, 0x9, 0xfffffff9, 0x6, 0xfffffffe, 0x600000, 0x6, 0x1, 0x8, 0x1, 0xbc0, 0x9bf1, 0x8000005, 0x2, 0x0, 0xe, 0x9, 0x1ff, 0xb9, 0xc741, 0x800, 0x5, 0x1, 0xed, 0x1, 0x8001, 0xb, 0x5b96, 0xffff, 0x2, 0x20000000, 0xff, 0x1, 0x4, 0x9, 0x401, 0x2, 0x1000, 0x101, 0x50, 0x4, 0x2, 0x1, 0xc77b, 0x5, 0x7, 0x8a6b, 0xfffffbff, 0x4, 0x2, 0x1, 0x5, 0x6, 0x2, 0x5, 0xffffffff, 0x80, 0x10000008, 0xff, 0x9, 0xfffffff2, 0x3b96, 0xfffff800, 0x8, 0x3, 0x2000f, 0xf8b, 0x10001, 0x3, 0x2, 0xa78, 0x3, 0xcb0, 0x6, 0x9, 0x9, 0x0, 0x7, 0x80000001, 0x7, 0x9, 0x0, 0x40, 0x8, 0x8, 0x5, 0x8c, 0xaa93, 0x800, 0x203, 0x9, 0x10001, 0x9, 0x3, 0xd12, 0x0, 0x23487474, 0x3cd2, 0x0, 0x7, 0x6, 0x5, 0xb1, 0x2, 0x3, 0x9, 0x2, 0xaa83, 0x3e, 0xff, 0x9, 0x9, 0x1, 0x5, 0x0, 0x2, 0x1, 0x4, 0x9, 0x4, 0x2, 0x7, 0xffffffff, 0x1, 0xd76a, 0x6, 0xfffffff6, 0x4, 0x1, 0xfffffffd, 0xfffffffc, 0x50, 0x7359, 0x8, 0x7, 0xb, 0xa, 0x2d5, 0x6, 0xf, 0x1, 0x773a, 0x6b7b, 0x10001, 0x3, 0x4, 0x5, 0x7, 0x4, 0x800, 0x2, 0x5, 0x0, 0x6, 0x3ff, 0x9, 0x5, 0x5, 0xfffffffe, 0x7, 0x8, 0xffff, 0x3, 0x4, 0xa, 0xae2b, 0x1, 0x6, 0x1a71, 0x0, 0x10001000, 0x0, 0x3, 0x7, 0x1, 0x1, 0x3c34, 0x6, 0x10000, 0x5, 0x7fff, 0x0, 0x8, 0x3, 0x3, 0xc, 0x100, 0x4, 0x2, 0xb, 0x5, 0xc8, 0x557c, 0x9, 0x8, 0x0, 0x3, 0x80, 0x8000, 0x7bc, 0x1, 0x8, 0x6, 0xe, 0x5, 0xfff, 0x9, 0x5, 0x279, 0x8000, 0x8, 0x5, 0x1, 0x80000000, 0x3, 0x9, 0x1ff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x9, 0xd, 0x7, 0x9, 0x6, 0x0, 0x4, 0x81, 0x1, 0x100, 0x7, 0x3f, 0x3, 0x8, 0x9, 0x2, 0x6, 0x6dbf, 0x8, 0x5, 0x12c, 0x3, 0x5, 0x5, 0x7, 0x100, 0x7, 0x8, 0x9, 0x0, 0x3, 0xffffffff, 0x2, 0xfffffffe, 0x328d, 0xfffffe02, 0x9, 0xfffffffc, 0x3, 0xffff7ffc, 0x4f, 0x0, 0x10, 0x3, 0x8000, 0x2, 0x17, 0xffff, 0x8, 0xc, 0xffff, 0x0, 0x3, 0x2, 0x42f, 0xffffff2c, 0x5, 0xbd, 0xe0, 0x6, 0xc26, 0x8e, 0x6, 0x3, 0xe, 0x1, 0x800, 0x1bf, 0x4, 0x5, 0x4, 0x8, 0x7ce7c36c, 0x3, 0x1eb, 0x10001, 0x8, 0x5102, 0x6ce, 0x6, 0x8000, 0x2, 0x5, 0xfffffff9, 0x2, 0x4e30, 0x6, 0x6, 0x2, 0x90, 0x2, 0x2, 0xc80e, 0x4, 0x5, 0x450, 0xe0, 0x6, 0x5, 0xd, 0x5, 0x5, 0x9, 0x1045800, 0xfffffffd, 0xffffffde, 0x6a4, 0x5, 0x2000009, 0x6, 0x1f, 0xb89, 0x6, 0x7, 0x1ff, 0x6, 0xfffff77b, 0x3, 0xffffffff, 0xfffff400, 0x6, 0x6, 0x8, 0x9, 0x2, 0x7, 0x401, 0xa7d, 0x6, 0xfffff9f3, 0x9, 0x9, 0x1, 0xb4, 0x2, 0xc, 0x8, 0x7, 0x0, 0x5891, 0x8, 0x7, 0xb, 0x0, 0x400008, 0xb, 0x0, 0xff, 0x4f, 0x8, 0x33f, 0x70fc7f4f, 0x0, 0x4, 0x0, 0xc, 0x9, 0x5, 0x6, 0x3, 0x2, 0x1, 0x0, 0x2c46512a, 0x3, 0x2640, 0x0, 0x10000, 0x0, 0x9, 0x3, 0x6, 0x7fffffff, 0xdc, 0x80000000, 0x26, 0xbb16, 0x2, 0x9, 0xbd1, 0x44, 0xffffff7f, 0xa3, 0x1, 0x4, 0x0, 0x3, 0x2, 0x5, 0x0, 0x9, 0x4, 0x4b, 0x1, 0x8000, 0x2, 0x4, 0x2e4, 0xc7, 0x4, 0x4, 0x4, 0x81, 0xff, 0x6, 0x1, 0x10, 0x6ab, 0x9, 0x1, 0x4e2, 0x104, 0x7, 0x3ff, 0x10001, 0x4, 0x1, 0x101, 0x800, 0x101, 0x5, 0x6, 0xd, 0x6, 0x101, 0x9, 0x9, 0x6, 0x800, 0x101, 0xf07, 0x803, 0x2, 0x81, 0xfff, 0x80000001, 0x8, 0x2, 0xee8, 0x1ff, 0x81, 0x24000, 0x6, 0x2, 0x2, 0x2, 0x10, 0x8001, 0x8, 0x8, 0xb127, 0x6, 0x9, 0x7fff, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x4, 0x2, 0x7, {0x3, 0x2, 0x4, 0x40, 0x6, 0x1ff}, {0x2, 0x0, 0x2, 0xcd4, 0x9, 0x8}, 0x0, 0x7ff}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x8000}, 0x4)

3m6.155805853s ago: executing program 8 (id=7469):
syz_emit_ethernet(0x2f, &(0x7f0000000000)={@random="40ef594897d3", @local, @val={@void, {0x8100, 0x6, 0x0, 0x2}}, {@ipv4={0x800, @generic={{0x7, 0x4, 0x1, 0x2b, 0x1d, 0x67, 0x0, 0xc, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast1, {[@cipso={0x86, 0x6, 0xffffffffffffffff}]}}, "87"}}}}, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f00000004c0)={0xc4, 0x2, 0x9, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7}}, @NFCTH_TUPLE={0x5c, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x5}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x4}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20040800}, 0x20040144)
r0 = fsmount(0xffffffffffffffff, 0x1, 0x0)
symlinkat(0x0, r0, &(0x7f0000000080)='./file0\x00')
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000", @ANYRES16=r1, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10)
r5 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
pread64(r5, &(0x7f0000001240)=""/102400, 0x200000, 0x0)
r6 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0)

3m5.963169611s ago: executing program 5 (id=7472):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
creat(&(0x7f0000000100)='./bus\x00', 0x38)
r2 = open(&(0x7f0000000300)='./bus\x00', 0x6200, 0x5d)
preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x2, 0x0, 0x0, 0x0)

3m5.903958264s ago: executing program 5 (id=7474):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x2000000)

3m5.801983768s ago: executing program 8 (id=7478):
r0 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./bus\x00', 0x0, &(0x7f0000000180), 0xfe, 0x273, &(0x7f00000009c0)="$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")
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRESOCT=r0], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xfffffffffffff001}, 0x18)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='cgroup\x00')
lseek(r3, 0x339, 0x0)
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0)
setns(r5, 0x24020000)
r6 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = syz_pidfd_open(r6, 0x0)
setns(r7, 0x80)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r10}, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="24000000390009002cbd70000000000004000000040000000c0001800600060006"], 0x24}}, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
clock_gettime(0x0, &(0x7f0000000140))
write$binfmt_script(r11, &(0x7f00000000c0)={'#! ', '', [], 0xa, "bc723cf4212c2d20b3b122df793b86b09400000000a948bdbfe0ae8698b7c01a6cedc2d8bce3eff355fdc1cd0278c8722cf82226"}, 0x38)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r11, 0x0)
mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000009000/0x4000)=nil)
r12 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="d800000019008111e00212ba0d8105040a600000ff0f040b067c55a1bc000900080006990300000015000500fe8081780d001500033f01400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

3m5.735741111s ago: executing program 5 (id=7481):
syz_emit_ethernet(0x2f, &(0x7f0000000000)={@random="40ef594897d3", @local, @val={@void, {0x8100, 0x6, 0x0, 0x2}}, {@ipv4={0x800, @generic={{0x7, 0x4, 0x1, 0x2b, 0x1d, 0x67, 0x0, 0xc, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast1, {[@cipso={0x86, 0x6, 0xffffffffffffffff}]}}, "87"}}}}, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f00000004c0)={0xc4, 0x2, 0x9, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7}}, @NFCTH_TUPLE={0x5c, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x5}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x4}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20040800}, 0x20040144)
r0 = fsmount(0xffffffffffffffff, 0x1, 0x0)
symlinkat(0x0, r0, &(0x7f0000000080)='./file0\x00')
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000", @ANYRES16=r1, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10)
r5 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
pread64(r5, &(0x7f0000001240)=""/102400, 0x200000, 0x0)
r6 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
setsockopt$inet6_udp_int(r6, 0x11, 0xb, &(0x7f0000000100)=0x17, 0x4)
setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0)

3m5.243247642s ago: executing program 8 (id=7485):
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009"], 0x140}}, 0x0)
r1 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="08007715e050e9ce", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000070b"], 0x40}, 0x20000000)
r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, 0x0)
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a320000000014000480080001400000000008000240000000002c000000030a03000000"], 0xb4}, 0x1, 0x0, 0x0, 0x400c0d1}, 0x0)
write$selinux_access(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='system_u:ck_exec_t:s0 /usr/sbin/cupn-browsed 0'], 0x4e)

3m5.212023684s ago: executing program 5 (id=7487):
r0 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./bus\x00', 0x0, &(0x7f0000000180), 0xfe, 0x273, &(0x7f00000009c0)="$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")
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRESOCT=r0], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xfffffffffffff001}, 0x18)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='cgroup\x00')
lseek(r3, 0x339, 0x0)
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0)
setns(r5, 0x24020000)
r6 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = syz_pidfd_open(r6, 0x0)
setns(r7, 0x80)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r10}, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="24000000390009002cbd70000000000004000000040000000c0001800600060006"], 0x24}}, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
setitimer(0x0, &(0x7f0000000200)={{}, {0x77359400}}, &(0x7f0000000240))
write$binfmt_script(r11, &(0x7f00000000c0)={'#! ', '', [], 0xa, "bc723cf4212c2d20b3b122df793b86b09400000000a948bdbfe0ae8698b7c01a6cedc2d8bce3eff355fdc1cd0278c8722cf82226"}, 0x38)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r11, 0x0)
mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000009000/0x4000)=nil)
r12 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="d800000019008111e00212ba0d8105040a600000ff0f040b067c55a1bc000900080006990300000015000500fe8081780d001500033f01400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

3m4.998009893s ago: executing program 5 (id=7489):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x86b82)
sendfile(r0, r0, 0x0, 0x24002de8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x5c, 0x4, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x2d, 0xc, "e8662d83c0e8b34ceee0d7698ff3c9124a8edb16518bd76ab396e1d8ed2c51b7bc0faf1db694bd11fa"}]}, 0x5c}}, 0x8010)
r2 = dup(r1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000380)='kfree\x00', r3, 0x0, 0xb9}, 0x18)
fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0)

3m4.586692041s ago: executing program 8 (id=7495):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001100)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000002600)=[{&(0x7f00000026c0)=""/4097, 0x1001}], 0x1, 0x40000005, 0x3)

3m4.467899516s ago: executing program 39 (id=7495):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001100)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000002600)=[{&(0x7f00000026c0)=""/4097, 0x1001}], 0x1, 0x40000005, 0x3)

3m3.166645302s ago: executing program 5 (id=7509):
r0 = io_uring_setup(0x4d3f, &(0x7f0000000d80)={0x0, 0xca6a, 0x40, 0x2003, 0x2f8})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000480), 0x66)

3m3.163410752s ago: executing program 40 (id=7509):
r0 = io_uring_setup(0x4d3f, &(0x7f0000000d80)={0x0, 0xca6a, 0x40, 0x2003, 0x2f8})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000480), 0x66)

4.855849911s ago: executing program 1 (id=10413):
syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000087f2bb4024042c017e22010203010902"], 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket$kcm(0xa, 0x2, 0x11)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001014010025bd7000fcdbdf2508", @ANYRES8=0x0, @ANYRES16=r1], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x20040004)

4.490648296s ago: executing program 0 (id=10417):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$session_to_parent(0x12)
add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0x0)
keyctl$session_to_parent(0x12)

4.217301138s ago: executing program 2 (id=10420):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0)
write$vga_arbiter(r3, &(0x7f0000001580)=ANY=[@ANYBLOB='target PCI:0:0:0.', @ANYRESHEX], 0x13)

4.061484504s ago: executing program 1 (id=10422):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0x74}}, 0x0)

