last executing test programs:

6.451575641s ago: executing program 4 (id=201):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx  \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0)
pause()

3.619757286s ago: executing program 0 (id=224):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = socket(0x10, 0x803, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtfilter={0x9c, 0x2c, 0xd27, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, {0xfff3, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xdb}, @TCA_U32_POLICE={0xffffffffffffff77, 0x6, [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x5, 0x7, 0x7, {0xfa, 0x0, 0x6, 0x6, 0x3, 0x4}, {0x3, 0x0, 0x5, 0x9, 0xc, 0xfff}, 0x9, 0xd}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}]}, @TCA_U32_CLASSID={0x8, 0x1, {0xb, 0xd}}]}}]}, 0x9c}}, 0x20000000)

3.423418186s ago: executing program 4 (id=226):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f00000001c0)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0xfffffbff, 0x20, &(0x7f0000000140)="f1", 0x1, 0x8, 0x1, 0x0, 0x5, 0x3, 0x0})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r0}, 0x10)
add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff)

3.394384856s ago: executing program 4 (id=228):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0xb40, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r7 = dup(r6)
setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000040)=[{{0x4, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x1}}], 0x8)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000c0)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f0000000040)={0x0, 0x0, 0x12, 0x2, 0x83, 0x7})
write$vga_arbiter(r1, &(0x7f0000000140)=@unlock_all, 0xb)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
pivot_root(&(0x7f0000000000)='./file0\x00', 0x0)

3.329777836s ago: executing program 0 (id=229):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000010018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2)
sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)={0xf4, r3, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}]}, 0xf4}}, 0x0)

3.280699006s ago: executing program 0 (id=231):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000340)="05000806", 0x4, 0x20000084, &(0x7f0000000080)={0x11, 0x8100, r1, 0x306}, 0x14)
setns(0xffffffffffffffff, 0x8000000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB="00000000070021b613000000000000001c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0)

3.055959265s ago: executing program 2 (id=235):
r0 = socket$kcm(0x21, 0x2, 0x2)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0)

2.276504624s ago: executing program 0 (id=237):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f0000000280)="$eJzs3M1rXFUbAPDn3kymaZv3nfTlRawbIyItiNOkkmKLYCsVNy4E3QoN6aSETD9IIjVpFhP9B0RdC24EtSgu7LobRbdutN0qLoQisVEQ0cidjyQ2mTS1M70x/f3gzD3nnpl5nmcuM/cemJkA7luD2U0asT8iTiURpeb+NCKK9V5fRK1xv6XF+bFfF+fHklhefumnJJKIuLk4P9Z6rqS53dsc9EXE188m8b831sednp2bHK1WK1PN8aGZsxcOTc/OPTFxdvRM5Uzl3PCRp0YOjxwZOjrSsVp/++74lV8eef6H2u8f/nH557ffT+J49Dfn1tbRKYMxuPKarFWIiNFOB8tJT7OetXUmhds8KO1yUgAAtJWuuYZ7IErRE6sXb6X4/JtckwMAAAA6YrknYhkAAADY4RLrfwAAANjhWt8DuLk4P9Zq+X4j4d66cSIiBhr1LzVbY6YQtfq2L3ojYs/NJNb+rDVpPOyuDUbE99ePfpK16NLvkDdTW4iIBzc6/km9/oH6r7jX159GxFAH4g/eMv431X+8A/Hzrh+A+9PVE40T2frzX7py/RMbnP8KG5y7/om8z3+t67+lddd/q/X3tLn+e3GLMS598O7FdnNZ/U9fee7jVsviZ9u7KuoO3FiIeKiwUf3JSv1Jm/pPbTFG6c+LlXZzede//F7Egdi4/pZk8/8nOjQ+Ua0MNW43jLHw1chH7eLnXX92/Pe0qb/1/0/tjv+FLcZ45eTJT9ftvL7a3bz+9Mdi8nK9V2zueW10ZmZqOKKYvLB+/+HNc2ndp/UcWf0HH938/b9R/dlnQq35OmRrgYXmNhu/fkvMZy5f+qxdPq31X57H/3Sb47+2/i8L64//m1uM8dgXbx1sN7d2/Zu1LH5rLQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALWlE9EeSllf6aVouR+yNiP/HnrR6fnrm8fHzr547nc1FDERvOj5RrQxFRKkxTrLxcL2/Oj58y/jJiNgXEe+UdtfH5bHz1dN5Fw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCKvRHRH0lajog0IpZKaVou550VAAAA0HEDeScAAAAAdJ31PwAAAOx81v8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB02b6Hr15LIqJ2bHe9ZYrNud5cMwO6Lc07ASA3PXknAOSmkHcCQG7ucI3vcgF2oOQ2831tZ3Z1PBcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtq8D+69eSyKidmx3vWWKzbneXDMDui3NOwEgNz2bTRbuXR7AvectDvcva3wguc183+p9an+f2dW1nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYfvrrLUnLEVFs7iuXI/4TEQPRm4xPVCtDEfHfiPi21LsrGw/nnDMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdNz07NzlarVamsk4azc7KHp3VTtJ4xWrbJR+du+wUY1uksU07eX8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQh+nZucnRarUyNZ13JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDepmfnJker1cpUFzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+CgAA//9gfgp0")
unlink(&(0x7f0000000140)='./file1\x00')

2.171765773s ago: executing program 2 (id=239):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
r1 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
name_to_handle_at(r2, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x2c, r4, 0xc4fc9e906872338b, 0x10000, 0x0, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_tracing={0x1a, 0x14, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x6, 0x5e, &(0x7f0000000200)=""/94, 0x40f00, 0x25, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x1, 0x5, 0x99d9, 0x7}, 0x10, 0x18f95, 0xffffffffffffffff, 0x4, &(0x7f00000002c0)=[r0, r0, r0], &(0x7f0000000300)=[{0x1, 0x4, 0xd, 0x9}, {0x0, 0x1, 0x0, 0x3}, {0x3, 0x4, 0xc, 0x5}, {0x0, 0x5, 0x1, 0x1}], 0x10, 0x10, @void, @value}, 0x94)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000500)={r3, r5})
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r6}, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000007000000050000000800000005"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r8}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setitimer(0x2, 0x0, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
getitimer(0x2, &(0x7f0000000200))
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv4_newrule={0x34, 0x20, 0x400, 0x70bd2b, 0x25dfdbfd, {0x2, 0x14, 0x0, 0x8, 0x7, 0x0, 0x0, 0x1, 0x8}, [@FRA_DST={0x8, 0x1, @multicast2}, @FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x22}}, @FRA_FLOW={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1.991162403s ago: executing program 2 (id=242):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000010018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2)
sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)={0xf4, r3, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}]}, 0xf4}}, 0x0)

1.961003653s ago: executing program 2 (id=244):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002540)=ANY=[@ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000040)='./file0\x00')
getpgid(0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

1.903960793s ago: executing program 1 (id=245):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newsa={0x138, 0x10, 0x713, 0x70bd25, 0x0, {{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, {@in=@rand_addr=0x64010101, 0x0, 0x33}, @in=@dev, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x8000000000}, {}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x24}, [@algo_auth={0x48, 0x1, {{'digest_null\x00'}}}]}, 0x138}}, 0x20000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d00"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x2, 0x7ffc0002}]})
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r2, &(0x7f0000001240)='>', 0x1, 0x0, &(0x7f00000012c0)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c)
shutdown(r2, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x6, 0x1, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3, 0x4}, 0x38)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r3}, 0x20)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0), 0x83, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ")
r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x0, 0x3)

1.901687533s ago: executing program 0 (id=246):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100004b028ee7000000000000a02a850000007b00000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffffffffffcf8)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TCSBRKP(r1, 0x5425, 0x5)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x6, 0x0, 0x9, 0x40, 0x0, "7a58ebd3e9bd5a8e0000000000000000000b00"})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140))
ioctl$TCSETSW2(r1, 0x540e, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00101}]})
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=<r3=>0xffffffffffffffff, @ANYRES8], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000080000000000000000000000000000000000000000009d2e6aa053dba25134d4"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6}, &(0x7f0000000180), &(0x7f0000000280)=r4}, 0x20)
r7 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r7, 0x29, 0x3e, &(0x7f0000fcb000), 0x4)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r6, &(0x7f0000000300), 0x0}, 0x20)
connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4001, 0x0, @local, 0xd}, 0x1c)
r8 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRESHEX=r5], 0x18}], 0x1, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000e08000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r11, 0x0, 0x6}, 0x18)
r12 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r12, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xa0bf83d7d46f2cbb})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r12, 0x40505330, &(0x7f00000000c0)={0x800000, 0x0, 0x0, 0x0, 0x0, 0x6})