4.035132906s ago: executing program 1 (id=10424):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(0x0, r0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg1\x00', <r2=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r1, @ANYBLOB="05002abd7000fddbdf2501000000060006004e240000fc0908802804008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0004098070000003060001000a00000014000200fe80000000000000000000000000000a0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000a0000080060001000a0000001400020000000000000000000000ffff640101010500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fc00000000000000000000000000000105000300020000000600010002000000080002000a0101020500030001000000d0000080060001000200000008000200ac1e01010500030000000000060001000a00000014000200000000000000000000000000000000000500030000000000060001000200000008000200ac1414bb0500030006000000060001000a00000014000200fe8000000000000000000000000000420500030001000000060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002007f0000010500030002000000060001000200000008000200000000000500030002000000ac000080060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fc00000000000000000000000000000005000300020000000600010002000000080002000a01010105000300000000000600010002000000080002007f0000010500030001000000060001000200000008000200e00000010500030001000000060001000a0000001400020020010000000000000000000000000001050003000200000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030001000000060001000a00000014000200ff0100000000000000000000000000010500030002000000060001000200000008000200ac1414aa05000300000000000c010080060001000200000008000200000000000500030001000000060001000a00000014000200fe8000000000000000000000000000410500030003000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a00000014000200fc0100000000000000000000000000010500030000000000060001000a00000014000200fc0200000000000000000000000000000500030003000000060001000200000008000200ac1414aa0500030003000000060001000a00000014000200fc0200000000000000000000000000010500030001000000060001000a00000014000200fe80000000000000000000000000002b050003000200000040000080080003000000000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000300030000008c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c24000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000a000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e22000000000000000000000000040500807002098094000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030002000000060001000a000000140002000000000000000000000000000000000105000300010000004c000080060001000200000008000200ac1414bb0500030002000000060001000200000008000200640100fe0500030001000000060001000200000008000200ac1414bb0500030002000000e8000080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300020000000600010002000000080002006401010005000300020000000600010002000000080002007f00000105000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200e00000010500030003000000060001000a00000014000200200100000000000000000000000000020500030001000000880000800600010002000000080002000000000005000300000000000600010002000000080002006401010205000300000000000600010002000000080002007f0000010500030003000000060001000a00000014000200200100000000000000000000000000000500030001000000060001000200000008000200ac14142d05000300010000001c000080060001000200000008000200ffffffff0500030003000000080003000200000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39221c02098058000080060001000200000008000200000000000500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe880000000000000000000000000101050003000100000040000080060001000200000008000200ac1e00010500030001000000060001000a0000001400020000000000000000000000ffff0a010102050003000300000000010080060001000200000008000200ac1e00010500030000000000060001000a00000014000200fe8800000000000000000000000000010500030003000000060001000200000008000200000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200200100000000000000000000000000010500030003000000060001000200000008000200e000000105000300000000000600010002000000080002007f00000105000300020000000600010002000000080002000a010100050003000000000064000080060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000a000000140002002001000000000000000000000000000205000300010000001c000080060001000200000008000200ac141416050003000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e08000100", @ANYRES32=r2, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40)

4.013500827s ago: executing program 1 (id=10425):
prlimit64(0x0, 0xe, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
socket$inet6(0xa, 0x1, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x149a01, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
close_range(r4, 0xffffffffffffffff, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.422596262s ago: executing program 0 (id=10426):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb4}}, 0x0)

3.200885992s ago: executing program 2 (id=10428):
bind$l2tp6(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00')
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000036000/0x2000)=nil, &(0x7f0000594000/0x4000)=nil, &(0x7f0000f36000/0x2000)=nil, &(0x7f0000918000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000c12000/0x2000)=nil, &(0x7f000003f000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x30}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x4, 0x1, 0xbf22, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x200002, 0x1}, 0x50)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)

3.090533446s ago: executing program 0 (id=10429):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2f8", 0xda}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="bf", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="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", 0x28b}, {&(0x7f0000001b00)="179161", 0x3}], 0x2}}], 0x3, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, 0x0)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

3.031032549s ago: executing program 1 (id=10431):
r0 = socket(0x23, 0x80805, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x1)
mknod$loop(0x0, 0x0, 0x1)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_CAPBSET_READ(0x59616d61, 0xffffffff)
ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x8)
listen(r0, 0x0)
connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0xed, 0x80, 0x3}, 0x10)
socket$inet6(0x10, 0x3, 0x0)
socket(0x10, 0x80002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r5, 0x5)

2.590224888s ago: executing program 9 (id=10432):
syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100a7", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r5, 0x29, 0x5, &(0x7f0000000140)=0x6, 0x4)
r6 = socket(0x200000000000011, 0x2, 0x0)
bind$packet(r6, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x14)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7d, 0x7d, 0x2, [@enum={0xd, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x2}, {0xb, 0x9}]}, @datasec={0xc, 0x6, 0x0, 0xf, 0x1, [{0x4, 0x8, 0xec9}, {0x4, 0x7, 0x4}, {0x4, 0x10, 0x2}, {0x2, 0x0, 0x8}, {0x4, 0x9, 0x1ff}, {0x4, 0x6, 0x7}], "a1"}, @func={0x7, 0x0, 0x0, 0xc, 0x4}]}}, &(0x7f0000000880)=""/103, 0x9a, 0x67, 0x1, 0xfffffff6, 0x10000}, 0x28)

2.416931126s ago: executing program 6 (id=10433):
r0 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0)
read$usbmon(r0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x3, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50)
ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x40)

2.007979613s ago: executing program 2 (id=10434):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000041dc3208570b8d2a74330102030109022400010000000009046003020301d8000905880300"], 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000300)={0x14, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

1.953156236s ago: executing program 0 (id=10435):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r1, @ANYBLOB="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", @ANYRES32, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40)

1.906115068s ago: executing program 0 (id=10436):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$session_to_parent(0x12)
add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0x0)
keyctl$session_to_parent(0x12)

1.114565682s ago: executing program 6 (id=10437):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20040040}, 0x801)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)

1.095141393s ago: executing program 6 (id=10438):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)={0x9c, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x50, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4004840}, 0x4010)

956.396468ms ago: executing program 0 (id=10439):
r0 = syz_open_procfs(0x0, 0x0)
writev(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r1)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_ep_write(r1, 0x81, 0xfffffffffffffe90, &(0x7f0000000200)="3125000600000000a09f9bc289437bc3001400")
readv(r2, &(0x7f0000000300)=[{&(0x7f00000019c0)=""/196, 0xc4}], 0x1)

937.873949ms ago: executing program 2 (id=10440):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f000000e0c0), 0x10010)
sendfile(r0, r1, &(0x7f0000000100)=0xd00, 0xfffd)

937.612129ms ago: executing program 9 (id=10441):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x3000000, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, [@tmpl={0xc4, 0x5, [{{@in6=@private2, 0x0, 0x32}, 0x0, @in=@broadcast}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in6=@empty, 0x0, 0x1, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x6c}, 0x0, @in6=@mcast2, 0x0, 0x4, 0x2}]}]}, 0x17c}}, 0x0)

937.291599ms ago: executing program 1 (id=10442):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe2(&(0x7f0000000040), 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$inet(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10)
ptrace$ARCH_SHSTK_LOCK(0x1e, r2, 0x0, 0x5003)
socket$packet(0x11, 0x3, 0x300)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700"], 0x38}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r8, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

936.410269ms ago: executing program 6 (id=10443):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48)
pipe2(&(0x7f0000000000)={0x0, <r3=>0x0}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48)
r5 = socket(0x2c, 0x3, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000014000000000000"], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r6, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r5}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp=r5}, 0x20)
close_range(r3, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_getscheduler(r0)
sched_setaffinity(r0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r7}, 0xe)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r8, &(0x7f0000000040)=0x1c8, 0x12)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)

907.245491ms ago: executing program 9 (id=10444):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c0007800800050000000000080006000000000008000600db000000240007"], 0xd0}}, 0x0)

838.611484ms ago: executing program 2 (id=10445):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x4, 0x1, 0x18, 0x2, 0x100, &(0x7f0000000440)="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"})

797.604095ms ago: executing program 2 (id=10446):
r0 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
gettid()
read$char_usb(r1, &(0x7f00000002c0)=""/151, 0x97)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_usb_disconnect(r0)

745.871968ms ago: executing program 9 (id=10447):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dff}}}, 0x90)

717.681529ms ago: executing program 9 (id=10448):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="180000008000000000000000fdffffff8500000007000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018", @ANYRES32, @ANYBLOB="0000000000000100b705000008000000850000006900000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15)

402.706772ms ago: executing program 9 (id=10449):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$session_to_parent(0x12)
add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0x0)
keyctl$session_to_parent(0x12)

65.537237ms ago: executing program 6 (id=10450):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]})
r0 = socket$inet6(0xa, 0x3, 0x5)
sendmmsg(r0, 0x0, 0x0, 0xc040)

0s ago: executing program 6 (id=10451):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x2ddfdbff, 0x2ffffffff}, 0xc)

kernel console output (not intermixed with test programs):

ond_slave_1): Enslaving as an active interface with an up link
[  664.847539][T31566] syz_tun: entered promiscuous mode
[  664.858617][T31566] syz_tun: left promiscuous mode
[  664.868387][T31573] loop9: detected capacity change from 0 to 1024
[  664.876475][T31573] EXT4-fs: Ignoring removed nobh option
[  664.882180][T31573] EXT4-fs: Ignoring removed bh option
[  664.894775][T31573] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  664.898570][T31496] team0: Port device team_slave_0 added
[  664.914424][T31496] team0: Port device team_slave_1 added
[  664.942496][T31573] netlink: '+}[@': attribute type 4 has an invalid length.
[  664.950082][T31573] netlink: 152 bytes leftover after parsing attributes in process `+}[@'.
[  664.975221][T31496] batman_adv: batadv0: Adding interface: batadv_slave_0
[  664.982338][T31496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  665.008662][T31496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  665.024098][T31573] .`: renamed from bond0
[  665.084189][T26425] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  665.172611][T31591] loop6: detected capacity change from 0 to 512
[  665.187554][T31591] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  665.211472][T31591] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  665.225906][T31591] ext4 filesystem being mounted at /291/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  665.238248][T26774] tipc: Disabling bearer <eth:syzkaller0>
[  665.244008][T31597] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub
[  665.291719][   T29] kauditd_printk_skb: 1489 callbacks suppressed
[  665.298154][   T29] audit: type=1400 audit(1764955579.902:66031): avc:  denied  { read write } for  pid=26425 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  665.323925][   T29] audit: type=1400 audit(1764955579.902:66032): avc:  denied  { open } for  pid=26425 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  665.357072][   T29] audit: type=1400 audit(1764955579.972:66033): avc:  denied  { ioctl } for  pid=26425 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  665.383637][   T29] audit: type=1326 audit(1764955579.972:66034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31598 comm="syz.0.9123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640561f749 code=0x7ffc0000
[  665.410360][   T29] audit: type=1326 audit(1764955579.972:66035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31598 comm="syz.0.9123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f640561f749 code=0x7ffc0000
[  665.437820][   T29] audit: type=1326 audit(1764955579.972:66036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31598 comm="syz.0.9123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f640561f783 code=0x7ffc0000
[  665.445424][T31599] EXT4-fs error (device loop6): ext4_lookup:1785: inode #12: comm syz.6.9120: iget: bad i_size value: 2533274857506816
[  665.462896][   T29] audit: type=1326 audit(1764955579.972:66037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31598 comm="syz.0.9123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f640561e1ff code=0x7ffc0000
[  665.504645][   T29] audit: type=1326 audit(1764955579.972:66038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31598 comm="syz.0.9123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f640561f7d7 code=0x7ffc0000
[  665.530576][   T29] audit: type=1400 audit(1764955580.062:66039): avc:  denied  { add_name } for  pid=31590 comm="syz.6.9120" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  665.553112][   T29] audit: type=1400 audit(1764955580.062:66040): avc:  denied  { create } for  pid=31590 comm="syz.6.9120" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  665.624932][T27257] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  665.704884][T26774] bond0 (unregistering): Released all slaves
[  665.723991][T31496] batman_adv: batadv0: Adding interface: batadv_slave_1
[  665.731192][T31496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  665.757916][T31496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  665.807016][T31604] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  665.814367][T26774] tipc: Disabling bearer <udp:syz2>
[  665.819734][T26774] tipc: Left network mode
[  665.842103][T31602] tipc: Disabling bearer <eth:syzkaller0>
[  665.934176][T31496] hsr_slave_0: entered promiscuous mode
[  665.964029][T31496] hsr_slave_1: entered promiscuous mode
[  665.974544][T31496] debugfs: 'hsr0' already exists in 'hsr'
[  665.980947][T31496] Cannot create hsr debugfs directory
[  665.989238][T26774] hsr_slave_0: left promiscuous mode
[  666.015612][T26774] hsr_slave_1: left promiscuous mode
[  666.039033][T26774] batman_adv: batadv0: Interface deactivated: veth1_vlan
[  666.046272][T26774] batman_adv: batadv0: Removing interface: veth1_vlan
[  666.151467][T26774] veth1_macvtap: left promiscuous mode
[  666.173848][T26774] veth0_macvtap: left promiscuous mode
[  666.179588][T26774] veth1_vlan: left promiscuous mode
[  666.422839][T31649] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9139'.
[  666.434867][T31645] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  666.474628][T31649] bridge_slave_1: left allmulticast mode
[  666.480430][T31649] bridge_slave_1: left promiscuous mode
[  666.486334][T31649] bridge0: port 2(bridge_slave_1) entered disabled state
[  666.518206][T31649] bridge_slave_0: left allmulticast mode
[  666.524078][T31649] bridge_slave_0: left promiscuous mode
[  666.529984][T31649] bridge0: port 1(bridge_slave_0) entered disabled state
[  666.624560][T31645] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  666.736080][T31645] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  666.844230][T31645] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  666.899905][T31659] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  666.929332][ T3662] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  666.938570][T31659] tipc: Disabling bearer <eth:syzkaller0>
[  666.967112][ T3662] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  666.984235][ T3662] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  667.027054][ T3662] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  667.125183][T31496] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  667.153238][T31496] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  667.176299][T31496] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  667.188896][T31666] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9143'.
[  667.200934][T31496] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  667.324139][T31496] 8021q: adding VLAN 0 to HW filter on device bond0
[  667.367156][T31496] 8021q: adding VLAN 0 to HW filter on device team0
[  667.388712][ T3662] bridge0: port 1(bridge_slave_0) entered blocking state
[  667.396423][ T3662] bridge0: port 1(bridge_slave_0) entered forwarding state
[  667.424112][ T3662] bridge0: port 2(bridge_slave_1) entered blocking state
[  667.431945][ T3662] bridge0: port 2(bridge_slave_1) entered forwarding state
[  667.455520][T31496] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  667.466721][T31496] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  667.493801][T31686] netlink: 36 bytes leftover after parsing attributes in process `syz.9.9150'.
[  667.609177][T31496] 8021q: adding VLAN 0 to HW filter on device batadv0
[  667.831278][T31496] veth0_vlan: entered promiscuous mode
[  667.848775][T31496] veth1_vlan: entered promiscuous mode
[  667.876925][T31496] veth0_macvtap: entered promiscuous mode
[  667.885932][T31496] veth1_macvtap: entered promiscuous mode
[  667.956063][T31496] batman_adv: batadv0: Interface activated: batadv_slave_0
[  667.975798][T31496] batman_adv: batadv0: Interface activated: batadv_slave_1
[  668.003825][T26762] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  668.013273][T26762] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  668.031561][T26762] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  668.040674][T26762] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  668.318806][T31716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9157'.
[  668.500634][T31730] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub
[  668.605633][T31734] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  668.684026][T31734] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  668.739547][T31748] loop9: detected capacity change from 0 to 128
[  668.747734][T31734] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  668.814087][T31734] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  668.877410][ T3651] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  668.904978][ T3651] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  668.937121][ T3651] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  668.940637][T31757] xt_CT: You must specify a L4 protocol and not use inversions on it
[  668.962033][ T3651] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  669.038831][T31748] bio_check_eod: 98 callbacks suppressed
[  669.038851][T31748] syz.9.9170: attempt to access beyond end of device
[  669.038851][T31748] loop9: rw=2049, sector=169, nr_sectors = 8 limit=128
[  669.130313][T31748] syz.9.9170: attempt to access beyond end of device
[  669.130313][T31748] loop9: rw=2049, sector=185, nr_sectors = 16 limit=128
[  669.182175][T31748] syz.9.9170: attempt to access beyond end of device
[  669.182175][T31748] loop9: rw=2049, sector=209, nr_sectors = 8 limit=128
[  669.271716][T31748] syz.9.9170: attempt to access beyond end of device
[  669.271716][T31748] loop9: rw=2049, sector=225, nr_sectors = 8 limit=128
[  669.290964][T31748] syz.9.9170: attempt to access beyond end of device
[  669.290964][T31748] loop9: rw=2049, sector=241, nr_sectors = 8 limit=128
[  669.305852][T31748] syz.9.9170: attempt to access beyond end of device
[  669.305852][T31748] loop9: rw=2049, sector=257, nr_sectors = 8 limit=128
[  669.323929][T31748] syz.9.9170: attempt to access beyond end of device
[  669.323929][T31748] loop9: rw=2049, sector=273, nr_sectors = 8 limit=128
[  669.337853][T31748] syz.9.9170: attempt to access beyond end of device
[  669.337853][T31748] loop9: rw=2049, sector=289, nr_sectors = 8 limit=128
[  669.353834][T31748] syz.9.9170: attempt to access beyond end of device
[  669.353834][T31748] loop9: rw=2049, sector=305, nr_sectors = 8 limit=128
[  669.368514][T31748] syz.9.9170: attempt to access beyond end of device
[  669.368514][T31748] loop9: rw=2049, sector=321, nr_sectors = 8 limit=128
[  669.628574][T31790] loop9: detected capacity change from 0 to 512
[  669.662900][T31790] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  669.695996][T31790] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  669.712024][T31790] ext4 filesystem being mounted at /465/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  669.806606][T31802] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  669.849626][T31815] EXT4-fs error (device loop9): ext4_lookup:1785: inode #12: comm syz.9.9185: iget: bad i_size value: 2533274857506816
[  669.873054][T31802] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  669.932601][T26769] Bluetooth: hci0: Frame reassembly failed (-84)
[  669.999567][T26425] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  670.011103][T31802] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  670.056983][T31802] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  670.348712][   T29] kauditd_printk_skb: 1099 callbacks suppressed
[  670.348730][   T29] audit: type=1400 audit(1764955584.963:67140): avc:  denied  { create } for  pid=31829 comm="syz.9.9206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  670.441026][T26779] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  670.486591][T26779] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  670.490047][   T29] audit: type=1400 audit(1764955585.003:67141): avc:  denied  { map_create } for  pid=31829 comm="syz.9.9206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  670.495712][T26779] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  670.515515][   T29] audit: type=1400 audit(1764955585.013:67142): avc:  denied  { prog_load } for  pid=31829 comm="syz.9.9206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  670.533442][T26779] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  670.543569][   T29] audit: type=1400 audit(1764955585.013:67143): avc:  denied  { bpf } for  pid=31829 comm="syz.9.9206" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  670.573952][   T29] audit: type=1400 audit(1764955585.023:67144): avc:  denied  { prog_load } for  pid=31829 comm="syz.9.9206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  670.593615][   T29] audit: type=1400 audit(1764955585.023:67145): avc:  denied  { bpf } for  pid=31829 comm="syz.9.9206" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  670.617774][   T29] audit: type=1400 audit(1764955585.023:67146): avc:  denied  { perfmon } for  pid=31829 comm="syz.9.9206" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  670.640484][   T29] audit: type=1400 audit(1764955585.023:67147): avc:  denied  { write } for  pid=31829 comm="syz.9.9206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  670.661477][   T29] audit: type=1400 audit(1764955585.033:67148): avc:  denied  { map_create } for  pid=31831 comm="syz.1.9196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  670.681143][   T29] audit: type=1400 audit(1764955585.033:67149): avc:  denied  { bpf } for  pid=31831 comm="syz.1.9196" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  670.870060][T31840] loop9: detected capacity change from 0 to 512
[  670.882624][T31840] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  670.943985][T31840] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  670.984708][T31840] ext4 filesystem being mounted at /468/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  671.050007][T31853] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  671.070489][T31860] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub
[  671.104432][T31840] EXT4-fs error (device loop9): ext4_lookup:1785: inode #12: comm syz.9.9198: iget: bad i_size value: 2533274857506816
[  671.119162][T31853] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  671.152788][T26425] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  671.173171][T31853] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  671.203986][T31867] loop9: detected capacity change from 0 to 128
[  671.238233][T31853] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  671.369040][T31877] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  671.592157][T31894] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  671.600867][T31894] tipc: Disabling bearer <eth:syzkaller0>
[  671.712714][T31905] loop9: detected capacity change from 0 to 128
[  671.880780][T31913] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub
[  671.961210][T22442] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  671.961487][ T3823] Bluetooth: hci0: command 0x1003 tx timeout
[  672.056037][T31931] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9237'.
[  672.068444][T31931] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9237'.
[  672.092577][T31918] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9231'.
[  672.117220][T31918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9231'.
[  672.180457][T31931] netlink: 28 bytes leftover after parsing attributes in process `syz.9.9237'.
[  672.189987][T31931] netlink: 28 bytes leftover after parsing attributes in process `syz.9.9237'.
[  672.204465][T31877] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  672.222984][T31931] netlink: 28 bytes leftover after parsing attributes in process `syz.9.9237'.
[  672.232125][T31931] netlink: 28 bytes leftover after parsing attributes in process `syz.9.9237'.
[  672.254870][T31931] loop9: detected capacity change from 0 to 2048
[  672.314781][T31877] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  672.328233][T31931] Alternate GPT is invalid, using primary GPT.
[  672.335217][T31931]  loop9: p2 p3 p7
[  672.408349][T31877] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  672.499419][T26769] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  672.513719][T26769] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  672.541225][T26769] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  672.568779][T31944] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub
[  672.577585][T26769] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  673.007412][T31971] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9253'.
[  673.058044][T31971] xt_hashlimit: max too large, truncated to 1048576
[  673.143359][ T3661] Bluetooth: hci0: Frame reassembly failed (-84)
[  673.156079][T31973] loop9: detected capacity change from 0 to 128
[  673.189835][T31971] xt_CT: You must specify a L4 protocol and not use inversions on it
[  673.923439][T31991] syz_tun: entered promiscuous mode
[  673.929170][T31991] syz_tun: left promiscuous mode
[  674.257498][ T3662] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  674.277998][ T3662] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  674.289697][T32013] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9266'.
[  674.314506][ T3662] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  674.323283][ T3662] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  674.335784][T32006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9266'.
[  674.444471][T32030] loop6: detected capacity change from 0 to 512
[  674.472385][T32030] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  674.472671][T32032] syzkaller0: entered promiscuous mode
[  674.480792][T32030] EXT4-fs (loop6): orphan cleanup on readonly fs
[  674.486252][T32032] syzkaller0: entered allmulticast mode
[  674.494233][T32030] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.9272: corrupted inode contents
[  674.511596][T32030] EXT4-fs (loop6): Remounting filesystem read-only
[  674.518391][T32030] EXT4-fs (loop6): 1 truncate cleaned up