1.750258113s ago: executing program 4 (id=248):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000012c0)=ANY=[@ANYBLOB="280000000308010200000000000000000700000a050003f4cba15024b58040547af252b369d73de150aa993c5623dc220d7af8c6ece449d3ebf74a52433d6af08f919138e162466176d92d26f401b42f78591c31481d8f8bb5db514b54a89b36e6ab263c40dd7134d7ef67336564393db6789f5d833967817c69fb8b579deb8eadf584e99b48e1d8cdd2ec6c2c6df63afbf2935050449eefca3d33a9b5c179918d4780134882a4ef1e9cb597a874c31e9824d29da55726b6d5ad78f81e651d26dae46e1d9eebd4d02d89fddade49"], 0x28}}, 0x20048000)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f00000011c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095c6483d9afcfdf4681103fe3bba6590ac22b8d11af4bce712290fa59d041352f0b286ea4abd88f92c8f22510a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r5}, 0x10)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES16=r1], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10)
r8 = socket$kcm(0xa, 0x3, 0x3a)
socket$packet(0x11, 0x3, 0x300)
sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x4000, @remote, 0x300}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0x1}], 0x1, 0x0, 0x0, 0x900}, 0x60)
mlock(&(0x7f0000fec000/0x12000)=nil, 0x12000)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000d671000000000000e7252a71c6010960e762918289d858b0466cc5a048735b4e3b7164ecaeef3102b1a4ad06960f822692da4072581bcdd5d83f25f5384ae88a081dff7f3c577b9b03d09cb98a7b15197cd9d7fa29a078ee5be9dcc1440ffe675fbace3cf7c2e3a367fab5becf85e09bf4f218084e6d6e6b1a6c1e1f768cd446aa66ec"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x14, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
close(0xffffffffffffffff)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x75, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r10}, 0x10)
r11 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r12 = dup(r11)
write$UHID_INPUT(r12, &(0x7f0000000040)={0xf, {"686cad21e0fd02661b37090987f70e06d038e7ff7fc6e5539b0d650e8b089b3f360068090890e0878f0efcc5e7049b3b452c416b23240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07720936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b4a5f3090000000000000075271b060029d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f33491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146784078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34a1c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9b05000bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48ca2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a35595f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e205ef4a7c43b42aae501b20f7694a035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd6700800000082ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39dd2ea9762639ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359deea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e150600d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b2c2fc5d5f0da42c0456ec015f08e5247d33ae2d35623ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e938ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a893664ac70297dc8d62700000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x1000}}, 0x1006)
mq_unlink(&(0x7f0000000340)='eth0\x00')
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f0000000280)="$eJzs3M1rXFUbAPDn3kymaZv3nfTlRawbIyItiNOkkmKLYCsVNy4E3QoN6aSETD9IIjVpFhP9B0RdC24EtSgu7LobRbdutN0qLoQisVEQ0cidjyQ2mTS1M70x/f3gzD3nnpl5nmcuM/cemJkA7luD2U0asT8iTiURpeb+NCKK9V5fRK1xv6XF+bFfF+fHklhefumnJJKIuLk4P9Z6rqS53dsc9EXE188m8b831sednp2bHK1WK1PN8aGZsxcOTc/OPTFxdvRM5Uzl3PCRp0YOjxwZOjrSsVp/++74lV8eef6H2u8f/nH557ffT+J49Dfn1tbRKYMxuPKarFWIiNFOB8tJT7OetXUmhds8KO1yUgAAtJWuuYZ7IErRE6sXb6X4/JtckwMAAAA6YrknYhkAAADY4RLrfwAAANjhWt8DuLk4P9Zq+X4j4d66cSIiBhr1LzVbY6YQtfq2L3ojYs/NJNb+rDVpPOyuDUbE99ePfpK16NLvkDdTW4iIBzc6/km9/oH6r7jX159GxFAH4g/eMv431X+8A/Hzrh+A+9PVE40T2frzX7py/RMbnP8KG5y7/om8z3+t67+lddd/q/X3tLn+e3GLMS598O7FdnNZ/U9fee7jVsviZ9u7KuoO3FiIeKiwUf3JSv1Jm/pPbTFG6c+LlXZzede//F7Egdi4/pZk8/8nOjQ+Ua0MNW43jLHw1chH7eLnXX92/Pe0qb/1/0/tjv+FLcZ45eTJT9ftvL7a3bz+9Mdi8nK9V2zueW10ZmZqOKKYvLB+/+HNc2ndp/UcWf0HH938/b9R/dlnQq35OmRrgYXmNhu/fkvMZy5f+qxdPq31X57H/3Sb47+2/i8L64//m1uM8dgXbx1sN7d2/Zu1LH5rLQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALWlE9EeSllf6aVouR+yNiP/HnrR6fnrm8fHzr547nc1FDERvOj5RrQxFRKkxTrLxcL2/Oj58y/jJiNgXEe+UdtfH5bHz1dN5Fw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCKvRHRH0lajog0IpZKaVou550VAAAA0HEDeScAAAAAdJ31PwAAAOx81v8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB02b6Hr15LIqJ2bHe9ZYrNud5cMwO6Lc07ASA3PXknAOSmkHcCQG7ucI3vcgF2oOQ2831tZ3Z1PBcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtq8D+69eSyKidmx3vWWKzbneXDMDui3NOwEgNz2bTRbuXR7AvectDvcva3wguc183+p9an+f2dW1nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYfvrrLUnLEVFs7iuXI/4TEQPRm4xPVCtDEfHfiPi21LsrGw/nnDMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdNz07NzlarVamsk4azc7KHp3VTtJ4xWrbJR+du+wUY1uksU07eX8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQh+nZucnRarUyNZ13JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDepmfnJker1cpUFzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+CgAA//9gfgp0")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2eaa00000000000071104300000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
unlink(&(0x7f0000000140)='./file1\x00')

1.737106323s ago: executing program 1 (id=249):
r0 = socket$kcm(0x21, 0x2, 0x2)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0)

1.537147032s ago: executing program 3 (id=251):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
r0 = getpid()
setreuid(0xee00, 0x0)
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
syz_clone3(&(0x7f00000008c0)={0x10860000, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r0], 0x1}, 0x58)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1081008}, 0xc, &(0x7f0000000a00)={&(0x7f00000018c0)={0xf68, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xf54, 0x3, 0x0, 0x1, [{0x24c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x200}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_DATA={0x224, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x29, 0x1, "38720eac03683e673c8351a715b69350bbe11ff452a789f7934869957da8c4fdaabebf641e"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x76, 0x1, "d3c983a5fd6fab31d5669ee723deb7ce95441ce27d3195adb9e3b327ddf9847100d9c62c736d77830572ec35e4b7feeb642389f53df2e40fbe6dbeb8d82db0a6953689f3faf839add335fc2d16b497a09c4c4a74af43bb8421307e68dfa11f2f191a30553712c1dc6395902696709d3eff43"}, @NFTA_DATA_VALUE={0xfc, 0x1, "70d0524dfb069dc1896a46f956f99f6024e56ed64cfd2bb35720fb6c1d42a116872b84df6e7706a83ed1f858cdfdf9ac0f214cab90f98fb62144621e934741517722e707ac3268b01edd3aa435c6bf876bd2cae45c0d05807aae412c8d1f0856dffdd1e7618c668def8460dc91cf3f0499621290ec09cb3495c7f57acc65bdf1da84d8b25ef073d1420d4b942951712a6a808ef6e7a790c19a1466f8fd055f72316f7ae96ad247c6d0d180f61538fe02da5bea3747e493add6bf9625d81c6be859913106065d09df084d6ad0719b2ab0bcfc72e07ccdd852acb5d74070fa71ae4c45bc821e32d9dab9861f1a42a9a7a6b9e6b9f74bd1df09"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xffffffffffffffff}]}, {0x6ac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x134, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x60, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x18}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x48, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x8b}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_SET_ELEM_DATA={0x1fc, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x3a, 0x1, "1b16cfe0777d661acda6934efeefde8d64339373289d12290f61b6da037a8a7bea2e6508f2f99b5a6086524cd2bce91f6bdd25ec94a0"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x8f, 0x1, "5fc26dbd24958ac8d12587c436d9c0822858da0f8e5cb68ed497b2a89bd1419fcc7ed54ada30bc73a4557c837c199e799f9b1c51b537082dd34ac1c8c44f5cf7b7499c67cf0a18f6f903d46468de3e8ec754f83c369abe5b5ed340e96f11a28300db1fe78cfc468e47818cb796c1815fae2cbb42f1e78eef759d483c9ba6c12496f8e835c2d8513211c54b"}, @NFTA_DATA_VALUE={0xcb, 0x1, "e496b6a3709094f8759a4f213553fb977faa39d4868894572154babba39a0b0be24453f6f35f36981270f8eb2f05ebb543649f9694a637c1e0d75b720f52791b15bb60a15d069dc5d7823176253b198b4b8753f879fbf3079cda7ea3849a60966c504196fd57019a9bc4e051961cd20a45061e18867d6ddd00c5437010bcf740896866f34caac9152c2b5e61c7691c828ade20fe51153ba6ff3b7a38983f9551644cc11442fda3d9211b31434bc1f516aaef29d4c3debde9d3c0645d041af4120443c77109e555"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x308, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x30, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_LAST_SET={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x30}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x33}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x23c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_IMMEDIATE_DATA={0x98, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x94, 0x1, "04867b3b0eb19aaf6af0a0789786d0d67acc8866107674d467b4696a73a0940cb197a939b28baf1a7f071026f94b133682bb7496ccfb3fa364708cb1b1ad9a2605a2f6bb46eae6b5214a916d314df5897cd23b204740bc5a764869157cca10e51918723410dca937d29447084aff8f79b680c2685cfcd2b77b5df1aeeed00737f13d87fe8039da5983ee6644149a2db3"}]}, @NFTA_IMMEDIATE_DATA={0x184, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbe, 0x1, "cee735f3dbe07ce4aed0c11a881c14fc46dfa61f45e4c039e540693deadb0e01445c5ca8d1e3c9cda37fec9eab18e3f27a040e091ac890bff1ebdf361d40dbe7442326ec889e27213a326156d7b36c67e060977011bd7dc3b2ba73cc59cc43f524e2c312cccb06e2f3bdfad2f4f21ae40352b2a75610afbf50c19645f2d1beab5b1b3192dcb9be1f7e5970ad0de6d8ad5499788b4a50153740ce58c371fb576382364bc42e4b3d1b15f4d299047ae7a102d6ecc726718cf5ee35"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x70, 0xb, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x5}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x3}]}}}, {0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}]}}}]}]}, {0x424, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x100000000}, @NFTA_SET_ELEM_KEY_END={0x414, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbc, 0x1, "8ba36f364a96caea2b99edd2dcac5154f7ffec8cfe1eac9ad950c82a8e4422f804b5951be65198a2e5c358da7351b20c90e4a7c1dd3a700a0210e2d0a3e649d0516e8ac95f5bc8d10539e636a0a51efe0bac0d9163dbfe0f6091b3b13a4bc80146919b426f51bd087cdc58273316561dbaf37e36962614f7ec1e70e6bd36ac2bdc6afed5b65757ef78125f928668a9ed6789382fb5957009c44476d57f4226dc3d3c543b93393da00bf21b1025fa9d9af2b1cca66f2bfec8"}, @NFTA_DATA_VALUE={0x101, 0x1, "3a3d8e467f26e441337e5f56b357ec8d7b6c3d899be6c3c206894e90914d9f5ce778fc8d94f6a05b83b9b33f16e78af564ea142741dadca320f2cbf41cc75b88b5a78daa854af82411fa732f59c836ef7f22a7c0e44d249c92931e1d659b5dd1796426159e2fe4f359d55685e96545b9645983bf43dfa31fe8705afeca4fab767199c145eb6da9c1e12c5d7868cf5a66b6a755a104ff4ab81a3170e28d16b5b87cd6a9db4fb5f4949fd20d7a3bdfbbc01b6dbab8401a45cb2e3661c7d6f3597d3edec9a9193e49ae7a3609b58a65f2068a9a7ccb70d6af20187d3b81fe7abcede5aff56fde6a8b0a271a8782a3e2229bdae7b6652489e49e6e395313e0"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xe5, 0x1, "3f41cee9c353701a0318c53521f07be54327da3787344c5a5ff16be1491ac6d987153d5353530762365b43ef3da194af60d66c8d304efbb6233f2de19ad463918116fb23c5d694e3dc47274791d696038f07f2dae008c4b64fad896fa813d9f052ff72b1c58fb4f88dbd429a2aeba93268a6415d2a07c737ee274c72389597023239995f89e6c2871f414ac5d84f9515a346ca5eb469c3060c74d596684ed4a02e7923d5a4ca23deb91f2350d4276cde6e14f9baa249450b89cfc2706bf679bab87c46eb862e4c3bd7dc080795cf3178f21eb722b89e1fdbecf05b020042468a1a"}, @NFTA_DATA_VALUE={0x31, 0x1, "ea9c207852a894daa2a6ea15ab3b1464fc2789442e22f23ec05dbfde4c0742c8639111904d9a0616f2d1b7532e"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x101, 0x1, "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"}]}]}, {0xa4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xa0, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x4c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x8}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0xfffc}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x11}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xa}]}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x38, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}]}, {0xf4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7fff}, @NFTA_SET_ELEM_EXPRESSIONS={0xa8, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x50, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_EXPR={0x24, 0x7, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x10}]}}}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}]}, {0x8c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_DATA={0x44, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_DATA={0x28, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}]}]}, 0xf68}, 0x1, 0x0, 0x0, 0x20000050}, 0x4040000)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
gettid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0xc2)