[  674.524461][T26769] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  674.535252][T26769] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  674.546398][T26769] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started
[  674.557057][T32030] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  674.637454][T32025] netlink: 52 bytes leftover after parsing attributes in process `syz.6.9272'.
[  674.848659][T32052] tipc: Started in network mode
[  674.853771][T32052] tipc: Node identity 26c7a14fe14e, cluster identity 4711
[  674.861158][T32052] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  674.870845][T32052] tipc: Disabling bearer <eth:syzkaller0>
[  675.154917][T32069] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub
[  675.163716][ T3823] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  675.164704][T22442] Bluetooth: hci0: command 0x1003 tx timeout
[  675.351148][   T29] kauditd_printk_skb: 1308 callbacks suppressed
[  675.351164][   T29] audit: type=1400 audit(1764955589.974:68452): avc:  denied  { ioctl } for  pid=32071 comm="syz.0.9289" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  675.468481][   T29] audit: type=1400 audit(1764955589.974:68453): avc:  denied  { map_create } for  pid=32070 comm="syz.2.9288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  675.487870][   T29] audit: type=1400 audit(1764955590.014:68454): avc:  denied  { perfmon } for  pid=32070 comm="syz.2.9288" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  675.508971][   T29] audit: type=1400 audit(1764955590.014:68455): avc:  denied  { map_read map_write } for  pid=32070 comm="syz.2.9288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  675.529340][   T29] audit: type=1400 audit(1764955590.014:68456): avc:  denied  { prog_load } for  pid=32070 comm="syz.2.9288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  675.548897][   T29] audit: type=1400 audit(1764955590.014:68457): avc:  denied  { bpf } for  pid=32070 comm="syz.2.9288" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  675.570024][   T29] audit: type=1400 audit(1764955590.014:68458): avc:  denied  { perfmon } for  pid=32070 comm="syz.2.9288" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  675.591115][   T29] audit: type=1400 audit(1764955590.014:68459): avc:  denied  { prog_run } for  pid=32070 comm="syz.2.9288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  675.610303][   T29] audit: type=1400 audit(1764955590.034:68460): avc:  denied  { map_create } for  pid=32072 comm="syz.9.9290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  675.629822][   T29] audit: type=1400 audit(1764955590.034:68461): avc:  denied  { perfmon } for  pid=32072 comm="syz.9.9290" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  675.770507][T32090] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub
[  675.772797][T32095] netlink: 8 bytes leftover after parsing attributes in process `gtp'.
[  675.863366][T32097] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  675.879678][T32104] sd 0:0:1:0: device reset
[  675.902454][T32097] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  675.921102][T32104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9301'.
[  675.942378][T32097] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  675.965409][T32105] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  676.003045][T32097] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  676.022323][T32105] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  676.102566][T32105] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  676.146951][T27257] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  676.162432][T32105] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  676.243372][T26779] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  676.257287][ T3662] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  676.288509][ T3661] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  676.302308][ T3661] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  676.355814][T32139] loop9: detected capacity change from 0 to 128
[  676.391930][T32143] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  676.496539][T32147] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  676.518823][T32147] tipc: Disabling bearer <eth:syzkaller0>
[  676.759762][ T3661] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  676.783490][ T3661] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  676.806140][T26769] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  676.821700][T32160] loop9: detected capacity change from 0 to 512
[  676.828821][T26769] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  676.863974][T32160] EXT4-fs (loop9): revision level too high, forcing read-only mode
[  676.900966][T32160] EXT4-fs (loop9): orphan cleanup on readonly fs
[  676.909552][T32160] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.9323: corrupted inode contents
[  676.923525][T32160] EXT4-fs (loop9): Remounting filesystem read-only
[  676.939217][T32160] EXT4-fs (loop9): 1 truncate cleaned up
[  676.945880][ T3661] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  676.956496][ T3661] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  676.968347][ T3661] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started
[  676.979464][T32160] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  677.239462][T32187] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  677.259080][T32187] tipc: Disabling bearer <eth:syzkaller0>
[  677.431564][T32194] syzkaller0: entered promiscuous mode
[  677.437257][T32194] syzkaller0: entered allmulticast mode
[  677.854662][T32224] netlink: 'syz.2.9344': attribute type 1 has an invalid length.
[  677.874573][T32227] tmpfs: Bad value for 'mpol'
[  677.886664][T32224] 8021q: adding VLAN 0 to HW filter on device bond1
[  677.916886][T32229] bond1: (slave geneve2): making interface the new active one
[  677.931988][T32229] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  678.041729][T32227] netlink: 'syz.6.9345': attribute type 20 has an invalid length.
[  678.049587][T32227] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9345'.
[  678.104016][T26774] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  678.113864][T32227] netlink: 'syz.6.9345': attribute type 20 has an invalid length.
[  678.122176][T32227] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9345'.
[  678.137234][T26774] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  678.153359][T32235] pimreg: entered allmulticast mode
[  678.168421][T32235] pimreg: left allmulticast mode
[  678.197742][T26774] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  678.210604][ T3639] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  678.804009][T26425] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  678.865257][T32258] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  678.943063][T32258] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  679.008267][T32258] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  679.092672][T32258] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  679.968556][T32339] FAULT_INJECTION: forcing a failure.
[  679.968556][T32339] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  679.981698][T32339] CPU: 1 UID: 0 PID: 32339 Comm: syz.9.9388 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  679.981728][T32339] Tainted: [W]=WARN
[  679.981763][T32339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  679.981792][T32339] Call Trace:
[  679.981800][T32339]  <TASK>
[  679.981810][T32339]  __dump_stack+0x1d/0x30
[  679.981830][T32339]  dump_stack_lvl+0xe8/0x140
[  679.981843][T32339]  dump_stack+0x15/0x1b
[  679.981926][T32339]  should_fail_ex+0x265/0x280
[  679.982010][T32339]  should_fail+0xb/0x20
[  679.982090][T32339]  should_fail_usercopy+0x1a/0x20
[  679.982186][T32339]  _copy_from_user+0x1c/0xb0
[  679.982211][T32339]  __sys_connect+0xd0/0x2b0
[  679.982235][T32339]  __x64_sys_connect+0x3f/0x50
[  679.982257][T32339]  x64_sys_call+0x2e09/0x3000
[  679.982346][T32339]  do_syscall_64+0xd8/0x2a0
[  679.982373][T32339]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  679.982460][T32339] RIP: 0033:0x7f6fecd6f749
[  679.982525][T32339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  679.982545][T32339] RSP: 002b:00007f6feb7ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  679.982559][T32339] RAX: ffffffffffffffda RBX: 00007f6fecfc6090 RCX: 00007f6fecd6f749
[  679.982567][T32339] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000006
[  679.982575][T32339] RBP: 00007f6feb7ae090 R08: 0000000000000000 R09: 0000000000000000
[  679.982583][T32339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  679.982629][T32339] R13: 00007f6fecfc6128 R14: 00007f6fecfc6090 R15: 00007ffe22426548
[  679.982640][T32339]  </TASK>
[  680.438437][   T29] kauditd_printk_skb: 1594 callbacks suppressed
[  680.438527][   T29] audit: type=1400 audit(1764955595.054:70050): avc:  denied  { read write } for  pid=27257 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  680.469568][   T29] audit: type=1400 audit(1764955595.054:70051): avc:  denied  { open } for  pid=27257 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  680.493934][   T29] audit: type=1400 audit(1764955595.054:70052): avc:  denied  { ioctl } for  pid=27257 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  680.520239][   T29] audit: type=1400 audit(1764955595.064:70053): avc:  denied  { read } for  pid=32340 comm="syz.6.9389" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  680.543487][   T29] audit: type=1400 audit(1764955595.064:70054): avc:  denied  { open } for  pid=32340 comm="syz.6.9389" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  680.567206][   T29] audit: type=1400 audit(1764955595.064:70055): avc:  denied  { ioctl } for  pid=32340 comm="syz.6.9389" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  680.592365][   T29] audit: type=1400 audit(1764955595.064:70056): avc:  denied  { prog_load } for  pid=32340 comm="syz.6.9389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  680.611859][   T29] audit: type=1400 audit(1764955595.064:70057): avc:  denied  { bpf } for  pid=32340 comm="syz.6.9389" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  680.632660][   T29] audit: type=1400 audit(1764955595.064:70058): avc:  denied  { perfmon } for  pid=32340 comm="syz.6.9389" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  680.653965][   T29] audit: type=1400 audit(1764955595.064:70059): avc:  denied  { open } for  pid=32340 comm="syz.6.9389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  680.715844][T32345] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  680.724776][T32345] tipc: Disabling bearer <eth:syzkaller0>
[  680.738542][T26774] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  680.759959][T26774] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  680.799261][T26774] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  680.826714][T26774] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  680.878462][T32354] ip6gre1: entered promiscuous mode
[  680.883812][T32354] ip6gre1: entered allmulticast mode
[  680.900380][T32354] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=32354 comm=syz.6.9394
[  680.916012][T32354] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9394'.
[  680.961772][T32362] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  680.974843][T32362] tipc: Disabling bearer <eth:syzkaller0>
[  681.266691][T32394] loop6: detected capacity change from 0 to 512
[  681.285206][T32388] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  681.297280][T32394] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  681.313238][T32394] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  681.326660][T32394] ext4 filesystem being mounted at /334/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  681.338823][T32388] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  681.384145][T32388] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  681.395959][T32394] EXT4-fs error (device loop6): ext4_lookup:1785: inode #12: comm syz.6.9409: iget: bad i_size value: 2533274857506816
[  681.422391][T32388] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  681.433862][T27257] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  681.489841][ T3651] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  681.502329][ T4078] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  681.516413][ T4078] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  681.530244][ T4078] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  681.694785][T32428] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  681.754654][T32428] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  681.795026][T32428] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  681.834348][T32428] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  681.953196][T32440] FAULT_INJECTION: forcing a failure.
[  681.953196][T32440] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  681.967120][T32440] CPU: 1 UID: 0 PID: 32440 Comm: syz.0.9420 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  681.967160][T32440] Tainted: [W]=WARN
[  681.967168][T32440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  681.967260][T32440] Call Trace:
[  681.967267][T32440]  <TASK>
[  681.967276][T32440]  __dump_stack+0x1d/0x30
[  681.967299][T32440]  dump_stack_lvl+0xe8/0x140
[  681.967320][T32440]  dump_stack+0x15/0x1b
[  681.967337][T32440]  should_fail_ex+0x265/0x280
[  681.967421][T32440]  should_fail+0xb/0x20
[  681.967450][T32440]  should_fail_usercopy+0x1a/0x20
[  681.967468][T32440]  _copy_from_user+0x1c/0xb0
[  681.967563][T32440]  __sys_sendto+0x19e/0x330
[  681.967605][T32440]  __x64_sys_sendto+0x76/0x90
[  681.967630][T32440]  x64_sys_call+0x29a7/0x3000
[  681.967692][T32440]  do_syscall_64+0xd8/0x2a0
[  681.967729][T32440]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  681.967754][T32440] RIP: 0033:0x7f640561f749
[  681.967772][T32440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  681.967829][T32440] RSP: 002b:00007f6404087038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  681.967849][T32440] RAX: ffffffffffffffda RBX: 00007f6405875fa0 RCX: 00007f640561f749
[  681.967861][T32440] RDX: 000000000000ffe0 RSI: 0000200000000000 RDI: 0000000000000004
[  681.967873][T32440] RBP: 00007f6404087090 R08: 0000200000000100 R09: 000000000000001c
[  681.967888][T32440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  681.967960][T32440] R13: 00007f6405876038 R14: 00007f6405875fa0 R15: 00007fff627249b8
[  681.967979][T32440]  </TASK>
[  682.159759][T32441] loop9: detected capacity change from 0 to 512
[  682.172459][T32441] EXT4-fs (loop9): revision level too high, forcing read-only mode
[  682.182683][T32441] EXT4-fs (loop9): orphan cleanup on readonly fs
[  682.196041][T32441] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.9418: corrupted inode contents
[  682.217856][T32441] EXT4-fs (loop9): Remounting filesystem read-only
[  682.224774][T32441] EXT4-fs (loop9): 1 truncate cleaned up
[  682.230541][ T3639] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  682.241324][ T3639] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  682.255002][T32447] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub
[  682.259333][ T3639] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started
[  682.274550][T32441] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  682.399567][T32458] syzkaller0: entered promiscuous mode
[  682.405224][T32458] syzkaller0: entered allmulticast mode
[  682.482450][T32461] loop6: detected capacity change from 0 to 512
[  682.492200][T32461] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  682.522536][T32461] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  682.541304][T32461] ext4 filesystem being mounted at /337/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  682.620785][T32471] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9431'.
[  682.621177][T32461] EXT4-fs error (device loop6): ext4_lookup:1785: inode #12: comm syz.6.9428: iget: bad i_size value: 2533274857506816
[  682.629855][T32471] netlink: 196 bytes leftover after parsing attributes in process `syz.2.9431'.
[  682.667053][T32471] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9431'.
[  682.690180][T32471] netlink: 196 bytes leftover after parsing attributes in process `syz.2.9431'.
[  682.701172][T27257] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  682.804599][T32471] netlink: 'syz.2.9431': attribute type 10 has an invalid length.
[  682.812679][T32471] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9431'.
[  682.845659][T32471] team0: Port device geneve1 added
[  682.934001][T32481] loop6: detected capacity change from 0 to 128
[  683.324967][T32501] SELinux: failed to load policy
[  683.551017][T32517] loop6: detected capacity change from 0 to 512
[  683.576454][T32517] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  683.617573][T32517] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  683.648176][T32517] ext4 filesystem being mounted at /348/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  683.690818][T32517] EXT4-fs error (device loop6): ext4_lookup:1785: inode #12: comm syz.6.9451: iget: bad i_size value: 2533274857506816
[  683.723173][T27257] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  683.848858][T32522] SELinux: failed to load policy
[  683.907383][T26425] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  684.037217][T32540] syz_tun: entered promiscuous mode
[  684.042827][T32540] syz_tun: left promiscuous mode
[  684.101553][T32546] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  684.114519][T32546] tipc: Disabling bearer <eth:syzkaller0>
[  684.117334][T32550] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub
[  684.171674][T32552] loop9: detected capacity change from 0 to 128
[  684.273458][T32552] bio_check_eod: 98 callbacks suppressed
[  684.273475][T32552] syz.9.9467: attempt to access beyond end of device
[  684.273475][T32552] loop9: rw=2049, sector=169, nr_sectors = 8 limit=128
[  684.295522][T32552] syz.9.9467: attempt to access beyond end of device
[  684.295522][T32552] loop9: rw=2049, sector=185, nr_sectors = 16 limit=128
[  684.312418][T32552] syz.9.9467: attempt to access beyond end of device
[  684.312418][T32552] loop9: rw=2049, sector=209, nr_sectors = 8 limit=128
[  684.328164][T32552] syz.9.9467: attempt to access beyond end of device
[  684.328164][T32552] loop9: rw=2049, sector=225, nr_sectors = 8 limit=128
[  684.344318][T32552] syz.9.9467: attempt to access beyond end of device
[  684.344318][T32552] loop9: rw=2049, sector=241, nr_sectors = 8 limit=128
[  684.368024][T32552] syz.9.9467: attempt to access beyond end of device
[  684.368024][T32552] loop9: rw=2049, sector=257, nr_sectors = 8 limit=128
[  684.389275][T32552] syz.9.9467: attempt to access beyond end of device
[  684.389275][T32552] loop9: rw=2049, sector=273, nr_sectors = 8 limit=128
[  684.405900][T32552] syz.9.9467: attempt to access beyond end of device
[  684.405900][T32552] loop9: rw=2049, sector=289, nr_sectors = 8 limit=128
[  684.420606][T32552] syz.9.9467: attempt to access beyond end of device
[  684.420606][T32552] loop9: rw=2049, sector=305, nr_sectors = 8 limit=128
[  684.434605][T32552] syz.9.9467: attempt to access beyond end of device
[  684.434605][T32552] loop9: rw=2049, sector=321, nr_sectors = 8 limit=128
[  684.548830][T32559] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  684.611217][T32559] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  684.652199][T32559] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  684.703262][T32564] loop9: detected capacity change from 0 to 512
[  684.721251][T32564] EXT4-fs (loop9): revision level too high, forcing read-only mode
[  684.731377][T32564] EXT4-fs (loop9): orphan cleanup on readonly fs
[  684.739658][T32564] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.9470: corrupted inode contents
[  684.753959][T32564] EXT4-fs (loop9): Remounting filesystem read-only
[  684.755233][T32559] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  684.761205][T32564] EXT4-fs (loop9): 1 truncate cleaned up
[  684.777105][T26779] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  684.787966][T26779] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  684.798725][T26779] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started
[  684.809949][T32564] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  684.878179][T26769] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  684.898601][T26769] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  684.909877][ T3823] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  684.926255][T26769] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  684.939851][T26769] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  685.163286][T32579] loop6: detected capacity change from 0 to 128
[  685.276305][T32591] ip6gre1: entered promiscuous mode
[  685.281584][T32591] ip6gre1: entered allmulticast mode
[  685.294425][T32591] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=32591 comm=syz.0.9478
[  685.320774][T32591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9478'.
[  685.356177][ T3651] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  685.368429][T26779] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  685.387029][T26779] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  685.414056][T26779] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  685.440724][   T29] kauditd_printk_skb: 1437 callbacks suppressed
[  685.440741][   T29] audit: type=1400 audit(1764955600.065:71485): avc:  denied  { read } for  pid=32595 comm="syz.0.9480" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  685.471526][   T29] audit: type=1400 audit(1764955600.065:71486): avc:  denied  { open } for  pid=32595 comm="syz.0.9480" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  685.632398][   T29] audit: type=1400 audit(1764955600.095:71487): avc:  denied  { prog_load } for  pid=32595 comm="syz.0.9480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  685.651974][   T29] audit: type=1400 audit(1764955600.095:71488): avc:  denied  { bpf } for  pid=32595 comm="syz.0.9480" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  685.673016][   T29] audit: type=1400 audit(1764955600.095:71489): avc:  denied  { perfmon } for  pid=32595 comm="syz.0.9480" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  685.694805][   T29] audit: type=1400 audit(1764955600.095:71490): avc:  denied  { open } for  pid=32592 comm="syz.2.9479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  685.715825][   T29] audit: type=1400 audit(1764955600.095:71491): avc:  denied  { perfmon } for  pid=32592 comm="syz.2.9479" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  685.738560][   T29] audit: type=1400 audit(1764955600.095:71492): avc:  denied  { kernel } for  pid=32592 comm="syz.2.9479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  685.759558][   T29] audit: type=1400 audit(1764955600.115:71493): avc:  denied  { bpf } for  pid=32595 comm="syz.0.9480" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  685.780850][   T29] audit: type=1400 audit(1764955600.115:71494): avc:  denied  { open } for  pid=32595 comm="syz.0.9480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  685.804078][T32602] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  685.866602][T32602] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  685.879101][T32604] SELinux:  policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c
[  685.889501][T32604] SELinux: failed to load policy
[  685.924350][T32602] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  686.003091][T32602] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  686.045774][ T3662] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  686.068711][ T3662] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  686.082930][ T3662] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  686.094024][ T3662] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  686.104967][T32612] loop6: detected capacity change from 0 to 128
[  686.575827][T32633] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  686.585980][T32633] tipc: Disabling bearer <eth:syzkaller0>
[  686.600436][T32637] syz_tun: entered promiscuous mode
[  686.605879][T32637] syz_tun: left promiscuous mode
[  686.719689][T32645] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  686.735189][T32645] tipc: Disabling bearer <eth:syzkaller0>
[  687.031639][T26425] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  687.088619][T32667] syz.9.9508 (32667): /proc/32665/oom_adj is deprecated, please use /proc/32665/oom_score_adj instead.
[  687.323503][T32671] FAULT_INJECTION: forcing a failure.
[  687.323503][T32671] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  687.336894][T32671] CPU: 1 UID: 0 PID: 32671 Comm: syz.9.9509 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  687.336928][T32671] Tainted: [W]=WARN
[  687.336935][T32671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  687.336948][T32671] Call Trace:
[  687.336956][T32671]  <TASK>
[  687.337039][T32671]  __dump_stack+0x1d/0x30
[  687.337077][T32671]  dump_stack_lvl+0xe8/0x140
[  687.337103][T32671]  dump_stack+0x15/0x1b
[  687.337122][T32671]  should_fail_ex+0x265/0x280
[  687.337158][T32671]  should_fail_alloc_page+0xf2/0x100
[  687.337194][T32671]  __alloc_frozen_pages_noprof+0xff/0x360
[  687.337241][T32671]  alloc_pages_mpol+0xb3/0x260
[  687.337268][T32671]  alloc_migration_target_by_mpol+0x11b/0x280
[  687.337491][T32671]  migrate_pages_batch+0x349/0x1b60
[  687.337518][T32671]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[  687.337624][T32671]  ? __walk_page_range+0x324/0x340
[  687.337650][T32671]  migrate_pages+0xf55/0x1760
[  687.337688][T32671]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[  687.337732][T32671]  __se_sys_mbind+0x975/0xac0
[  687.337766][T32671]  __x64_sys_mbind+0x78/0x90
[  687.337827][T32671]  x64_sys_call+0x2a2b/0x3000
[  687.337860][T32671]  do_syscall_64+0xd8/0x2a0
[  687.337888][T32671]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  687.337909][T32671] RIP: 0033:0x7f6fecd6f749
[  687.337925][T32671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  687.338008][T32671] RSP: 002b:00007f6feb7ae038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[  687.338026][T32671] RAX: ffffffffffffffda RBX: 00007f6fecfc6090 RCX: 00007f6fecd6f749
[  687.338039][T32671] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000200000000000
[  687.338051][T32671] RBP: 00007f6feb7ae090 R08: 0000000000000000 R09: 0000000000000002
[  687.338102][T32671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  687.338116][T32671] R13: 00007f6fecfc6128 R14: 00007f6fecfc6090 R15: 00007ffe22426548
[  687.338137][T32671]  </TASK>
[  687.550928][ T3823] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  687.593602][T32673] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub
[  687.822837][T32690] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  687.845613][T32690] tipc: Disabling bearer <eth:syzkaller0>
[  687.900458][T32692] ip6gre1: entered promiscuous mode
[  687.906202][T32692] ip6gre1: entered allmulticast mode
[  687.938616][T32692] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9517'.
[  688.020534][T32696] netlink: 'syz.9.9518': attribute type 2 has an invalid length.
[  688.028847][T32696] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9518'.
[  688.057089][T32700] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub
[  688.084389][T32698] IPVS: Unknown mcast interface: syzkaller0
[  688.113218][T32705] vhci_hcd: invalid port number 129
[  688.118737][T32705] vhci_hcd: default hub control req: 400f v0004 i0081 l0
[  688.635950][T32734] syzkaller0: entered promiscuous mode
[  688.641563][T32734] syzkaller0: entered allmulticast mode
[  688.930685][ T3639] Bluetooth: hci0: Frame reassembly failed (-84)
[  689.088210][T32752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9537'.
[  689.110717][ T4078] Bluetooth: hci1: Frame reassembly failed (-84)
[  689.146855][T32752] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  689.154442][T32752] batman_adv: batadv0: Removing interface: batadv_slave_0
[  689.166576][T32752] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  689.174341][T32752] batman_adv: batadv0: Removing interface: batadv_slave_1
[  689.437066][  T303] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9545'.
[  689.757614][  T321] FAULT_INJECTION: forcing a failure.
[  689.757614][  T321] name failslab, interval 1, probability 0, space 0, times 0
[  689.770636][  T321] CPU: 1 UID: 0 PID: 321 Comm: syz.6.9553 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  689.770666][  T321] Tainted: [W]=WARN
[  689.770671][  T321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  689.770679][  T321] Call Trace:
[  689.770708][  T321]  <TASK>
[  689.770714][  T321]  __dump_stack+0x1d/0x30
[  689.770730][  T321]  dump_stack_lvl+0xe8/0x140
[  689.770743][  T321]  dump_stack+0x15/0x1b
[  689.770754][  T321]  should_fail_ex+0x265/0x280
[  689.770789][  T321]  should_failslab+0x8c/0xb0
[  689.770808][  T321]  kmem_cache_alloc_noprof+0x50/0x4a0
[  689.770832][  T321]  ? dup_fd+0x3a/0x510
[  689.770987][  T321]  dup_fd+0x3a/0x510
[  689.771085][  T321]  ? __rcu_read_unlock+0x4f/0x70
[  689.771105][  T321]  ? __fget_files+0x184/0x1c0
[  689.771125][  T321]  __se_sys_close_range+0x103/0x470
[  689.771203][  T321]  ? __secure_computing+0x82/0x150
[  689.771234][  T321]  __x64_sys_close_range+0x43/0x50
[  689.771266][  T321]  x64_sys_call+0x1eea/0x3000
[  689.771290][  T321]  do_syscall_64+0xd8/0x2a0
[  689.771347][  T321]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  689.771370][  T321] RIP: 0033:0x7fac0ed2f749
[  689.771385][  T321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  689.771403][  T321] RSP: 002b:00007fac0d797038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  689.771424][  T321] RAX: ffffffffffffffda RBX: 00007fac0ef85fa0 RCX: 00007fac0ed2f749
[  689.771453][  T321] RDX: 0000000000000002 RSI: ffffffffffffffff RDI: 0000000000000000
[  689.771466][  T321] RBP: 00007fac0d797090 R08: 0000000000000000 R09: 0000000000000000
[  689.771485][  T321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  689.771500][  T321] R13: 00007fac0ef86038 R14: 00007fac0ef85fa0 R15: 00007fffd73038b8
[  689.771521][  T321]  </TASK>
[  690.160250][  T338] tc_dump_action: action bad kind
[  690.449908][   T29] kauditd_printk_skb: 1253 callbacks suppressed
[  690.449923][   T29] audit: type=1400 audit(1764955605.075:72748): avc:  denied  { read write } for  pid=360 comm="syz.6.9568" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  690.450571][  T361] loop6: detected capacity change from 0 to 128
[  690.456379][   T29] audit: type=1400 audit(1764955605.075:72749): avc:  denied  { open } for  pid=360 comm="syz.6.9568" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  690.487010][  T361] tipc: New replicast peer: 255.255.255.255
[  690.487175][  T361] tipc: Enabled bearer <udp:s>, priority 1
[  690.526062][  T364] syz_tun: entered promiscuous mode
[  690.531578][  T364] syz_tun: left promiscuous mode
[  690.536821][   T29] audit: type=1400 audit(1764955605.075:72750): avc:  denied  { ioctl } for  pid=360 comm="syz.6.9568" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  690.562763][   T29] audit: type=1400 audit(1764955605.105:72751): avc:  denied  { mounton } for  pid=360 comm="syz.6.9568" path="/374/file0" dev="tmpfs" ino=1994 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  690.585468][   T29] audit: type=1400 audit(1764955605.105:72752): avc:  denied  { mount } for  pid=360 comm="syz.6.9568" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  690.607519][   T29] audit: type=1400 audit(1764955605.105:72753): avc:  denied  { read write } for  pid=360 comm="syz.6.9568" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  690.631594][   T29] audit: type=1400 audit(1764955605.105:72754): avc:  denied  { read write open } for  pid=360 comm="syz.6.9568" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  690.656814][   T29] audit: type=1400 audit(1764955605.105:72755): avc:  denied  { create } for  pid=360 comm="syz.6.9568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  690.677734][   T29] audit: type=1400 audit(1764955605.105:72756): avc:  denied  { write } for  pid=360 comm="syz.6.9568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  690.698462][   T29] audit: type=1400 audit(1764955605.105:72757): avc:  denied  { read } for  pid=360 comm="syz.6.9568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  690.870087][  T379] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub
[  690.949056][  T384] SELinux:  Context system_u:object_r:udev_var_run_t:s0 is not valid (left unmapped).
[  690.989003][T11309] Bluetooth: hci0: command 0x1003 tx timeout
[  690.995237][ T3823] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  691.100276][  T398] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9584'.
[  691.149009][T22442] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  691.155793][ T3823] Bluetooth: hci1: command 0x1003 tx timeout
[  691.157288][  T402] loop9: detected capacity change from 0 to 512
[  691.235501][  T402] EXT4-fs error (device loop9): ext4_expand_extra_isize_ea:2807: inode #11: comm syz.9.9581: corrupted xattr block 95: invalid header
[  691.289965][  T402] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.9581: bg 0: block 7: invalid block bitmap
[  691.349869][  T402] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6689: Corrupt filesystem
[  691.388537][  T402] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2971: inode #11: comm syz.9.9581: corrupted xattr block 95: invalid header
[  691.441622][  T402] EXT4-fs warning (device loop9): ext4_evict_inode:273: xattr delete (err -117)
[  691.467904][  T402] EXT4-fs (loop9): 1 orphan inode deleted
[  691.474150][  T402] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  691.496818][  T402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  691.583564][  T426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9591'.
[  691.598759][   T10] tipc: Node number set to 3917876728
[  691.704384][  T432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9593'.
[  691.791028][  T438] syz_tun: entered promiscuous mode
[  691.796588][  T438] syz_tun: left promiscuous mode
[  691.901371][  T444] lo speed is unknown, defaulting to 1000
[  691.937860][  T444] lo speed is unknown, defaulting to 1000
[  691.947428][  T444] lo speed is unknown, defaulting to 1000
[  691.962229][  T444] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  691.981495][  T444] lo speed is unknown, defaulting to 1000
[  691.987880][  T444] lo speed is unknown, defaulting to 1000
[  691.994896][  T444] lo speed is unknown, defaulting to 1000
[  692.001135][  T444] lo speed is unknown, defaulting to 1000
[  692.007435][  T444] lo speed is unknown, defaulting to 1000
[  692.013694][  T444] lo speed is unknown, defaulting to 1000
[  692.020006][  T444] lo speed is unknown, defaulting to 1000
[  692.026182][  T444] lo speed is unknown, defaulting to 1000
[  692.160052][  T467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9604'.
[  692.307873][  T475] syz_tun: entered promiscuous mode
[  692.326221][  T475] syz_tun: left promiscuous mode
[  692.490785][  T491] serio: Serial port ptm0
[  692.565280][  T484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9610'.
[  692.735645][  T508] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=508 comm=syz.6.9618
[  692.782956][  T508] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9618'.
[  692.818691][  T512] netlink: 'syz.0.9619': attribute type 3 has an invalid length.
[  692.910897][  T514] syz_tun: entered promiscuous mode
[  692.916323][  T514] syz_tun: left promiscuous mode
[  693.315194][  T516] loop6: detected capacity change from 0 to 32768
[  693.399179][  T516]  loop6: p1 p2 p3 < p5 p6 p7 >
[  693.422003][  T516] loop6: p2 size 16775168 extends beyond EOD, truncated
[  693.474700][  T516] loop6: p5 start 4294970168 is beyond EOD, truncated
[  693.584986][  T539] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=539 comm=syz.0.9631