1.471510582s ago: executing program 1 (id=252):
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x20a800, 0x1)
getdents(r1, &(0x7f0000000500)=""/119, 0x77)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r3}, 0x10)
r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$search(0xa, r4, &(0x7f0000000200)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, r4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_seqnum', 0x0, 0x110)
finit_module(r6, 0x0, 0x3)
sendto$rxrpc(r6, &(0x7f0000000200)="170605eb525f7a1e4f02c5e5e6e792e2fcc53479", 0x14, 0x40, &(0x7f0000000240)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @multicast2}}, 0x24)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r5}, 0x10)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
r8 = openat$bsg(0xffffffffffffff9c, 0x0, 0x200040, 0x0)
openat$cgroup_devices(r8, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0)
open_tree(r8, &(0x7f00000002c0)='./file0\x00', 0x101)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r6, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0}}, 0x10)
bind$packet(r8, &(0x7f0000000340)={0x11, 0x1c, r9, 0x1, 0x2, 0x6, @random="d853ebcc8d1d"}, 0x14)
connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1)
socket$unix(0x1, 0x1, 0x0)
r10 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$UHID_CREATE(r10, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120)
readv(r10, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x2)

1.451271462s ago: executing program 4 (id=253):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = socket(0x10, 0x803, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtfilter={0x9c, 0x2c, 0xd27, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, {0xfff3, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xdb}, @TCA_U32_POLICE={0xffffffffffffff77, 0x6, [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x5, 0x7, 0x7, {0xfa, 0x0, 0x6, 0x6, 0x3, 0x4}, {0x3, 0x0, 0x5, 0x9, 0xc, 0xfff}, 0x9, 0xd}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}]}, @TCA_U32_CLASSID={0x8, 0x1, {0xb, 0xd}}]}}]}, 0x9c}}, 0x20000000)

1.450255502s ago: executing program 3 (id=254):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
getsockopt$llc_int(r1, 0x10c, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400000099000000"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]})
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfe, 0x46c, &(0x7f0000000f00)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100100, 0x0, 0xfffffffffffffd25)

1.254749672s ago: executing program 3 (id=255):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
getsockopt$llc_int(r1, 0x10c, 0x4, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0x8004587d, &(0x7f0000000080))
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100100, 0x0, 0xfffffffffffffd25)

1.047370201s ago: executing program 2 (id=256):
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e000000200"/76], 0x310)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018", @ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='sessionid\x00')
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0)
socket$kcm(0xa, 0x5, 0x0)
socket$kcm(0xa, 0x5, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0)
pread64(r2, 0x0, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00')
r3 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="90000000100003050000", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32], 0x90}, 0x1, 0x0, 0x0, 0x20024080}, 0x0)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0)

1.022460731s ago: executing program 1 (id=257):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
getsockopt$llc_int(r1, 0x10c, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400000099000000"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]})
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfe, 0x46c, &(0x7f0000000f00)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100100, 0x0, 0xfffffffffffffd25)

974.542782ms ago: executing program 2 (id=258):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0xb40, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r7 = dup(r6)
setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000040)=[{{0x4, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x1}}], 0x8)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000c0)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f0000000040)={0x0, 0x0, 0x12, 0x2, 0x83, 0x7})
write$vga_arbiter(r1, &(0x7f0000000140)=@unlock_all, 0xb)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
pivot_root(&(0x7f0000000000)='./file0\x00', 0x0)

973.904492ms ago: executing program 3 (id=259):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0))
r1 = socket$packet(0x11, 0x3, 0x300)
setns(0xffffffffffffffff, 0x8000000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB="00000000070021b613000000000000001c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0)

943.236421ms ago: executing program 0 (id=260):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x8500, 0x10)
write$selinux_validatetrans(r3, &(0x7f0000000180)={'system_u:object_r:dhcpc_var_run_t:s0', 0x20, 'system_u:object_r:public_content_t:s0', 0x20, 0x6, 0x20, 'unconfined\x00'}, 0x6b)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r6, 0x0, 0xf}, 0x18)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500040000400000050005000a000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x24002800)
sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000030601020000000000000000000000000500010007"], 0x1c}}, 0x0)
r8 = getegid()
fcntl$getownex(r2, 0x10, &(0x7f0000000980)={0x0, <r9=>0x0})
r10 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0xa, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x50}, 0x1, 0x7}, 0x0)
lstat(&(0x7f00000009c0)='./file1\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, <r11=>0x0})
statx(r3, &(0x7f0000000a80)='./file1\x00', 0x400, 0x400, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0})
sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f0000000280)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000500)="e39b2923a7fc396009abb156868e11b3c868f5b1ffa794fe6d7ea28a4169ac755d07e8c30faa870bd2a7f3568b243612d0c1f99e83987192c6df177b2b499f8478cd4c5f9faf5cb98b1ceeaea388e12c177d04b310c27978afbb331adc23b0e1f7d6c5e102d295775740baa4", 0x6c}, {&(0x7f00000005c0)="fced6881b9c3d17155c98a5f2f9ae1440654802fafbd981edd2791e05c24dab5732e8ab61ab2ed17d5288803715614cc33b39e2f06ffb476c1dca02fc7679122e966cba5293655c470515c69790017fe0297c26cd8b5f5b84c5c605d7f23e719b32e5d894935b5de37de641b630749db9e94ebdebea4685b9fa94dd7a5102c59c6ee6fc867ee783a70d38ef431d64acc0fcb27489b55b2631bcfd0afd827783a5758cfc93152f4f0376c15b1ca3de817e3e54d9c3a7b89a076180177d66701bb7c53b4c85935fab7149d3b", 0xcb}, {&(0x7f0000000200)="e31d2bda0ca3", 0x6}, {&(0x7f00000006c0)="bd115cfd96e3bcd34a2f98cf54084819dd79bf4ba565ec4fe7a7fd74f36263f36f260a9e0ab9cff54dc3e07f8c4583653a10b491cf6474ff07c6b648053baecca2e40c0a09f66a03ea267c7136a67ff49236948e51a880a10534cd7ae8af1410c9db", 0x62}, {&(0x7f0000000740)="becca54880780c10b88c828c157883869d29f663b48a1ebafded0824c7c86aedb8197886e27a7f168ab44f7a0b5598d0dabc63e9fcb1141e940f64ae1c8f904f0e8d24a48b6efe9f73e1b1cd6e564b7251bbab1c51df4c9632961a89510380da333a9a1a5bb5091a1fb01cc59bba6a8ecd7b54418978ac51f158c9578963725b56f05ca4c3994317ee306017e3f2779759ff28f8b421b7cee4d4005f110f0e6f993639d961e96c3bd911ce69b086f1a5f4", 0xb1}, {&(0x7f0000000300)="2ecac1f3fc048279e62571a22bf4fe02b00ff325f20af7f2dca5ad294b227c6babcbc8429bf00b710db8a8e75b88aa12d787b0e688d4205f69c32386353f0988", 0x40}, {&(0x7f0000000800)="d0d655dbad1e52833cf53162cd1cb2d22df8718d88789742e68de17d873f563eed138a21fae45633281544f4f2511d0bd87ece5f5ded52289988995d7eda63a92ed423d32ca19d36f5f5b471d61887682ed1812739d6a49201a5235a5758299d059f275872aa0e8612d9e3dd94831d8575cd885a8bdbad6cf9db4a389cb11d21e2d015686822fb17eab2b4940770e601f687a7370136ed7fd6629fcbfa39af7801bb568bffc130c91da88659efe724ea1ebd5c0e7133a0034045e30248a4883207908b75e9398035ca", 0xc9}], 0x7, &(0x7f0000000bc0)=[@rights={{0x18, 0x1, 0x1, [r2, r0]}}, @rights={{0x28, 0x1, 0x1, [r2, r3, r0, r2, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {r4, 0x0, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r11, r12}}}], 0x80, 0x4000}, 0x20000010)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x2, 0x0}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6f)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x564, &(0x7f0000000ec0)="$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")

807.441961ms ago: executing program 4 (id=261):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx  \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0)
pause()

161.60084ms ago: executing program 1 (id=262):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socket$inet6(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x5}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x3}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000001340)='xs_stream_read_request\x00', r6}, 0x18)
syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x60d9, 0x1000, 0x2}, 0x0, 0x0)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
pread64(r7, &(0x7f0000001c00)=""/4108, 0x100c, 0x3)
setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18)
getsockopt$SO_COOKIE(r7, 0x1, 0x39, &(0x7f0000001380), &(0x7f0000001500)=0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0xf, &(0x7f0000001200)=@raw=[@jmp={0x5, 0x1, 0xc, 0xb, 0x1, 0xfffffffffffffff8, 0x10}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x985210b}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xde}], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000440)='kmem_cache_free\x00', r9, 0x0, 0x2}, 0x18)
socket(0x4000000000c, 0x5, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r10)
sendmsg$TIPC_CMD_GET_NODES(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r11, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r12 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r12, 0x84, 0x17, &(0x7f0000000240)=ANY=[], 0x3d)

38.51491ms ago: executing program 1 (id=263):
r0 = socket$kcm(0x21, 0x2, 0x2)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0)