[  693.598900][  T539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9631'.
[  693.609841][  T538] syz_tun: entered promiscuous mode
[  693.635993][  T538] syz_tun: left promiscuous mode
[  693.701512][  T547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9634'.
[  693.719653][  T547] netlink: 108 bytes leftover after parsing attributes in process `syz.1.9634'.
[  693.827661][  T558] Cannot find add_set index 0 as target
[  693.930808][  T570] loop6: detected capacity change from 0 to 128
[  693.938114][  T564] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  693.989990][  T573] pim6reg: entered allmulticast mode
[  693.998081][  T564] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  694.025777][  T573] SELinux: ebitmap start bit (280) is not a multiple of the map unit size (64)
[  694.036756][  T573] SELinux: failed to load policy
[  694.045016][  T573] pim6reg: left allmulticast mode
[  694.054015][  T564] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  694.120285][  T564] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  694.167637][ T3651] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  694.188359][ T3651] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  694.198845][ T3651] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  694.217162][ T3651] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  694.891212][  T600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9651'.
[  695.223482][  T619] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub
[  695.320519][  T625] 
@0Ù: renamed from bond_slave_1
[  695.461970][   T29] kauditd_printk_skb: 1457 callbacks suppressed
[  695.461986][   T29] audit: type=1400 audit(1764955610.086:74215): avc:  denied  { create } for  pid=640 comm="syz.2.9669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  695.488444][   T29] audit: type=1400 audit(1764955610.086:74216): avc:  denied  { map_create } for  pid=640 comm="syz.2.9669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  695.507809][   T29] audit: type=1400 audit(1764955610.086:74217): avc:  denied  { map_read map_write } for  pid=640 comm="syz.2.9669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  695.528321][   T29] audit: type=1400 audit(1764955610.086:74218): avc:  denied  { prog_load } for  pid=640 comm="syz.2.9669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  695.547662][   T29] audit: type=1400 audit(1764955610.086:74219): avc:  denied  { bpf } for  pid=640 comm="syz.2.9669" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  695.568323][   T29] audit: type=1400 audit(1764955610.086:74220): avc:  denied  { perfmon } for  pid=640 comm="syz.2.9669" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  695.759221][  T644] lo speed is unknown, defaulting to 1000
[  695.930071][   T29] audit: type=1400 audit(1764955610.236:74221): avc:  denied  { create } for  pid=642 comm="syz.2.9670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  695.949702][   T29] audit: type=1400 audit(1764955610.246:74222): avc:  denied  { mounton } for  pid=642 comm="syz.2.9670" path="/126" dev="tmpfs" ino=686 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  695.972033][   T29] audit: type=1400 audit(1764955610.266:74223): avc:  denied  { map_create } for  pid=631 comm="syz.0.9666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  695.991244][   T29] audit: type=1400 audit(1764955610.266:74224): avc:  denied  { perfmon } for  pid=631 comm="syz.0.9666" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  696.420587][  T651] lo speed is unknown, defaulting to 1000
[  696.692726][  T660] loop6: detected capacity change from 0 to 128
[  697.160670][  T675] lo speed is unknown, defaulting to 1000
[  697.700605][  T685] __nla_validate_parse: 3 callbacks suppressed
[  697.700653][  T685] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9681'.
[  697.720555][  T686] sch_tbf: burst 19869 is lower than device lo mtu (65550) !
[  697.788363][  T694] netlink: 'syz.0.9684': attribute type 21 has an invalid length.
[  697.824588][  T694] x_tables: unsorted underflow at hook 3
[  697.878641][  T699] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  697.909403][  T699] 8021q: adding VLAN 0 to HW filter on device bond1
[  697.921379][  T699] bond1: (slave lo): Enslaving as a backup interface with an up link
[  697.939407][T26773] Bluetooth: hci0: Frame reassembly failed (-84)
[  697.951462][  T699] net_ratelimit: 14 callbacks suppressed
[  697.951476][  T699] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  698.018041][T26773] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  698.074845][  T695] lo speed is unknown, defaulting to 1000
[  698.108051][T26773] bond1: (slave lo): link status up again after 0 ms
[  698.138068][T26773] bond1: (slave lo): link status up again after 0 ms
[  698.153924][T26773] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  698.183854][T26773] bond1: (slave lo): link status up again after 0 ms
[  698.220007][ T3639] bond1: (slave lo): link status up again after 0 ms
[  698.226951][ T3639] bond1: (slave lo): failed to get link speed/duplex
[  698.247022][  T714] FAULT_INJECTION: forcing a failure.
[  698.247022][  T714] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  698.260226][  T714] CPU: 1 UID: 0 PID: 714 Comm: syz.1.9691 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  698.260264][  T714] Tainted: [W]=WARN
[  698.260272][  T714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  698.260287][  T714] Call Trace:
[  698.260300][  T714]  <TASK>
[  698.260309][  T714]  __dump_stack+0x1d/0x30
[  698.260336][  T714]  dump_stack_lvl+0xe8/0x140
[  698.260430][  T714]  dump_stack+0x15/0x1b
[  698.260516][  T714]  should_fail_ex+0x265/0x280
[  698.260552][  T714]  should_fail+0xb/0x20
[  698.260611][  T714]  should_fail_usercopy+0x1a/0x20
[  698.260628][  T714]  fpu__restore_sig+0x12d/0xaa0
[  698.260727][  T714]  ? x86_task_fpu+0x36/0x60
[  698.260879][  T714]  ? should_fail_ex+0xdb/0x280
[  698.261043][  T714]  __ia32_sys_rt_sigreturn+0x29f/0x350
[  698.261086][  T714]  x64_sys_call+0x274a/0x3000
[  698.261112][  T714]  do_syscall_64+0xd8/0x2a0
[  698.261180][  T714]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  698.261204][  T714] RIP: 0033:0x7fa52502f747
[  698.261220][  T714] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89
[  698.261251][  T714] RSP: 002b:00007fa523a8f038 EFLAGS: 00000246
[  698.261270][  T714] RAX: 000000000000002f RBX: 00007fa525285fa0 RCX: 00007fa52502f749
[  698.261285][  T714] RDX: 0000000000001f00 RSI: 0000200000000500 RDI: 0000000000000003
[  698.261331][  T714] RBP: 00007fa523a8f090 R08: 0000000000000000 R09: 0000000000000000
[  698.261343][  T714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  698.261355][  T714] R13: 00007fa525286038 R14: 00007fa525285fa0 R15: 00007ffd3ec26828
[  698.261372][  T714]  </TASK>
[  698.508186][ T3639] bond1: (slave lo): failed to get link speed/duplex
[  698.546379][  T721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9694'.
[  698.609441][  T722] netlink: 'syz.2.9694': attribute type 15 has an invalid length.
[  698.619037][T30637] bond1: (slave lo): failed to get link speed/duplex
[  699.078235][  T748] lo speed is unknown, defaulting to 1000
[  699.601683][  T762] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9706'.
[  699.947788][ T3823] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  699.948006][T22442] Bluetooth: hci0: command 0x1003 tx timeout
[  700.193765][  T775] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=775 comm=syz.6.9712
[  700.210428][  T775] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9712'.
[  700.252810][  T777] geneve2: entered promiscuous mode
[  700.492461][   T29] kauditd_printk_skb: 641 callbacks suppressed
[  700.492477][   T29] audit: type=1400 audit(1764955615.117:74866): avc:  denied  { read write } for  pid=786 comm="syz.6.9717" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  700.523276][   T29] audit: type=1400 audit(1764955615.117:74867): avc:  denied  { open } for  pid=786 comm="syz.6.9717" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  700.549227][  T789] loop6: detected capacity change from 0 to 512
[  700.591585][   T29] audit: type=1400 audit(1764955615.177:74868): avc:  denied  { ioctl } for  pid=786 comm="syz.6.9717" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  700.618289][   T29] audit: type=1400 audit(1764955615.177:74869): avc:  denied  { mounton } for  pid=786 comm="syz.6.9717" path="/402/file0" dev="tmpfs" ino=2145 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  700.641782][   T29] audit: type=1400 audit(1764955615.247:74870): avc:  denied  { prog_load } for  pid=784 comm="syz.2.9716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  700.661352][   T29] audit: type=1400 audit(1764955615.247:74871): avc:  denied  { bpf } for  pid=784 comm="syz.2.9716" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  700.681989][   T29] audit: type=1400 audit(1764955615.247:74872): avc:  denied  { perfmon } for  pid=784 comm="syz.2.9716" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  700.704445][   T29] audit: type=1400 audit(1764955615.247:74873): avc:  denied  { perfmon } for  pid=784 comm="syz.2.9716" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  700.725869][   T29] audit: type=1400 audit(1764955615.247:74874): avc:  denied  { bpf } for  pid=784 comm="syz.2.9716" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  700.748403][   T29] audit: type=1400 audit(1764955615.247:74875): avc:  denied  { prog_load } for  pid=784 comm="syz.2.9716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  700.771696][  T789] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  700.780045][  T789] EXT4-fs (loop6): orphan cleanup on readonly fs
[  700.787920][  T789] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.9717: corrupted inode contents
[  700.800222][  T789] EXT4-fs (loop6): Remounting filesystem read-only
[  700.806945][  T789] EXT4-fs (loop6): 1 truncate cleaned up
[  700.812968][T30637] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  700.823596][T30637] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  700.834947][T30637] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started
[  700.845964][  T789] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  700.924047][  T797] loop9: detected capacity change from 0 to 512
[  700.934258][  T797] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  700.965118][T27257] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  700.976514][  T797] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  700.989784][  T797] ext4 filesystem being mounted at /565/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  701.121557][  T797] EXT4-fs error (device loop9): ext4_lookup:1785: inode #12: comm syz.9.9719: iget: bad i_size value: 2533274857506816
[  701.172476][T26425] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  701.283190][  T822] loop6: detected capacity change from 0 to 512
[  701.312640][  T822] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  701.366261][  T822] ext4 filesystem being mounted at /406/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  701.383349][  T822] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  701.451648][  T832] loop9: detected capacity change from 0 to 1024
[  701.452072][  T836] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=836 comm=syz.6.9730
[  701.470300][  T832] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  701.474767][  T836] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9730'.
[  701.526680][  T839] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  701.534668][  T839] tipc: Disabling bearer <eth:syzkaller0>
[  701.550397][  T834] netlink: 82908 bytes leftover after parsing attributes in process `syz.9.9729'.
[  702.198993][T26425] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  702.319787][  T867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  702.328460][  T867] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  702.370537][  T871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9745'.
[  702.997582][ T3651] net_ratelimit: 62 callbacks suppressed
[  702.997602][ T3651] bond1: (slave lo): failed to get link speed/duplex
[  703.117598][ T3608] bond1: (slave lo): failed to get link speed/duplex
[  703.227510][ T3651] bond1: (slave lo): failed to get link speed/duplex
[  703.337636][T26769] bond1: (slave lo): failed to get link speed/duplex
[  703.447764][T26769] bond1: (slave lo): failed to get link speed/duplex
[  703.557720][T26779] bond1: (slave lo): failed to get link speed/duplex
[  703.697500][T26779] bond1: (slave lo): failed to get link speed/duplex
[  703.794097][  T919] netlink: 152 bytes leftover after parsing attributes in process `syz.6.9761'.
[  704.115717][T26769] bond1: (slave lo): failed to get link speed/duplex
[  704.255879][T26791] bond1: (slave lo): failed to get link speed/duplex
[  704.967720][ T3639] bond1: (slave lo): failed to get link speed/duplex
[  706.119065][   T29] kauditd_printk_skb: 625 callbacks suppressed
[  706.119082][   T29] audit: type=1400 audit(1764955620.737:75495): avc:  denied  { prog_load } for  pid=944 comm="syz.1.9768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  706.144715][   T29] audit: type=1400 audit(1764955620.737:75496): avc:  denied  { bpf } for  pid=944 comm="syz.1.9768" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  706.255307][   T29] audit: type=1400 audit(1764955620.787:75497): avc:  denied  { execmem } for  pid=944 comm="syz.1.9768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  706.274960][   T29] audit: type=1400 audit(1764955620.867:75498): avc:  denied  { read write } for  pid=26425 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  706.300098][   T29] audit: type=1400 audit(1764955620.867:75499): avc:  denied  { open } for  pid=26425 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  706.325351][   T29] audit: type=1400 audit(1764955620.867:75500): avc:  denied  { ioctl } for  pid=26425 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  706.353178][   T29] audit: type=1400 audit(1764955620.897:75501): avc:  denied  { prog_load } for  pid=949 comm="syz.9.9771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  706.372453][   T29] audit: type=1400 audit(1764955620.927:75502): avc:  denied  { bpf } for  pid=949 comm="syz.9.9771" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  706.393632][   T29] audit: type=1400 audit(1764955620.927:75503): avc:  denied  { perfmon } for  pid=949 comm="syz.9.9771" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  706.415058][   T29] audit: type=1400 audit(1764955620.927:75504): avc:  denied  { prog_run } for  pid=949 comm="syz.9.9771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  706.836595][  T963] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9775'.
[  707.078360][  T972] netlink: 176 bytes leftover after parsing attributes in process `syz.1.9779'.
[  707.261964][  T975] syz_tun: entered allmulticast mode
[  707.291237][  T974] syz_tun: left allmulticast mode
[  708.046949][T26779] net_ratelimit: 18 callbacks suppressed
[  708.047034][T26779] bond1: (slave lo): failed to get link speed/duplex
[  708.450763][T26769] bond1: (slave lo): failed to get link speed/duplex
[  708.567086][T26779] bond1: (slave lo): failed to get link speed/duplex
[  708.694736][T26769] bond1: (slave lo): failed to get link speed/duplex
[  709.407932][ T4063] bond1: (slave lo): failed to get link speed/duplex
[  709.516747][T26779] bond1: (slave lo): failed to get link speed/duplex
[  709.647127][ T4078] bond1: (slave lo): failed to get link speed/duplex
[  709.725782][ T3541] IPVS: starting estimator thread 0...
[  709.756934][ T4078] bond1: (slave lo): failed to get link speed/duplex
[  709.816743][ T1018] IPVS: using max 2400 ests per chain, 120000 per kthread
[  709.866808][ T4078] bond1: (slave lo): failed to get link speed/duplex
[  709.976713][ T4063] bond1: (slave lo): failed to get link speed/duplex
[  710.081047][ T1042] netlink: 277 bytes leftover after parsing attributes in process `syz.0.9803'.
[  711.749731][   T29] kauditd_printk_skb: 198 callbacks suppressed
[  711.749829][   T29] audit: type=1400 audit(1764955626.348:75703): avc:  denied  { read } for  pid=1052 comm="syz.1.9807" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  711.779831][   T29] audit: type=1400 audit(1764955626.348:75704): avc:  denied  { read open } for  pid=1052 comm="syz.1.9807" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  712.060493][   T29] audit: type=1400 audit(1764955626.458:75705): avc:  denied  { read write } for  pid=26425 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  712.085385][   T29] audit: type=1400 audit(1764955626.458:75706): avc:  denied  { open } for  pid=26425 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  712.110097][   T29] audit: type=1400 audit(1764955626.458:75707): avc:  denied  { ioctl } for  pid=26425 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  712.136244][   T29] audit: type=1400 audit(1764955626.518:75708): avc:  denied  { allowed } for  pid=1061 comm="syz.9.9810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  712.155952][   T29] audit: type=1400 audit(1764955626.518:75709): avc:  denied  { read write } for  pid=27257 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  712.180881][   T29] audit: type=1400 audit(1764955626.518:75710): avc:  denied  { open } for  pid=27257 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  712.206453][   T29] audit: type=1400 audit(1764955626.518:75711): avc:  denied  { ioctl } for  pid=27257 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  712.232736][   T29] audit: type=1400 audit(1764955626.528:75712): avc:  denied  { create } for  pid=1061 comm="syz.9.9810" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  712.445087][ T1080] bridge0: entered promiscuous mode
[  712.451265][ T1080] macvlan2: entered promiscuous mode
[  712.459547][ T1082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  712.469114][ T1080] bridge0: port 1(macvlan2) entered blocking state
[  712.475862][ T1080] bridge0: port 1(macvlan2) entered disabled state
[  712.483428][ T1082] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  712.491657][ T1080] macvlan2: entered allmulticast mode
[  712.497125][ T1080] bridge0: entered allmulticast mode
[  712.506098][ T1080] macvlan2: left allmulticast mode
[  712.511273][ T1080] bridge0: left allmulticast mode
[  712.550339][ T1080] bridge0: left promiscuous mode
[  712.711615][ T1101] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9827'.
[  712.831681][ T1108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  712.840350][ T1108] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  713.136214][T30637] net_ratelimit: 26 callbacks suppressed
[  713.136232][T30637] bond1: (slave lo): failed to get link speed/duplex
[  713.256221][T30637] bond1: (slave lo): failed to get link speed/duplex
[  713.366240][T30637] bond1: (slave lo): failed to get link speed/duplex
[  713.476246][ T3651] bond1: (slave lo): failed to get link speed/duplex
[  713.586308][ T3651] bond1: (slave lo): failed to get link speed/duplex
[  713.746221][ T3651] bond1: (slave lo): failed to get link speed/duplex
[  713.866294][ T3651] bond1: (slave lo): failed to get link speed/duplex
[  714.199408][ T3651] bond1: (slave lo): failed to get link speed/duplex
[  714.322228][ T3651] bond1: (slave lo): failed to get link speed/duplex
[  714.761326][ T3651] bond1: (slave lo): failed to get link speed/duplex
[  717.028781][   T29] kauditd_printk_skb: 228 callbacks suppressed
[  717.028880][   T29] audit: type=1400 audit(1764955631.618:75941): avc:  denied  { prog_load } for  pid=1184 comm="syz.2.9857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  717.058998][   T29] audit: type=1400 audit(1764955631.618:75942): avc:  denied  { bpf } for  pid=1184 comm="syz.2.9857" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  717.080582][   T29] audit: type=1400 audit(1764955631.618:75943): avc:  denied  { perfmon } for  pid=1184 comm="syz.2.9857" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  717.103465][   T29] audit: type=1400 audit(1764955631.618:75944): avc:  denied  { prog_run } for  pid=1184 comm="syz.2.9857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  717.123288][   T29] audit: type=1400 audit(1764955631.648:75945): avc:  denied  { create } for  pid=1181 comm="syz.6.9856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  717.144365][   T29] audit: type=1400 audit(1764955631.648:75946): avc:  denied  { write } for  pid=1181 comm="syz.6.9856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  717.166999][   T29] audit: type=1400 audit(1764955631.648:75947): avc:  denied  { read } for  pid=1181 comm="syz.6.9856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  717.251715][ T1187] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9856'.
[  717.260923][ T1187] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9856'.
[  717.441522][ T1198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  717.466577][ T1199] 9pnet_fd: Insufficient options for proto=fd
[  717.488749][ T1198] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  717.679853][   T29] audit: type=1400 audit(1764955631.869:75948): avc:  denied  { write } for  pid=1181 comm="syz.6.9856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  717.701261][   T29] audit: type=1400 audit(1764955631.909:75949): avc:  denied  { create } for  pid=1188 comm="syz.1.9858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  717.726152][   T29] audit: type=1400 audit(1764955631.919:75950): avc:  denied  { bind } for  pid=1188 comm="syz.1.9858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  717.975772][ T1209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9866'.
[  718.225751][T30637] net_ratelimit: 22 callbacks suppressed
[  718.225768][T30637] bond1: (slave lo): failed to get link speed/duplex
[  718.312983][ T1233] netlink: 'syz.9.9877': attribute type 1 has an invalid length.
[  718.327586][ T1233] 8021q: adding VLAN 0 to HW filter on device bond0
[  718.343474][ T1236] netlink: 'syz.6.9878': attribute type 27 has an invalid length.
[  718.351384][ T1236] netlink: 'syz.6.9878': attribute type 4 has an invalid length.
[  718.359289][ T1236] netlink: 152 bytes leftover after parsing attributes in process `syz.6.9878'.
[  718.385762][ T1233] bond0: entered allmulticast mode
[  718.411147][ T1237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9872'.
[  718.420290][ T1237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9872'.
[  718.427229][T30637] bond1: (slave lo): failed to get link speed/duplex
[  718.879263][T30637] bond1: (slave lo): failed to get link speed/duplex
[  719.200249][ T3608] bond1: (slave lo): failed to get link speed/duplex
[  719.315731][T30637] bond1: (slave lo): failed to get link speed/duplex
[  719.457204][T26791] bond1: (slave lo): failed to get link speed/duplex
[  719.583612][T26791] bond1: (slave lo): failed to get link speed/duplex
[  719.746242][T30637] bond1: (slave lo): failed to get link speed/duplex
[  720.133194][T30637] bond1: (slave lo): failed to get link speed/duplex
[  720.265885][T26791] bond1: (slave lo): failed to get link speed/duplex
[  721.112541][ T2696] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  721.375539][ T2696] .` (unregistering): (slave 
c
@0Ù): Releasing backup interface
[  721.431035][ T2696] .` (unregistering): Released all slaves
[  721.461642][ T2696] bond0 (unregistering): Released all slaves
[  721.533811][ T2696] tipc: Left network mode
[  721.657744][ T1260] lo speed is unknown, defaulting to 1000
[  721.689181][T26773] Bluetooth: hci0: Frame reassembly failed (-84)
[  721.772763][ T2696] hsr_slave_0: left promiscuous mode
[  721.790277][ T2696] hsr_slave_1: left promiscuous mode
[  721.809006][ T2696] batman_adv: batadv0: Removing interface: batadv_slave_0
[  721.823090][ T2696] batman_adv: batadv0: Removing interface: batadv_slave_1
[  721.907068][ T2696] team0 (unregistering): Port device team_slave_1 removed
[  721.927508][ T2696] team0 (unregistering): Port device team_slave_0 removed
[  722.072894][ T1366] lo speed is unknown, defaulting to 1000
[  722.086218][   T29] kauditd_printk_skb: 272 callbacks suppressed
[  722.086234][   T29] audit: type=1400 audit(1764955636.709:76223): avc:  denied  { create } for  pid=1406 comm="syz.0.9916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  722.208645][   T29] audit: type=1400 audit(1764955636.709:76224): avc:  denied  { module_request } for  pid=1260 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  722.231803][   T29] audit: type=1400 audit(1764955636.729:76225): avc:  denied  { execmem } for  pid=1408 comm="syz.2.9917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  722.251253][ T1260] chnl_net:caif_netlink_parms(): no params data found
[  722.251833][   T29] audit: type=1400 audit(1764955636.759:76226): avc:  denied  { execmem } for  pid=1406 comm="syz.0.9916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  722.749463][ T1417] sctp: [Deprecated]: syz.0.9916 (pid 1417) Use of struct sctp_assoc_value in delayed_ack socket option.
[  722.749463][ T1417] Use struct sctp_sack_info instead
[  722.856861][ T1260] bridge0: port 1(bridge_slave_0) entered blocking state
[  722.863983][ T1260] bridge0: port 1(bridge_slave_0) entered disabled state
[  722.886668][ T1260] bridge_slave_0: entered allmulticast mode
[  722.893533][ T1260] bridge_slave_0: entered promiscuous mode
[  722.893883][   T29] audit: type=1400 audit(1764955636.949:76227): avc:  denied  { prog_load } for  pid=1408 comm="syz.2.9917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  722.918785][   T29] audit: type=1400 audit(1764955636.949:76228): avc:  denied  { bpf } for  pid=1408 comm="syz.2.9917" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  722.921499][ T1260] bridge0: port 2(bridge_slave_1) entered blocking state
[  722.940679][   T29] audit: type=1400 audit(1764955636.949:76229): avc:  denied  { perfmon } for  pid=1408 comm="syz.2.9917" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  722.947873][ T1260] bridge0: port 2(bridge_slave_1) entered disabled state
[  722.969721][   T29] audit: type=1400 audit(1764955636.949:76230): avc:  denied  { name_bind } for  pid=1408 comm="syz.2.9917" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  722.982613][ T1260] bridge_slave_1: entered allmulticast mode
[  722.999249][   T29] audit: type=1400 audit(1764955636.949:76231): avc:  denied  { node_bind } for  pid=1408 comm="syz.2.9917" saddr=224.0.0.2 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  723.005777][ T1260] bridge_slave_1: entered promiscuous mode
[  723.027530][   T29] audit: type=1400 audit(1764955637.359:76232): avc:  denied  { create } for  pid=1406 comm="syz.0.9916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  723.150708][ T1260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  723.177772][ T1260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  723.278554][ T1260] team0: Port device team_slave_0 added
[  723.285941][ T3628] net_ratelimit: 5 callbacks suppressed
[  723.285958][ T3628] bond1: (slave lo): failed to get link speed/duplex
[  723.309285][ T1260] team0: Port device team_slave_1 added
[  723.439490][ T1260] batman_adv: batadv0: Adding interface: batadv_slave_0
[  723.446544][ T1260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  723.472661][ T1260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  723.515090][ T3628] bond1: (slave lo): failed to get link speed/duplex
[  723.539420][ T1260] batman_adv: batadv0: Adding interface: batadv_slave_1
[  723.541486][ T1449] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9923'.
[  723.546476][ T1260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  723.546578][ T1260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  723.686815][ T1260] hsr_slave_0: entered promiscuous mode
[  723.707601][ T1260] hsr_slave_1: entered promiscuous mode
[  723.715304][T22442] Bluetooth: hci0: command 0x1003 tx timeout
[  723.721433][ T3823] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  723.748325][ T1260] debugfs: 'hsr0' already exists in 'hsr'
[  723.754097][ T1260] Cannot create hsr debugfs directory
[  723.768873][T26762] bond1: (slave lo): failed to get link speed/duplex
[  723.817986][   T10] IPVS: starting estimator thread 0...
[  723.915024][ T1470] IPVS: using max 2400 ests per chain, 120000 per kthread
[  724.185162][ T3653] bond1: (slave lo): failed to get link speed/duplex
[  724.335314][T30637] bond1: (slave lo): failed to get link speed/duplex
[  724.373287][ T1481] loop6: detected capacity change from 0 to 1024
[  724.444889][ T3628] bond1: (slave lo): failed to get link speed/duplex
[  724.452535][ T1481] EXT4-fs: Ignoring removed orlov option
[  724.498445][ T1481] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  724.625152][ T2696] bond1: (slave lo): failed to get link speed/duplex
[  724.644774][ T1542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9933'.
[  724.734880][T26776] bond1: (slave lo): failed to get link speed/duplex
[  724.783148][ T1481] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9929'.
[  724.816496][ T1563] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9935'.
[  724.863220][ T1260] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  724.879043][ T1260] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  724.899896][ T1260] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  725.468752][ T1260] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  725.584784][ T3608] bond1: (slave lo): failed to get link speed/duplex
[  725.607211][T27257] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  725.834812][ T1260] 8021q: adding VLAN 0 to HW filter on device bond0
[  725.851738][ T3608] bond1: (slave lo): failed to get link speed/duplex
[  725.890118][ T1260] 8021q: adding VLAN 0 to HW filter on device team0
[  725.922003][ T3608] bridge0: port 1(bridge_slave_0) entered blocking state
[  725.929274][ T3608] bridge0: port 1(bridge_slave_0) entered forwarding state
[  725.965677][ T3608] bridge0: port 2(bridge_slave_1) entered blocking state
[  725.972818][ T3608] bridge0: port 2(bridge_slave_1) entered forwarding state
[  726.208254][ T1260] 8021q: adding VLAN 0 to HW filter on device batadv0
[  726.834872][ T1260] veth0_vlan: entered promiscuous mode
[  726.856109][ T1260] veth1_vlan: entered promiscuous mode
[  726.954028][ T1260] veth0_macvtap: entered promiscuous mode
[  726.961012][ T1260] veth1_macvtap: entered promiscuous mode
[  726.971178][ T1260] batman_adv: batadv0: Interface activated: batadv_slave_0
[  726.982383][ T1260] batman_adv: batadv0: Interface activated: batadv_slave_1
[  727.001276][T26792] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  727.033639][T26792] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  727.060429][T26792] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  727.084243][T26792] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  727.103125][   T29] kauditd_printk_skb: 326 callbacks suppressed
[  727.103219][   T29] audit: type=1400 audit(1764955641.720:76559): avc:  denied  { mounton } for  pid=1260 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  727.152624][   T29] audit: type=1400 audit(1764955641.720:76560): avc:  denied  { mount } for  pid=1260 comm="syz-executor" name="/" dev="gadgetfs" ino=4956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  727.175256][   T29] audit: type=1400 audit(1764955641.720:76561): avc:  denied  { module_request } for  pid=1260 comm="syz-executor" kmod="fs-binder" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  727.197110][   T29] audit: type=1400 audit(1764955641.740:76562): avc:  denied  { create } for  pid=1663 comm="syz.0.9964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  727.217756][   T29] audit: type=1400 audit(1764955641.740:76563): avc:  denied  { write } for  pid=1663 comm="syz.0.9964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  727.238364][   T29] audit: type=1400 audit(1764955641.770:76564): avc:  denied  { read write } for  pid=1260 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  727.262952][   T29] audit: type=1400 audit(1764955641.770:76565): avc:  denied  { open } for  pid=1260 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  727.287158][   T29] audit: type=1400 audit(1764955641.770:76566): avc:  denied  { ioctl } for  pid=1260 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  727.312969][   T29] audit: type=1400 audit(1764955641.770:76567): avc:  denied  { prog_load } for  pid=1648 comm="syz.6.9959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  727.332199][   T29] audit: type=1400 audit(1764955641.770:76568): avc:  denied  { bpf } for  pid=1648 comm="syz.6.9959" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  728.298246][T26762] net_ratelimit: 12 callbacks suppressed
[  728.298262][T26762] bond1: (slave lo): failed to get link speed/duplex
[  728.416416][T26776] bond1: (slave lo): failed to get link speed/duplex
[  728.524469][T26776] bond1: (slave lo): failed to get link speed/duplex
[  728.634533][ T3608] bond1: (slave lo): failed to get link speed/duplex
[  728.754639][ T3608] bond1: (slave lo): failed to get link speed/duplex
[  728.864539][ T3608] bond1: (slave lo): failed to get link speed/duplex
[  728.974820][T26792] bond1: (slave lo): failed to get link speed/duplex
[  729.144932][T26792] bond1: (slave lo): failed to get link speed/duplex
[  729.260040][ T1719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9984'.
[  729.274331][T26792] bond1: (slave lo): failed to get link speed/duplex
[  729.623126][T26792] bond1: (slave lo): failed to get link speed/duplex
[  729.720254][ T1733] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9992'.
[  730.623525][ T1756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  730.632815][ T1756] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  732.110718][   T29] kauditd_printk_skb: 269 callbacks suppressed
[  732.110732][   T29] audit: type=1400 audit(1764955646.730:76838): avc:  denied  { read write } for  pid=27257 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  732.141603][   T29] audit: type=1400 audit(1764955646.730:76839): avc:  denied  { open } for  pid=27257 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  732.242796][   T29] audit: type=1400 audit(1764955646.770:76840): avc:  denied  { ioctl } for  pid=27257 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  732.268851][   T29] audit: type=1400 audit(1764955646.800:76841): avc:  denied  { module_request } for  pid=1806 comm="syz.6.10021" kmod="netdev-netdevsim0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  732.291494][   T29] audit: type=1400 audit(1764955646.810:76842): avc:  denied  { name_bind } for  pid=1805 comm="syz.1.10020" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  732.313384][   T29] audit: type=1400 audit(1764955646.810:76843): avc:  denied  { node_bind } for  pid=1805 comm="syz.1.10020" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  732.336399][   T29] audit: type=1400 audit(1764955646.820:76844): avc:  denied  { sys_module } for  pid=1806 comm="syz.6.10021" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  732.357775][   T29] audit: type=1400 audit(1764955646.820:76845): avc:  denied  { module_request } for  pid=1806 comm="syz.6.10021" kmod="netdevsim0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  732.380036][   T29] audit: type=1400 audit(1764955646.850:76846): avc:  denied  { allowed } for  pid=1811 comm="syz.0.10022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  732.399642][   T29] audit: type=1400 audit(1764955646.850:76847): avc:  denied  { read write } for  pid=27257 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  733.139214][ T3504] page_pool_release_retry() stalled pool shutdown: id 220, 1 inflight 60 sec
[  733.339289][ T2696] net_ratelimit: 25 callbacks suppressed
[  733.339306][ T2696] bond1: (slave lo): failed to get link speed/duplex
[  733.519392][ T2696] bond1: (slave lo): failed to get link speed/duplex
[  733.693874][T26774] bond1: (slave lo): failed to get link speed/duplex