18.43711ms ago: executing program 3 (id=264):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
r0 = getpid()
setreuid(0xee00, 0x0)
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
syz_clone3(&(0x7f00000008c0)={0x10860000, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r0], 0x1}, 0x58)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1081008}, 0xc, &(0x7f0000000a00)={&(0x7f00000018c0)={0xf68, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xf54, 0x3, 0x0, 0x1, [{0x24c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x200}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_DATA={0x224, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x29, 0x1, "38720eac03683e673c8351a715b69350bbe11ff452a789f7934869957da8c4fdaabebf641e"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x76, 0x1, "d3c983a5fd6fab31d5669ee723deb7ce95441ce27d3195adb9e3b327ddf9847100d9c62c736d77830572ec35e4b7feeb642389f53df2e40fbe6dbeb8d82db0a6953689f3faf839add335fc2d16b497a09c4c4a74af43bb8421307e68dfa11f2f191a30553712c1dc6395902696709d3eff43"}, @NFTA_DATA_VALUE={0xfc, 0x1, "70d0524dfb069dc1896a46f956f99f6024e56ed64cfd2bb35720fb6c1d42a116872b84df6e7706a83ed1f858cdfdf9ac0f214cab90f98fb62144621e934741517722e707ac3268b01edd3aa435c6bf876bd2cae45c0d05807aae412c8d1f0856dffdd1e7618c668def8460dc91cf3f0499621290ec09cb3495c7f57acc65bdf1da84d8b25ef073d1420d4b942951712a6a808ef6e7a790c19a1466f8fd055f72316f7ae96ad247c6d0d180f61538fe02da5bea3747e493add6bf9625d81c6be859913106065d09df084d6ad0719b2ab0bcfc72e07ccdd852acb5d74070fa71ae4c45bc821e32d9dab9861f1a42a9a7a6b9e6b9f74bd1df09"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xffffffffffffffff}]}, {0x6ac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x134, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x60, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x18}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x48, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x8b}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_SET_ELEM_DATA={0x1fc, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x3a, 0x1, "1b16cfe0777d661acda6934efeefde8d64339373289d12290f61b6da037a8a7bea2e6508f2f99b5a6086524cd2bce91f6bdd25ec94a0"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x8f, 0x1, "5fc26dbd24958ac8d12587c436d9c0822858da0f8e5cb68ed497b2a89bd1419fcc7ed54ada30bc73a4557c837c199e799f9b1c51b537082dd34ac1c8c44f5cf7b7499c67cf0a18f6f903d46468de3e8ec754f83c369abe5b5ed340e96f11a28300db1fe78cfc468e47818cb796c1815fae2cbb42f1e78eef759d483c9ba6c12496f8e835c2d8513211c54b"}, @NFTA_DATA_VALUE={0xcb, 0x1, "e496b6a3709094f8759a4f213553fb977faa39d4868894572154babba39a0b0be24453f6f35f36981270f8eb2f05ebb543649f9694a637c1e0d75b720f52791b15bb60a15d069dc5d7823176253b198b4b8753f879fbf3079cda7ea3849a60966c504196fd57019a9bc4e051961cd20a45061e18867d6ddd00c5437010bcf740896866f34caac9152c2b5e61c7691c828ade20fe51153ba6ff3b7a38983f9551644cc11442fda3d9211b31434bc1f516aaef29d4c3debde9d3c0645d041af4120443c77109e555"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x308, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x30, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_LAST_SET={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x30}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x33}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x23c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_IMMEDIATE_DATA={0x98, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x94, 0x1, "04867b3b0eb19aaf6af0a0789786d0d67acc8866107674d467b4696a73a0940cb197a939b28baf1a7f071026f94b133682bb7496ccfb3fa364708cb1b1ad9a2605a2f6bb46eae6b5214a916d314df5897cd23b204740bc5a764869157cca10e51918723410dca937d29447084aff8f79b680c2685cfcd2b77b5df1aeeed00737f13d87fe8039da5983ee6644149a2db3"}]}, @NFTA_IMMEDIATE_DATA={0x184, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbe, 0x1, "cee735f3dbe07ce4aed0c11a881c14fc46dfa61f45e4c039e540693deadb0e01445c5ca8d1e3c9cda37fec9eab18e3f27a040e091ac890bff1ebdf361d40dbe7442326ec889e27213a326156d7b36c67e060977011bd7dc3b2ba73cc59cc43f524e2c312cccb06e2f3bdfad2f4f21ae40352b2a75610afbf50c19645f2d1beab5b1b3192dcb9be1f7e5970ad0de6d8ad5499788b4a50153740ce58c371fb576382364bc42e4b3d1b15f4d299047ae7a102d6ecc726718cf5ee35"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x70, 0xb, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x5}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x3}]}}}, {0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}]}}}]}]}, {0x424, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x100000000}, @NFTA_SET_ELEM_KEY_END={0x414, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbc, 0x1, "8ba36f364a96caea2b99edd2dcac5154f7ffec8cfe1eac9ad950c82a8e4422f804b5951be65198a2e5c358da7351b20c90e4a7c1dd3a700a0210e2d0a3e649d0516e8ac95f5bc8d10539e636a0a51efe0bac0d9163dbfe0f6091b3b13a4bc80146919b426f51bd087cdc58273316561dbaf37e36962614f7ec1e70e6bd36ac2bdc6afed5b65757ef78125f928668a9ed6789382fb5957009c44476d57f4226dc3d3c543b93393da00bf21b1025fa9d9af2b1cca66f2bfec8"}, @NFTA_DATA_VALUE={0x101, 0x1, "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"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xe5, 0x1, "3f41cee9c353701a0318c53521f07be54327da3787344c5a5ff16be1491ac6d987153d5353530762365b43ef3da194af60d66c8d304efbb6233f2de19ad463918116fb23c5d694e3dc47274791d696038f07f2dae008c4b64fad896fa813d9f052ff72b1c58fb4f88dbd429a2aeba93268a6415d2a07c737ee274c72389597023239995f89e6c2871f414ac5d84f9515a346ca5eb469c3060c74d596684ed4a02e7923d5a4ca23deb91f2350d4276cde6e14f9baa249450b89cfc2706bf679bab87c46eb862e4c3bd7dc080795cf3178f21eb722b89e1fdbecf05b020042468a1a"}, @NFTA_DATA_VALUE={0x31, 0x1, "ea9c207852a894daa2a6ea15ab3b1464fc2789442e22f23ec05dbfde4c0742c8639111904d9a0616f2d1b7532e"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x101, 0x1, "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"}]}]}, {0xa4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xa0, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x4c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x8}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0xfffc}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x11}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xa}]}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x38, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}]}, {0xf4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7fff}, @NFTA_SET_ELEM_EXPRESSIONS={0xa8, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x50, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_EXPR={0x24, 0x7, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x10}]}}}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}]}, {0x8c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_DATA={0x44, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_DATA={0x28, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}]}]}, 0xf68}, 0x1, 0x0, 0x0, 0x20000050}, 0x4040000)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
gettid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0xc2)

0s ago: executing program 3 (id=265):
socket$packet(0x11, 0x3, 0x300)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xec, @void, @value}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
write$binfmt_elf32(r1, &(0x7f00000014c0)=ANY=[], 0x46b)
sendmmsg$inet(r1, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841)
socket$unix(0x1, 0x5, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20048881, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