[  733.804024][ T3654] bond1: (slave lo): failed to get link speed/duplex
[  733.990073][ T3608] bond1: (slave lo): failed to get link speed/duplex
[  734.104128][ T3604] bond1: (slave lo): failed to get link speed/duplex
[  734.237827][T26774] bond1: (slave lo): failed to get link speed/duplex
[  734.354670][ T4057] bond1: (slave lo): failed to get link speed/duplex
[  734.463956][T26774] bond1: (slave lo): failed to get link speed/duplex
[  734.560535][ T1887] netlink: 28 bytes leftover after parsing attributes in process `syz.9.10052'.
[  734.573919][ T3608] bond1: (slave lo): failed to get link speed/duplex
[  735.415291][ T1936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  735.433332][ T1936] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  735.944976][ T1955] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10080'.
[  735.954744][ T1955] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10080'.
[  736.045134][ T1960] netlink: 'syz.6.10083': attribute type 1 has an invalid length.
[  736.052990][ T1960] netlink: 'syz.6.10083': attribute type 2 has an invalid length.
[  736.065666][ T1961] netlink: 92 bytes leftover after parsing attributes in process `syz.9.10082'.
[  736.076750][ T1961] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10082'.
[  737.131110][   T29] kauditd_printk_skb: 419 callbacks suppressed
[  737.131125][   T29] audit: type=1400 audit(1764955651.751:77267): avc:  denied  { read write } for  pid=27257 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  737.161767][   T29] audit: type=1400 audit(1764955651.751:77268): avc:  denied  { open } for  pid=27257 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  737.187712][   T29] audit: type=1400 audit(1764955651.771:77269): avc:  denied  { map_create } for  pid=1980 comm="syz.1.10092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  737.207194][   T29] audit: type=1400 audit(1764955651.771:77270): avc:  denied  { bpf } for  pid=1980 comm="syz.1.10092" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  737.228071][   T29] audit: type=1400 audit(1764955651.771:77271): avc:  denied  { map_read map_write } for  pid=1980 comm="syz.1.10092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  737.248320][   T29] audit: type=1400 audit(1764955651.771:77272): avc:  denied  { prog_load } for  pid=1980 comm="syz.1.10092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  737.267647][   T29] audit: type=1400 audit(1764955651.771:77273): avc:  denied  { perfmon } for  pid=1980 comm="syz.1.10092" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  737.289087][   T29] audit: type=1400 audit(1764955651.771:77274): avc:  denied  { watch watch_reads } for  pid=1980 comm="syz.1.10092" path="/503" dev="tmpfs" ino=2635 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  737.312505][   T29] audit: type=1400 audit(1764955651.811:77275): avc:  denied  { execmem } for  pid=1982 comm="syz.1.10093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  737.332446][   T29] audit: type=1400 audit(1764955651.811:77276): avc:  denied  { ioctl } for  pid=27257 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  737.677376][ T2006] block device autoloading is deprecated and will be removed.
[  740.644714][ T2083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  740.684952][ T2083] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  740.711301][   T23] IPVS: starting estimator thread 0...
[  740.734879][ T2090] netlink: 48 bytes leftover after parsing attributes in process `syz.9.10131'.
[  740.803250][ T2091] IPVS: using max 2256 ests per chain, 112800 per kthread
[  740.995596][ T2106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10139'.
[  741.745625][ T2149] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10155'.
[  742.171880][   T29] kauditd_printk_skb: 386 callbacks suppressed
[  742.171898][   T29] audit: type=1400 audit(1764955656.791:77663): avc:  denied  { mount } for  pid=2162 comm="syz.9.10164" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  742.215398][   T29] audit: type=1400 audit(1764955656.831:77664): avc:  denied  { read write } for  pid=30667 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  742.238947][   T29] audit: type=1400 audit(1764955656.831:77665): avc:  denied  { open } for  pid=30667 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  742.262430][   T29] audit: type=1400 audit(1764955656.831:77666): avc:  denied  { ioctl } for  pid=30667 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1436 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  742.311305][   T29] audit: type=1400 audit(1764955656.891:77667): avc:  denied  { read write } for  pid=1260 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  742.335714][   T29] audit: type=1400 audit(1764955656.891:77668): avc:  denied  { open } for  pid=1260 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  742.359981][   T29] audit: type=1400 audit(1764955656.891:77669): avc:  denied  { ioctl } for  pid=1260 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  742.360906][ T2168] net_ratelimit: 18 callbacks suppressed
[  742.360920][ T2168] IPVS: rr: FWM 3 0x00000003 - no destination available
[  742.426229][   T29] audit: type=1400 audit(1764955656.941:77670): avc:  denied  { create } for  pid=2164 comm="syz.0.10165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  742.446114][   T29] audit: type=1400 audit(1764955656.941:77671): avc:  denied  { write } for  pid=2164 comm="syz.0.10165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  742.466006][   T29] audit: type=1400 audit(1764955657.011:77672): avc:  denied  { allowed } for  pid=2167 comm="syz.9.10166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  743.589458][T18739] IPVS: starting estimator thread 0...
[  743.702840][ T2240] IPVS: using max 2496 ests per chain, 124800 per kthread
[  744.436980][   T23] hid_parser_main: 22 callbacks suppressed
[  744.436999][   T23] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0
[  744.453801][ T2268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  744.464272][ T2268] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  744.485231][   T23] hid-generic 0000:0000:0000.0079: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  746.176602][ T2312] pim6reg: entered allmulticast mode
[  747.192326][   T29] kauditd_printk_skb: 359 callbacks suppressed
[  747.192355][   T29] audit: type=1400 audit(1764955661.792:78032): avc:  denied  { prog_load } for  pid=2328 comm="syz.9.10228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  747.217916][   T29] audit: type=1400 audit(1764955661.792:78033): avc:  denied  { bpf } for  pid=2328 comm="syz.9.10228" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  747.238916][   T29] audit: type=1400 audit(1764955661.792:78034): avc:  denied  { mounton } for  pid=2328 comm="syz.9.10228" path="/71" dev="tmpfs" ino=371 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  747.400944][   T29] audit: type=1400 audit(1764955662.002:78035): avc:  denied  { read write } for  pid=27257 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  747.425565][   T29] audit: type=1400 audit(1764955662.002:78036): avc:  denied  { open } for  pid=27257 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  747.450077][   T29] audit: type=1400 audit(1764955662.002:78037): avc:  denied  { ioctl } for  pid=27257 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  747.485779][   T29] audit: type=1400 audit(1764955662.112:78038): avc:  denied  { create } for  pid=2334 comm="syz.6.10229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  747.512222][   T29] audit: type=1400 audit(1764955662.122:78039): avc:  denied  { write } for  pid=2334 comm="syz.6.10229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  747.533506][   T29] audit: type=1400 audit(1764955662.122:78040): avc:  denied  { read } for  pid=2334 comm="syz.6.10229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  747.553984][   T29] audit: type=1400 audit(1764955662.122:78041): avc:  denied  { read write } for  pid=2334 comm="syz.6.10229" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  747.986447][ T2349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  748.097157][ T2349] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  748.652566][ T2387] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10251'.
[  748.757596][ T2396] pim6reg: entered allmulticast mode
[  751.268976][ T2469] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10279'.
[  752.526011][   T29] kauditd_printk_skb: 304 callbacks suppressed
[  752.526029][   T29] audit: type=1400 audit(1764955666.453:78346): avc:  denied  { execmem } for  pid=2478 comm="syz.0.10284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  752.551654][   T29] audit: type=1400 audit(1764955666.553:78347): avc:  denied  { setopt } for  pid=2483 comm="syz.2.10286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  752.571322][   T29] audit: type=1400 audit(1764955666.803:78348): avc:  denied  { prog_load } for  pid=2478 comm="syz.0.10284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  752.590587][   T29] audit: type=1400 audit(1764955666.803:78349): avc:  denied  { bpf } for  pid=2478 comm="syz.0.10284" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  752.611391][   T29] audit: type=1400 audit(1764955666.803:78350): avc:  denied  { create } for  pid=2478 comm="syz.0.10284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  752.631173][   T29] audit: type=1400 audit(1764955667.103:78351): avc:  denied  { read write } for  pid=27257 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  752.655547][   T29] audit: type=1400 audit(1764955667.103:78352): avc:  denied  { open } for  pid=27257 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  752.679845][   T29] audit: type=1400 audit(1764955667.103:78353): avc:  denied  { ioctl } for  pid=27257 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  752.705707][   T29] audit: type=1400 audit(1764955667.143:78354): avc:  denied  { create } for  pid=2490 comm="syz.6.10288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  752.785571][   T29] audit: type=1400 audit(1764955667.163:78355): avc:  denied  { read write } for  pid=30667 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  752.882563][ T2504] netlink: 96 bytes leftover after parsing attributes in process `syz.6.10290'.
[  755.191017][ T2574] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10319'.
[  755.239981][ T2574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10319'.
[  755.994350][ T2605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10329'.
[  756.224532][ T2624] IPVS: rr: FWM 3 0x00000003 - no destination available
[  757.585152][   T29] kauditd_printk_skb: 409 callbacks suppressed
[  757.585167][   T29] audit: type=1400 audit(1764955672.213:78765): avc:  denied  { read write } for  pid=30667 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  757.616053][   T29] audit: type=1400 audit(1764955672.213:78766): avc:  denied  { open } for  pid=30667 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  757.639850][   T29] audit: type=1400 audit(1764955672.223:78767): avc:  denied  { read write } for  pid=27257 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  757.665101][   T29] audit: type=1400 audit(1764955672.223:78768): avc:  denied  { open } for  pid=27257 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  757.689510][   T29] audit: type=1400 audit(1764955672.223:78769): avc:  denied  { ioctl } for  pid=27257 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  757.716129][   T29] audit: type=1400 audit(1764955672.223:78770): avc:  denied  { write } for  pid=2672 comm="syz.2.10360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  757.736065][   T29] audit: type=1400 audit(1764955672.223:78771): avc:  denied  { ioctl } for  pid=30667 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1436 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  757.887260][   T29] audit: type=1400 audit(1764955672.403:78772): avc:  denied  { prog_load } for  pid=2677 comm="syz.0.10362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  757.906727][   T29] audit: type=1400 audit(1764955672.413:78773): avc:  denied  { bpf } for  pid=2677 comm="syz.0.10362" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  757.928263][   T29] audit: type=1400 audit(1764955672.413:78774): avc:  denied  { perfmon } for  pid=2677 comm="syz.0.10362" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  759.955582][ T2743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  759.957104][ T2741] IPVS: rr: FWM 3 0x00000003 - no destination available
[  759.964144][ T2743] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  759.992964][ T2745] siw: device registration error -23
[  760.163379][ T2752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  760.175628][ T2752] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  761.305647][ T2800] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10407'.
[  761.359318][ T2802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  761.419095][ T2802] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  761.999780][ T2826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  762.087683][ T2826] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  762.602817][ T2836] random: crng reseeded on system resumption
[  762.612843][   T29] kauditd_printk_skb: 845 callbacks suppressed
[  762.612861][   T29] audit: type=1400 audit(1764955677.234:79620): avc:  denied  { write } for  pid=2832 comm="syz.1.10425" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  762.642955][   T29] audit: type=1400 audit(1764955677.234:79621): avc:  denied  { write open } for  pid=2832 comm="syz.1.10425" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  762.667271][   T29] audit: type=1400 audit(1764955677.244:79622): avc:  denied  { prog_load } for  pid=2832 comm="syz.1.10425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  762.687276][   T29] audit: type=1400 audit(1764955677.244:79623): avc:  denied  { bpf } for  pid=2832 comm="syz.1.10425" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  762.761074][   T29] audit: type=1400 audit(1764955677.344:79624): avc:  denied  { read write } for  pid=30667 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  762.784835][   T29] audit: type=1400 audit(1764955677.344:79625): avc:  denied  { open } for  pid=30667 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  762.808314][   T29] audit: type=1400 audit(1764955677.344:79626): avc:  denied  { ioctl } for  pid=30667 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1436 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  762.833260][   T29] audit: type=1400 audit(1764955677.374:79627): avc:  denied  { create } for  pid=2837 comm="syz.0.10426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  762.854183][   T29] audit: type=1400 audit(1764955677.384:79628): avc:  denied  { write } for  pid=2837 comm="syz.0.10426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  762.951660][   T29] audit: type=1400 audit(1764955677.424:79629): avc:  denied  { read write } for  pid=27257 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  763.131024][ T2848] bridge0: entered promiscuous mode
[  763.137739][ T2848] bridge0: left promiscuous mode
[  765.256536][ T2880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  765.280510][ T2880] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  765.289459][ T2885] netlink: 92 bytes leftover after parsing attributes in process `syz.9.10444'.
[  765.301232][ T2885] netlink: 32 bytes leftover after parsing attributes in process `syz.9.10444'.
[  765.551256][ T2880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  765.560416][ T2880] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  766.219389][ T2915] ==================================================================
[  766.227490][ T2915] BUG: KCSAN: data-race in page_pool_put_unrefed_netmem / page_pool_refill_alloc_cache
[  766.237186][ T2915] 
[  766.239497][ T2915] write to 0xffff88811a325280 of 8 bytes by task 2914 on cpu 1:
[  766.247628][ T2915]  page_pool_refill_alloc_cache+0x2a5/0x3c0
[  766.253514][ T2915]  page_pool_alloc_pages+0xd0/0x130
[  766.258768][ T2915]  bpf_test_run_xdp_live+0x54d/0x11d0
[  766.264142][ T2915]  bpf_prog_test_run_xdp+0x525/0x970
[  766.269426][ T2915]  bpf_prog_test_run+0x22a/0x390
[  766.274353][ T2915]  __sys_bpf+0x4c0/0x7c0
[  766.278577][ T2915]  __x64_sys_bpf+0x41/0x50
[  766.282987][ T2915]  x64_sys_call+0x28e1/0x3000
[  766.287778][ T2915]  do_syscall_64+0xd8/0x2a0
[  766.292325][ T2915]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  766.298292][ T2915] 
[  766.300605][ T2915] read to 0xffff88811a325280 of 8 bytes by task 2915 on cpu 0:
[  766.308303][ T2915]  page_pool_put_unrefed_netmem+0x38b/0x4b0
[  766.314203][ T2915]  napi_pp_put_page+0xe9/0x200
[  766.318957][ T2915]  skb_free_head+0x12c/0x150
[  766.324233][ T2915]  skb_release_data+0x33b/0x370
[  766.329198][ T2915]  __kfree_skb+0x44/0x150
[  766.333516][ T2915]  sk_skb_reason_drop+0xbd/0x270
[  766.338443][ T2915]  skb_vlan_untag+0x52a/0x690
[  766.343103][ T2915]  __netif_receive_skb_core+0x23e/0x1920
[  766.348727][ T2915]  __netif_receive_skb_list_core+0x113/0x500
[  766.354691][ T2915]  netif_receive_skb_list_internal+0x487/0x600
[  766.360857][ T2915]  gro_receive_skb+0x374/0x570
[  766.365636][ T2915]  cpu_map_kthread_run+0x1013/0x1560
[  766.370910][ T2915]  kthread+0x489/0x510
[  766.374981][ T2915]  ret_from_fork+0x149/0x290
[  766.379557][ T2915]  ret_from_fork_asm+0x1a/0x30
[  766.384320][ T2915] 
[  766.386630][ T2915] value changed: 0xffffea0004447340 -> 0x0000000000000000
[  766.393806][ T2915] 
[  766.396125][ T2915] Reported by Kernel Concurrency Sanitizer on:
[  766.402344][ T2915] CPU: 0 UID: 0 PID: 2915 Comm: cpumap/0/map:74 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  766.414046][ T2915] Tainted: [W]=WARN
[  766.417840][ T2915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  766.427879][ T2915] ==================================================================