[   21.304664][   T29] audit: type=1400 audit(1737084577.059:81): avc:  denied  { read } for  pid=2981 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
Warning: Permanently added '10.128.0.108' (ED25519) to the list of known hosts.
[   27.079454][   T29] audit: type=1400 audit(1737084582.839:82): avc:  denied  { mounton } for  pid=3286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   27.080763][ T3286] cgroup: Unknown subsys name 'net'
[   27.102184][   T29] audit: type=1400 audit(1737084582.839:83): avc:  denied  { mount } for  pid=3286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   27.129587][   T29] audit: type=1400 audit(1737084582.869:84): avc:  denied  { unmount } for  pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   27.367111][ T3286] cgroup: Unknown subsys name 'cpuset'
[   27.373339][ T3286] cgroup: Unknown subsys name 'rlimit'
[   27.524468][   T29] audit: type=1400 audit(1737084583.279:85): avc:  denied  { setattr } for  pid=3286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   27.547920][   T29] audit: type=1400 audit(1737084583.279:86): avc:  denied  { create } for  pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   27.568519][   T29] audit: type=1400 audit(1737084583.279:87): avc:  denied  { write } for  pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   27.588923][   T29] audit: type=1400 audit(1737084583.279:88): avc:  denied  { read } for  pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   27.609221][   T29] audit: type=1400 audit(1737084583.289:89): avc:  denied  { mounton } for  pid=3286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   27.634087][   T29] audit: type=1400 audit(1737084583.289:90): avc:  denied  { mount } for  pid=3286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   27.643270][ T3289] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   27.666230][   T29] audit: type=1400 audit(1737084583.429:91): avc:  denied  { relabelto } for  pid=3289 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
Setting up swapspace version 1, size = 127995904 bytes
[   27.778115][ T3286] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   29.777077][ T3296] chnl_net:caif_netlink_parms(): no params data found
[   29.840326][ T3301] chnl_net:caif_netlink_parms(): no params data found
[   29.868522][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.875643][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.883123][ T3296] bridge_slave_0: entered allmulticast mode
[   29.889537][ T3296] bridge_slave_0: entered promiscuous mode
[   29.926432][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.933543][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.940768][ T3296] bridge_slave_1: entered allmulticast mode
[   29.947272][ T3296] bridge_slave_1: entered promiscuous mode
[   29.953479][ T3299] chnl_net:caif_netlink_parms(): no params data found
[   29.971831][ T3295] chnl_net:caif_netlink_parms(): no params data found
[   29.993648][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.006237][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.058232][ T3296] team0: Port device team_slave_0 added
[   30.088175][ T3296] team0: Port device team_slave_1 added
[   30.095967][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.103098][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.110458][ T3301] bridge_slave_0: entered allmulticast mode
[   30.117028][ T3301] bridge_slave_0: entered promiscuous mode
[   30.123561][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.130763][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.137946][ T3301] bridge_slave_1: entered allmulticast mode
[   30.144275][ T3301] bridge_slave_1: entered promiscuous mode
[   30.172855][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.179970][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.187244][ T3299] bridge_slave_0: entered allmulticast mode
[   30.193639][ T3299] bridge_slave_0: entered promiscuous mode
[   30.204379][ T3305] chnl_net:caif_netlink_parms(): no params data found
[   30.220322][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.227452][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.234590][ T3299] bridge_slave_1: entered allmulticast mode
[   30.241133][ T3299] bridge_slave_1: entered promiscuous mode
[   30.247760][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.254725][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.280889][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.301764][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.325891][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.332985][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.359079][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.375560][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.389591][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.396728][ T3295] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.403848][ T3295] bridge_slave_0: entered allmulticast mode
[   30.410226][ T3295] bridge_slave_0: entered promiscuous mode
[   30.417634][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.427909][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.450482][ T3295] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.457671][ T3295] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.464913][ T3295] bridge_slave_1: entered allmulticast mode
[   30.471506][ T3295] bridge_slave_1: entered promiscuous mode
[   30.490230][ T3301] team0: Port device team_slave_0 added
[   30.502759][ T3295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.512357][ T3299] team0: Port device team_slave_0 added
[   30.521073][ T3301] team0: Port device team_slave_1 added
[   30.532368][ T3295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.546373][ T3299] team0: Port device team_slave_1 added
[   30.554132][ T3296] hsr_slave_0: entered promiscuous mode
[   30.560105][ T3296] hsr_slave_1: entered promiscuous mode
[   30.594456][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.601493][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.627495][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.647477][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.654446][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.680524][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.696208][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.703352][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.710565][ T3305] bridge_slave_0: entered allmulticast mode
[   30.717016][ T3305] bridge_slave_0: entered promiscuous mode
[   30.723740][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.730817][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.738477][ T3305] bridge_slave_1: entered allmulticast mode
[   30.744867][ T3305] bridge_slave_1: entered promiscuous mode
[   30.751561][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.758582][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.785053][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.796668][ T3295] team0: Port device team_slave_0 added
[   30.802531][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.809524][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.835463][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.866958][ T3295] team0: Port device team_slave_1 added
[   30.897653][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.908118][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.926449][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.933416][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.959516][ T3295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.972513][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.979534][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.005504][ T3295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.027127][ T3305] team0: Port device team_slave_0 added
[   31.034866][ T3299] hsr_slave_0: entered promiscuous mode
[   31.040792][ T3299] hsr_slave_1: entered promiscuous mode
[   31.046731][ T3299] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   31.054288][ T3299] Cannot create hsr debugfs directory
[   31.069609][ T3305] team0: Port device team_slave_1 added
[   31.077512][ T3301] hsr_slave_0: entered promiscuous mode
[   31.083487][ T3301] hsr_slave_1: entered promiscuous mode
[   31.089496][ T3301] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   31.097095][ T3301] Cannot create hsr debugfs directory
[   31.140613][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.147630][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.174080][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.200577][ T3295] hsr_slave_0: entered promiscuous mode
[   31.206802][ T3295] hsr_slave_1: entered promiscuous mode
[   31.212815][ T3295] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   31.220398][ T3295] Cannot create hsr debugfs directory
[   31.226242][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.233187][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.259179][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.333324][ T3305] hsr_slave_0: entered promiscuous mode
[   31.339449][ T3305] hsr_slave_1: entered promiscuous mode
[   31.345496][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   31.353120][ T3305] Cannot create hsr debugfs directory
[   31.427519][ T3296] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   31.447710][ T3296] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   31.456550][ T3296] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   31.474192][ T3296] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   31.502798][ T3299] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   31.511675][ T3299] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   31.527254][ T3299] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   31.544502][ T3299] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   31.558609][ T3301] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   31.569085][ T3301] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   31.578138][ T3301] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   31.587889][ T3301] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   31.643240][ T3295] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   31.652199][ T3295] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   31.661578][ T3295] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   31.677417][ T3295] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   31.699306][ T3305] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   31.716632][ T3305] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   31.733518][ T3305] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   31.742143][ T3305] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   31.772006][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.787402][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.796540][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.821781][ T3296] 8021q: adding VLAN 0 to HW filter on device team0
[   31.833810][ T3301] 8021q: adding VLAN 0 to HW filter on device team0
[   31.845399][ T3299] 8021q: adding VLAN 0 to HW filter on device team0
[   31.854287][  T411] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.861378][  T411] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.870263][  T411] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.877342][  T411] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.891049][  T411] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.898145][  T411] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.925183][  T411] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.932298][  T411] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.941112][  T411] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.948242][  T411] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.968511][  T381] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.975574][  T381] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.992276][ T3295] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.006893][ T3295] 8021q: adding VLAN 0 to HW filter on device team0
[   32.029755][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.037151][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.045747][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.052891][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.090021][ T3296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   32.120818][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.139443][ T3305] 8021q: adding VLAN 0 to HW filter on device team0
[   32.164903][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.176666][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.183871][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.194705][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.201828][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.236021][ T3305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   32.246557][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   32.282164][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.294656][ T3295] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.314967][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.402074][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.431890][ T3299] veth0_vlan: entered promiscuous mode
[   32.470774][ T3301] veth0_vlan: entered promiscuous mode
[   32.485928][ T3299] veth1_vlan: entered promiscuous mode
[   32.512475][ T3301] veth1_vlan: entered promiscuous mode
[   32.522095][ T3295] veth0_vlan: entered promiscuous mode
[   32.530513][ T3295] veth1_vlan: entered promiscuous mode
[   32.543988][ T3296] veth0_vlan: entered promiscuous mode
[   32.567869][ T3299] veth0_macvtap: entered promiscuous mode
[   32.575527][ T3299] veth1_macvtap: entered promiscuous mode
[   32.582622][ T3296] veth1_vlan: entered promiscuous mode
[   32.599195][ T3301] veth0_macvtap: entered promiscuous mode
[   32.608267][ T3301] veth1_macvtap: entered promiscuous mode
[   32.624275][ T3305] veth0_vlan: entered promiscuous mode
[   32.639224][ T3295] veth0_macvtap: entered promiscuous mode
[   32.646810][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.655917][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.666427][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.677530][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.689487][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.697297][ T3305] veth1_vlan: entered promiscuous mode
[   32.704769][ T3295] veth1_macvtap: entered promiscuous mode
[   32.715130][ T3299] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.723973][ T3299] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.732708][ T3299] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.741630][ T3299] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.752384][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.762928][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.773342][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.781515][ T3296] veth0_macvtap: entered promiscuous mode
[   32.794467][ T3295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.805045][ T3295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.814875][ T3295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.825344][ T3295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.836975][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.845570][ T3296] veth1_macvtap: entered promiscuous mode
[   32.853671][ T3301] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.862630][ T3301] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.871372][ T3301] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.880275][ T3301] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.906197][   T29] kauditd_printk_skb: 18 callbacks suppressed
[   32.906214][   T29] audit: type=1400 audit(1737084588.659:110): avc:  denied  { mounton } for  pid=3301 comm="syz-executor" path="/root/syzkaller.fsF3xC/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   32.913275][ T3305] veth0_macvtap: entered promiscuous mode
[   32.936731][   T29] audit: type=1400 audit(1737084588.659:111): avc:  denied  { mount } for  pid=3301 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   32.948849][ T3295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.964382][   T29] audit: type=1400 audit(1737084588.659:112): avc:  denied  { mounton } for  pid=3301 comm="syz-executor" path="/root/syzkaller.fsF3xC/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   32.974779][ T3295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.974791][ T3295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.974808][ T3295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.000117][   T29] audit: type=1400 audit(1737084588.659:113): avc:  denied  { mount } for  pid=3301 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   33.015641][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.020383][   T29] audit: type=1400 audit(1737084588.659:114): avc:  denied  { mounton } for  pid=3301 comm="syz-executor" path="/root/syzkaller.fsF3xC/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   33.033198][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   33.051982][   T29] audit: type=1400 audit(1737084588.659:115): avc:  denied  { mounton } for  pid=3301 comm="syz-executor" path="/root/syzkaller.fsF3xC/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   33.059284][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.086892][   T29] audit: type=1400 audit(1737084588.669:116): avc:  denied  { unmount } for  pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   33.096282][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   33.136343][   T29] audit: type=1400 audit(1737084588.889:117): avc:  denied  { mounton } for  pid=3301 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   33.152992][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.153009][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   33.153026][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.165653][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.186400][   T29] audit: type=1400 audit(1737084588.889:118): avc:  denied  { mount } for  pid=3301 comm="syz-executor" name="/" dev="gadgetfs" ino=4463 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   33.197789][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   33.257241][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.267105][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   33.277603][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.287464][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   33.297943][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.310141][ T3301] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   33.311138][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.338884][   T29] audit: type=1400 audit(1737084589.099:119): avc:  denied  { read write } for  pid=3301 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   33.339933][ T3296] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.371954][ T3296] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.380720][ T3296] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.389499][ T3296] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.405423][ T3305] veth1_macvtap: entered promiscuous mode
[   33.427644][ T3295] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.436549][ T3295] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.445667][ T3295] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.454664][ T3295] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.467682][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   33.478235][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.488159][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   33.498640][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.508488][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   33.519021][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.528897][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   33.539401][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.550178][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.587215][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   33.597805][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.607736][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   33.618252][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.628303][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   33.638807][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.648786][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   33.659397][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.670619][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.684034][ T3305] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.692876][ T3305] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.701752][ T3305] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.710614][ T3305] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.772047][ T3445] loop0: detected capacity change from 0 to 512
[   33.825047][ T3445] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   33.871067][ T3455] hub 9-0:1.0: USB hub found
[   33.907633][ T3455] hub 9-0:1.0: 8 ports detected
[   33.918852][ T3445] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[   33.959353][ T3463] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   33.979288][ T3445] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.1: corrupted in-inode xattr: e_value size too large
[   34.002346][ T3465] hub 9-0:1.0: USB hub found
[   34.006782][ T3445] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.1: couldn't read orphan inode 15 (err -117)
[   34.011890][ T3465] hub 9-0:1.0: 8 ports detected
[   34.022824][ T3445] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.045034][ T3445] EXT4-fs (loop0): shut down requested (0)
[   34.144860][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.409220][ T3472] TCP: out of memory -- consider tuning tcp_mem
[   34.535384][ T3483] FAULT_INJECTION: forcing a failure.
[   34.535384][ T3483] name failslab, interval 1, probability 0, space 0, times 1
[   34.548238][ T3483] CPU: 0 UID: 0 PID: 3483 Comm: syz.2.14 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0
[   34.558785][ T3483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   34.568927][ T3483] Call Trace:
[   34.572239][ T3483]  <TASK>
[   34.575210][ T3483]  dump_stack_lvl+0xf2/0x150
[   34.579865][ T3483]  dump_stack+0x15/0x1a
[   34.584073][ T3483]  should_fail_ex+0x223/0x230
[   34.588860][ T3483]  should_failslab+0x8f/0xb0
[   34.593596][ T3483]  kmem_cache_alloc_noprof+0x52/0x320
[   34.598996][ T3483]  ? getname_flags+0x81/0x3b0
[   34.603702][ T3483]  getname_flags+0x81/0x3b0
[   34.608242][ T3483]  getname+0x17/0x20
[   34.612224][ T3483]  do_sys_openat2+0x67/0x120
[   34.616843][ T3483]  __x64_sys_openat+0xf3/0x120
[   34.621639][ T3483]  x64_sys_call+0x2b30/0x2dc0
[   34.626350][ T3483]  do_syscall_64+0xc9/0x1c0
[   34.630886][ T3483]  ? clear_bhb_loop+0x55/0xb0
[   34.635586][ T3483]  ? clear_bhb_loop+0x55/0xb0
[   34.640281][ T3483]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   34.646241][ T3483] RIP: 0033:0x7fde99b25d29
[   34.650674][ T3483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   34.670370][ T3483] RSP: 002b:00007fde98191038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   34.678882][ T3483] RAX: ffffffffffffffda RBX: 00007fde99d15fa0 RCX: 00007fde99b25d29
[   34.686863][ T3483] RDX: 0000000002000000 RSI: 0000000020000000 RDI: ffffffffffffff9c
[   34.694847][ T3483] RBP: 00007fde98191090 R08: 0000000000000000 R09: 0000000000000000
[   34.702827][ T3483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   34.710855][ T3483] R13: 0000000000000000 R14: 00007fde99d15fa0 R15: 00007ffea2b45c28
[   34.718884][ T3483]  </TASK>
[   34.828363][ T3494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3494 comm=syz.2.17
[   35.138939][ T3529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25'.
[   35.222811][ T3542] xt_hashlimit: size too large, truncated to 1048576
[   35.363031][ T3548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29'.
[   35.528014][ T3556] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3556 comm=syz.1.30
[   35.828111][ T3566] loop1: detected capacity change from 0 to 512
[   35.851262][ T3566] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c118, mo2=0002]
[   35.852161][ T3568] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3568 comm=syz.2.35
[   35.871630][ T3568] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3568 comm=syz.2.35
[   35.871998][ T3566] System zones: 0-2, 18-18, 34-34
[   35.906252][ T3566] EXT4-fs (loop1): too many log groups per flexible block group
[   35.913994][ T3566] EXT4-fs (loop1): failed to initialize mballoc (-12)
[   35.924093][ T3566] EXT4-fs (loop1): mount failed
[   35.933527][ T3572] capability: warning: `syz.2.35' uses deprecated v2 capabilities in a way that may be insecure
[   36.043327][ T3578] loop2: detected capacity change from 0 to 2048
[   36.079097][ T3578] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.220384][ T3582] hub 9-0:1.0: USB hub found
[   36.227342][ T3582] hub 9-0:1.0: 8 ports detected
[   36.390860][ T3595] 9pnet_fd: Insufficient options for proto=fd
[   36.423495][ T3595] netlink: 32 bytes leftover after parsing attributes in process `syz.0.41'.
[   36.552870][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.644792][ T3599] loop2: detected capacity change from 0 to 512
[   36.662809][ T3599] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   36.687845][ T3599] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[   36.705150][ T3606] xt_hashlimit: size too large, truncated to 1048576
[   36.805300][ T3599] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.43: corrupted in-inode xattr: e_value size too large
[   36.821826][ T3608] netlink: 112 bytes leftover after parsing attributes in process `syz.1.46'.
[   36.850903][ T3599] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.43: couldn't read orphan inode 15 (err -117)
[   36.858477][ T3608] netlink: 112 bytes leftover after parsing attributes in process `syz.1.46'.
[   36.892625][ T3599] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.957294][ T3608] Zero length message leads to an empty skb
[   37.435698][ T3622] loop0: detected capacity change from 0 to 128
[   37.453103][ T3622] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[   37.466161][ T3622] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   37.474035][ T3624] loop3: detected capacity change from 0 to 512
[   37.489618][ T3622] ext2 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   37.523963][ T3624] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[   37.529962][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.539185][ T3624] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[   37.563914][ T3624] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.49: corrupted in-inode xattr: e_value size too large
[   37.592059][ T3624] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.49: couldn't read orphan inode 15 (err -117)
[   37.592441][ T3299] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   37.610113][ T3624] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.634337][ T3634] hub 9-0:1.0: USB hub found
[   37.639058][ T3634] hub 9-0:1.0: 8 ports detected
[   37.653970][ T3624] EXT4-fs (loop3): shut down requested (0)
[   37.686844][ T3639] loop2: detected capacity change from 0 to 512
[   37.704006][ T3639] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   37.717168][ T3639] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   37.729459][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.737337][ T3639] EXT4-fs (loop2): 1 truncate cleaned up
[   37.745612][ T3639] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.782860][ T3646] loop4: detected capacity change from 0 to 512
[   37.798577][ T3648] netlink: 100 bytes leftover after parsing attributes in process `syz.3.57'.
[   37.833100][ T3646] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.848747][ T3646] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   37.869729][ T3652] netlink: 'syz.0.59': attribute type 1 has an invalid length.
[   37.877488][ T3652] netlink: 'syz.0.59': attribute type 2 has an invalid length.
[   37.896213][ T3652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.59'.
[   37.923319][   T29] kauditd_printk_skb: 385 callbacks suppressed
[   37.923333][   T29] audit: type=1400 audit(1737084593.679:505): avc:  denied  { bind } for  pid=3651 comm="syz.0.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   37.948643][   T29] audit: type=1400 audit(1737084593.679:506): avc:  denied  { connect } for  pid=3651 comm="syz.0.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   37.968225][   T29] audit: type=1400 audit(1737084593.679:507): avc:  denied  { write } for  pid=3651 comm="syz.0.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   37.987680][   T29] audit: type=1400 audit(1737084593.679:508): avc:  denied  { create } for  pid=3651 comm="syz.0.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[   38.017111][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.040609][   T29] audit: type=1326 audit(1737084593.679:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3645 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc485fd5d29 code=0x7ffc0000
[   38.087574][ T3666] netlink: 32 bytes leftover after parsing attributes in process `syz.4.62'.
[   38.715870][ T3639] syz.2.55 (3639) used greatest stack depth: 7184 bytes left
[   38.728302][   T29] audit: type=1400 audit(1737084594.489:510): avc:  denied  { create } for  pid=3673 comm="syz.4.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   38.747670][   T29] audit: type=1400 audit(1737084594.489:511): avc:  denied  { read } for  pid=3673 comm="gtp" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   38.782539][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.820619][   T29] audit: type=1400 audit(1737084594.559:512): avc:  denied  { write } for  pid=3673 comm="syz.4.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   38.841613][ T3679] FAULT_INJECTION: forcing a failure.
[   38.841613][ T3679] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   38.854792][ T3679] CPU: 1 UID: 0 PID: 3679 Comm: syz.1.67 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0
[   38.865329][ T3679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   38.875399][ T3679] Call Trace:
[   38.878697][ T3679]  <TASK>
[   38.881726][ T3679]  dump_stack_lvl+0xf2/0x150
[   38.886351][ T3679]  dump_stack+0x15/0x1a
[   38.890610][ T3679]  should_fail_ex+0x223/0x230
[   38.895309][ T3679]  should_fail+0xb/0x10
[   38.899496][ T3679]  should_fail_usercopy+0x1a/0x20
[   38.904585][ T3679]  _copy_to_user+0x20/0xa0
[   38.909110][ T3679]  simple_read_from_buffer+0xa0/0x110
[   38.914556][ T3679]  proc_fail_nth_read+0xf9/0x140
[   38.919547][ T3679]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   38.925308][ T3679]  vfs_read+0x1a2/0x700
[   38.929491][ T3679]  ? __rcu_read_unlock+0x4e/0x70
[   38.934537][ T3679]  ? __fget_files+0x17c/0x1c0
[   38.939350][ T3679]  ksys_read+0xe8/0x1b0
[   38.943537][ T3679]  __x64_sys_read+0x42/0x50
[   38.948106][ T3679]  x64_sys_call+0x2874/0x2dc0
[   38.952818][ T3679]  do_syscall_64+0xc9/0x1c0
[   38.957442][ T3679]  ? clear_bhb_loop+0x55/0xb0
[   38.962151][ T3679]  ? clear_bhb_loop+0x55/0xb0
[   38.966856][ T3679]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   38.972855][ T3679] RIP: 0033:0x7fe4386d473c
[   38.977294][ T3679] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   38.996951][ T3679] RSP: 002b:00007fe436d41030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   39.005422][ T3679] RAX: ffffffffffffffda RBX: 00007fe4388c5fa0 RCX: 00007fe4386d473c
[   39.013420][ T3679] RDX: 000000000000000f RSI: 00007fe436d410a0 RDI: 0000000000000004
[   39.021414][ T3679] RBP: 00007fe436d41090 R08: 0000000000000000 R09: 0000000000000000
[   39.029417][ T3679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   39.037492][ T3679] R13: 0000000000000000 R14: 00007fe4388c5fa0 R15: 00007ffc0deec608
[   39.045525][ T3679]  </TASK>
[   39.098209][   T29] audit: type=1326 audit(1737084594.859:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3683 comm="syz.1.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4386d5d29 code=0x7ffc0000
[   39.102326][ T3684] loop1: detected capacity change from 0 to 512
[   39.150658][   T29] audit: type=1326 audit(1737084594.859:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3683 comm="syz.1.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fe4386d5d29 code=0x7ffc0000
[   39.170588][ T3688] loop3: detected capacity change from 0 to 512
[   39.196277][ T3684] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   39.211566][ T3688] journal_path: Non-blockdev passed as './bus'
[   39.217866][ T3688] EXT4-fs: error: could not find journal device path
[   39.224614][ T3684] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[   39.243931][ T3684] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.68: corrupted in-inode xattr: e_value size too large
[   39.273579][ T3684] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.68: couldn't read orphan inode 15 (err -117)
[   39.278501][ T3696] loop3: detected capacity change from 0 to 512
[   39.294264][ T3696] EXT4-fs: Ignoring removed orlov option
[   39.301458][ T3696] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   39.312706][ T3684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.328167][ T3684] EXT4-fs (loop1): shut down requested (0)
[   39.328334][ T3696] EXT4-fs (loop3): 1 truncate cleaned up
[   39.366738][ T3696] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.371829][ T3701] netlink: 100 bytes leftover after parsing attributes in process `syz.2.73'.
[   39.414022][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.434866][ T3703] netlink: 32 bytes leftover after parsing attributes in process `syz.0.74'.
[   39.453729][ T3705] loop3: detected capacity change from 0 to 512
[   39.462334][ T3705] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   39.478500][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.494490][ T3705] EXT4-fs (loop3): 1 truncate cleaned up
[   39.502198][ T3705] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.515294][ T3707] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9)
[   39.521839][ T3707] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[   39.529721][ T3707] vhci_hcd vhci_hcd.0: Device attached
[   39.586026][ T3712] vhci_hcd: connection closed
[   39.587971][ T3719] loop1: detected capacity change from 0 to 2048
[   39.636276][   T11] vhci_hcd: stop threads
[   39.640622][   T11] vhci_hcd: release socket
[   39.645068][   T11] vhci_hcd: disconnect device
[   39.760160][ T3719] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.779569][ T3718] loop2: detected capacity change from 0 to 512
[   39.812276][ T3719] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   39.889452][ T3718] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.903685][ T3718] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   39.923936][ T3722] FAULT_INJECTION: forcing a failure.
[   39.923936][ T3722] name failslab, interval 1, probability 0, space 0, times 0
[   39.936623][ T3722] CPU: 1 UID: 0 PID: 3722 Comm: syz.4.81 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0
[   39.947269][ T3722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   39.957349][ T3722] Call Trace:
[   39.960636][ T3722]  <TASK>
[   39.963574][ T3722]  dump_stack_lvl+0xf2/0x150
[   39.968258][ T3722]  dump_stack+0x15/0x1a
[   39.972450][ T3722]  should_fail_ex+0x223/0x230
[   39.977257][ T3722]  should_failslab+0x8f/0xb0
[   39.981887][ T3722]  __kmalloc_noprof+0xab/0x3f0
[   39.986679][ T3722]  ? memcg_list_lru_alloc+0x187/0x4e0
[   39.992082][ T3722]  memcg_list_lru_alloc+0x187/0x4e0
[   39.997428][ T3722]  __memcg_slab_post_alloc_hook+0x1a2/0x660
[   40.003345][ T3722]  ? should_fail_ex+0xd7/0x230
[   40.008135][ T3722]  kmem_cache_alloc_lru_noprof+0x230/0x320
[   40.014011][ T3722]  ? hugetlbfs_alloc_inode+0xbc/0x100
[   40.019424][ T3722]  hugetlbfs_alloc_inode+0xbc/0x100
[   40.024709][ T3722]  ? __pfx_hugetlbfs_alloc_inode+0x10/0x10
[   40.030587][ T3722]  alloc_inode+0x3c/0x160
[   40.035118][ T3722]  new_inode+0x1e/0x100
[   40.039296][ T3722]  hugetlbfs_get_inode+0x7d/0x380
[   40.044364][ T3722]  hugetlb_file_setup+0x188/0x3c0
[   40.049412][ T3722]  ksys_mmap_pgoff+0x172/0x330
[   40.054258][ T3722]  x64_sys_call+0x1940/0x2dc0
[   40.058959][ T3722]  do_syscall_64+0xc9/0x1c0
[   40.063501][ T3722]  ? clear_bhb_loop+0x55/0xb0
[   40.068203][ T3722]  ? clear_bhb_loop+0x55/0xb0
[   40.072899][ T3722]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   40.078817][ T3722] RIP: 0033:0x7fc485fd5d29
[   40.083280][ T3722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   40.102959][ T3722] RSP: 002b:00007fc484647038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[   40.111405][ T3722] RAX: ffffffffffffffda RBX: 00007fc4861c5fa0 RCX: 00007fc485fd5d29
[   40.119410][ T3722] RDX: 0000000000000000 RSI: 0000000001400000 RDI: 0000000020000000
[   40.127404][ T3722] RBP: 00007fc484647090 R08: ffffffffffffffff R09: 0000000000000000
[   40.135400][ T3722] R10: 00000000000c3072 R11: 0000000000000246 R12: 0000000000000001
[   40.143410][ T3722] R13: 0000000000000000 R14: 00007fc4861c5fa0 R15: 00007ffd9e0be5e8
[   40.151442][ T3722]  </TASK>
[   40.168716][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.249686][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.330466][ T3738] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280
[   40.356243][ T3734] loop1: detected capacity change from 0 to 8192
[   40.474918][ T3705] syz.3.75 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000
[   40.488916][ T3705] CPU: 1 UID: 0 PID: 3705 Comm: syz.3.75 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0
[   40.499495][ T3705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   40.509570][ T3705] Call Trace:
[   40.512861][ T3705]  <TASK>
[   40.515804][ T3705]  dump_stack_lvl+0xf2/0x150
[   40.520424][ T3705]  dump_stack+0x15/0x1a
[   40.524676][ T3705]  dump_header+0x83/0x2d0
[   40.529037][ T3705]  oom_kill_process+0x341/0x4c0
[   40.533925][ T3705]  out_of_memory+0x9af/0xbe0
[   40.538583][ T3705]  ? css_next_descendant_pre+0x11c/0x140
[   40.544312][ T3705]  mem_cgroup_out_of_memory+0x13e/0x190
[   40.549910][ T3705]  try_charge_memcg+0x508/0x7f0
[   40.554780][ T3705]  obj_cgroup_charge_pages+0xbd/0x1a0
[   40.560206][ T3705]  __memcg_kmem_charge_page+0x9d/0x170
[   40.565680][ T3705]  __alloc_pages_noprof+0x1bc/0x340
[   40.571034][ T3705]  alloc_pages_mpol_noprof+0xb8/0x260
[   40.576424][ T3705]  alloc_pages_noprof+0xe1/0x100
[   40.581384][ T3705]  __vmalloc_node_range_noprof+0x6eb/0xe80
[   40.587288][ T3705]  __kvmalloc_node_noprof+0x121/0x170
[   40.592717][ T3705]  ? ip_set_alloc+0x1f/0x30
[   40.597247][ T3705]  ip_set_alloc+0x1f/0x30
[   40.601657][ T3705]  hash_netiface_create+0x273/0x730
[   40.606878][ T3705]  ? __nla_parse+0x40/0x60
[   40.611322][ T3705]  ? __pfx_hash_netiface_create+0x10/0x10
[   40.617087][ T3705]  ip_set_create+0x359/0x8a0
[   40.621683][ T3705]  ? strnstr+0xe1/0x100
[   40.625934][ T3705]  ? __nla_parse+0x40/0x60
[   40.630369][ T3705]  nfnetlink_rcv_msg+0x4a9/0x570
[   40.635348][ T3705]  netlink_rcv_skb+0x12c/0x230
[   40.640160][ T3705]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   40.645646][ T3705]  nfnetlink_rcv+0x16c/0x15d0
[   40.650342][ T3705]  ? kmem_cache_free+0xdc/0x2d0
[   40.655208][ T3705]  ? nlmon_xmit+0x51/0x60
[   40.659551][ T3705]  ? __kfree_skb+0x102/0x150
[   40.664198][ T3705]  ? consume_skb+0x49/0x160
[   40.668721][ T3705]  ? nlmon_xmit+0x51/0x60
[   40.673096][ T3705]  ? dev_hard_start_xmit+0x3c1/0x3f0
[   40.678398][ T3705]  ? __dev_queue_xmit+0xb6e/0x2090
[   40.683559][ T3705]  ? ref_tracker_free+0x3a5/0x410
[   40.688677][ T3705]  ? __dev_queue_xmit+0x186/0x2090
[   40.693804][ T3705]  ? __netlink_deliver_tap+0x4c6/0x4f0
[   40.699374][ T3705]  netlink_unicast+0x599/0x670
[   40.704155][ T3705]  netlink_sendmsg+0x5cc/0x6e0
[   40.708941][ T3705]  ? __pfx_netlink_sendmsg+0x10/0x10
[   40.714240][ T3705]  __sock_sendmsg+0x140/0x180
[   40.718941][ T3705]  ____sys_sendmsg+0x312/0x410
[   40.723753][ T3705]  __sys_sendmsg+0x19d/0x230
[   40.728427][ T3705]  __x64_sys_sendmsg+0x46/0x50
[   40.733239][ T3705]  x64_sys_call+0x2734/0x2dc0
[   40.738004][ T3705]  do_syscall_64+0xc9/0x1c0
[   40.742518][ T3705]  ? clear_bhb_loop+0x55/0xb0
[   40.747209][ T3705]  ? clear_bhb_loop+0x55/0xb0
[   40.751904][ T3705]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   40.757811][ T3705] RIP: 0033:0x7f69de005d29
[   40.762231][ T3705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   40.781951][ T3705] RSP: 002b:00007f69dc677038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   40.790391][ T3705] RAX: ffffffffffffffda RBX: 00007f69de1f5fa0 RCX: 00007f69de005d29
[   40.798380][ T3705] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004
[   40.806356][ T3705] RBP: 00007f69de081b08 R08: 0000000000000000 R09: 0000000000000000
[   40.814332][ T3705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   40.822327][ T3705] R13: 0000000000000000 R14: 00007f69de1f5fa0 R15: 00007fffb90ec0d8
[   40.830313][ T3705]  </TASK>
[   40.833620][ T3705] memory: usage 307200kB, limit 307200kB, failcnt 454
[   40.840595][ T3705] memory+swap: usage 307664kB, limit 9007199254740988kB, failcnt 0
[   40.848567][ T3705] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0
[   40.855863][ T3705] Memory cgroup stats for /syz3:
[   40.871956][ T3705] cache 4096
[   40.880242][ T3705] rss 0
[   40.883015][ T3705] shmem 0
[   40.885998][ T3705] mapped_file 0
[   40.889526][ T3705] dirty 0
[   40.892541][ T3705] writeback 0
[   40.895829][ T3705] workingset_refault_anon 75
[   40.900513][ T3705] workingset_refault_file 36
[   40.905144][ T3705] swap 466944
[   40.908459][ T3705] swapcached 8192
[   40.912105][ T3705] pgpgin 7058
[   40.915424][ T3705] pgpgout 7055
[   40.918862][ T3705] pgfault 8194
[   40.922254][ T3705] pgmajfault 19
[   40.925794][ T3705] inactive_anon 0
[   40.929573][ T3705] active_anon 4096
[   40.933352][ T3705] inactive_file 0
[   40.937174][ T3705] active_file 4096
[   40.940943][ T3705] unevictable 0
[   40.944426][ T3705] hierarchical_memory_limit 314572800
[   40.949948][ T3705] hierarchical_memsw_limit 9223372036854771712
[   40.956155][ T3705] total_cache 4096
[   40.959884][ T3705] total_rss 0
[   40.963172][ T3705] total_shmem 0
[   40.966680][ T3705] total_mapped_file 0
[   40.970686][ T3705] total_dirty 0
[   40.974157][ T3705] total_writeback 0
[   40.978097][ T3705] total_workingset_refault_anon 75
[   40.983212][ T3705] total_workingset_refault_file 36
[   40.988434][ T3705] total_swap 466944
[   40.992258][ T3705] total_swapcached 8192
[   40.996451][ T3705] total_pgpgin 7058
[   41.000287][ T3705] total_pgpgout 7055
[   41.004207][ T3705] total_pgfault 8194
[   41.008151][ T3705] total_pgmajfault 19
[   41.012219][ T3705] total_inactive_anon 0
[   41.016413][ T3705] total_active_anon 4096
[   41.020670][ T3705] total_inactive_file 0
[   41.024848][ T3705] total_active_file 4096
[   41.029128][ T3705] total_unevictable 0
[   41.033120][ T3705] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.75,pid=3704,uid=0
[   41.047732][ T3705] Memory cgroup out of memory: Killed process 3704 (syz.3.75) total-vm:93648kB, anon-rss:916kB, file-rss:22340kB, shmem-rss:128kB, UID:0 pgtables:144kB oom_score_adj:1000
[   41.070054][ T3749] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280
[   41.611183][ T3757] loop2: detected capacity change from 0 to 512
[   41.687369][ T3759] __nla_validate_parse: 2 callbacks suppressed
[   41.687407][ T3759] netlink: 112 bytes leftover after parsing attributes in process `syz.0.89'.
[   41.704714][ T3757] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   41.793287][ T3759] netlink: 112 bytes leftover after parsing attributes in process `syz.0.89'.
[   41.802812][ T3757] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[   41.816685][ T3757] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.88: corrupted in-inode xattr: e_value size too large
[   41.841733][ T3757] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.88: couldn't read orphan inode 15 (err -117)
[   41.877976][ T3757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.980324][ T3757] EXT4-fs (loop2): shut down requested (0)
[   42.011319][ T3764] FAULT_INJECTION: forcing a failure.
[   42.011319][ T3764] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   42.024434][ T3764] CPU: 0 UID: 0 PID: 3764 Comm: syz.0.91 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0
[   42.035058][ T3764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   42.045346][ T3764] Call Trace:
[   42.048738][ T3764]  <TASK>
[   42.051678][ T3764]  dump_stack_lvl+0xf2/0x150
[   42.056321][ T3764]  dump_stack+0x15/0x1a
[   42.060660][ T3764]  should_fail_ex+0x223/0x230
[   42.065364][ T3764]  should_fail+0xb/0x10
[   42.069562][ T3764]  should_fail_usercopy+0x1a/0x20
[   42.074634][ T3764]  _copy_from_iter+0xd5/0xd00
[   42.079422][ T3764]  ? kmalloc_reserve+0x16e/0x190
[   42.084423][ T3764]  ? __build_skb_around+0x196/0x1f0
[   42.089662][ T3764]  ? __alloc_skb+0x21f/0x310
[   42.094281][ T3764]  ? __virt_addr_valid+0x1ed/0x250
[   42.099490][ T3764]  ? __check_object_size+0x364/0x520
[   42.104819][ T3764]  netlink_sendmsg+0x460/0x6e0
[   42.109646][ T3764]  ? __pfx_netlink_sendmsg+0x10/0x10
[   42.114957][ T3764]  __sock_sendmsg+0x140/0x180
[   42.119695][ T3764]  ____sys_sendmsg+0x312/0x410
[   42.124479][ T3764]  __sys_sendmsg+0x19d/0x230
[   42.129121][ T3764]  __x64_sys_sendmsg+0x46/0x50
[   42.133967][ T3764]  x64_sys_call+0x2734/0x2dc0
[   42.138696][ T3764]  do_syscall_64+0xc9/0x1c0
[   42.143272][ T3764]  ? clear_bhb_loop+0x55/0xb0
[   42.148030][ T3764]  ? clear_bhb_loop+0x55/0xb0
[   42.152792][ T3764]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   42.158754][ T3764] RIP: 0033:0x7efeadcd5d29
[   42.163176][ T3764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   42.182945][ T3764] RSP: 002b:00007efeac341038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   42.191369][ T3764] RAX: ffffffffffffffda RBX: 00007efeadec5fa0 RCX: 00007efeadcd5d29
[   42.199416][ T3764] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003
[   42.207485][ T3764] RBP: 00007efeac341090 R08: 0000000000000000 R09: 0000000000000000
[   42.215469][ T3764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   42.223507][ T3764] R13: 0000000000000000 R14: 00007efeadec5fa0 R15: 00007ffc3ba2e038
[   42.231492][ T3764]  </TASK>
[   42.301057][ T3767] loop1: detected capacity change from 0 to 512
[   42.313784][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.348345][ T3774] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.350805][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.364270][ T3767] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.380596][ T3767] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   42.394715][ T3780] loop4: detected capacity change from 0 to 128
[   42.401625][ T3780] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   42.420808][ T3782] xt_hashlimit: size too large, truncated to 1048576
[   42.427565][ T3778] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9)
[   42.427594][ T3778] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[   42.427627][ T3778] vhci_hcd vhci_hcd.0: Device attached
[   42.428495][ T3778] netlink: 20 bytes leftover after parsing attributes in process `syz.2.95'.
[   42.456199][ T3778] netlink: 20 bytes leftover after parsing attributes in process `syz.2.95'.
[   42.485289][ T3780] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   42.507961][ T3774] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.520399][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.540154][ T3781] vhci_hcd: connection closed
[   42.556594][  T381] vhci_hcd: stop threads
[   42.565557][  T381] vhci_hcd: release socket
[   42.570049][  T381] vhci_hcd: disconnect device
[   42.624590][ T3790] netlink: 112 bytes leftover after parsing attributes in process `syz.4.100'.
[   42.647053][ T3774] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.673077][ T3790] netlink: 112 bytes leftover after parsing attributes in process `syz.4.100'.
[   42.725393][ T3774] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.786944][ T3801] Illegal XDP return value 4294967274 on prog  (id 68) dev N/A, expect packet loss!
[   42.828046][ T3774] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   42.878605][ T3807] xt_hashlimit: max too large, truncated to 1048576
[   42.892032][ T3774] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   42.908098][ T3807] No such timeout policy "syz1"
[   42.928983][   T29] kauditd_printk_skb: 404 callbacks suppressed
[   42.928997][   T29] audit: type=1400 audit(1737084598.689:919): avc:  denied  { setattr } for  pid=3806 comm="syz.3.105" name="vcsa" dev="devtmpfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1
[   42.932886][ T3774] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   42.976640][ T3809] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.983929][ T3809] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.993373][   T29] audit: type=1400 audit(1737084598.759:920): avc:  denied  { read write } for  pid=3806 comm="syz.3.105" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   42.997382][ T3774] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   43.017101][   T29] audit: type=1400 audit(1737084598.759:921): avc:  denied  { open } for  pid=3806 comm="syz.3.105" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   43.064411][   T29] audit: type=1400 audit(1737084598.799:922): avc:  denied  { bind } for  pid=3806 comm="syz.3.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   43.083789][   T29] audit: type=1400 audit(1737084598.809:923): avc:  denied  { write } for  pid=3806 comm="syz.3.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   43.103036][   T29] audit: type=1400 audit(1737084598.819:924): avc:  denied  { ioctl } for  pid=3806 comm="syz.3.105" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   43.181503][ T3814] netlink: 16 bytes leftover after parsing attributes in process `syz.1.107'.
[   43.183152][ T3819] netlink: 100 bytes leftover after parsing attributes in process `syz.2.109'.
[   43.253170][ T3827] loop1: detected capacity change from 0 to 2048
[   43.271492][ T3827] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.299212][ T3833] netlink: 76 bytes leftover after parsing attributes in process `syz.2.113'.
[   43.311873][ T3827] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   43.375307][ T3835] netlink: 112 bytes leftover after parsing attributes in process `syz.0.114'.
[   43.385511][   T29] audit: type=1326 audit(1737084599.149:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde99b25d29 code=0x7ffc0000
[   43.389339][ T3833] loop2: detected capacity change from 0 to 512
[   43.416520][   T29] audit: type=1326 audit(1737084599.149:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde99b25d29 code=0x7ffc0000
[   43.439808][   T29] audit: type=1326 audit(1737084599.149:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fde99b25d29 code=0x7ffc0000
[   43.463204][   T29] audit: type=1326 audit(1737084599.149:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fde99b25d63 code=0x7ffc0000
[   43.488686][ T3833] EXT4-fs (loop2): orphan cleanup on readonly fs
[   43.501824][ T3833] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[   43.522494][ T3833] EXT4-fs (loop2): Cannot turn on quotas: error -22
[   43.530531][ T3833] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #13: comm syz.2.113: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[   43.554555][ T3833] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.113: couldn't read orphan inode 13 (err -117)
[   43.578159][ T3842] FAULT_INJECTION: forcing a failure.
[   43.578159][ T3842] name failslab, interval 1, probability 0, space 0, times 0
[   43.579982][ T3833] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   43.590879][ T3842] CPU: 1 UID: 0 PID: 3842 Comm: syz.0.116 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0
[   43.603745][ T3833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.613714][ T3842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   43.613731][ T3842] Call Trace:
[   43.613740][ T3842]  <TASK>
[   43.613750][ T3842]  dump_stack_lvl+0xf2/0x150
[   43.643601][ T3842]  dump_stack+0x15/0x1a
[   43.647856][ T3842]  should_fail_ex+0x223/0x230
[   43.652561][ T3842]  should_failslab+0x8f/0xb0
[   43.657221][ T3842]  kmem_cache_alloc_noprof+0x52/0x320
[   43.662704][ T3842]  ? dup_fd+0x3a/0x6a0
[   43.666824][ T3842]  dup_fd+0x3a/0x6a0
[   43.670748][ T3842]  ? avc_has_perm+0xd4/0x160
[   43.675388][ T3842]  copy_files+0x98/0xe0
[   43.679611][ T3842]  copy_process+0xcbf/0x1f90
[   43.684222][ T3842]  kernel_clone+0x167/0x5e0
[   43.688791][ T3842]  ? vfs_write+0x596/0x920
[   43.693226][ T3842]  __x64_sys_clone+0xe8/0x120
[   43.697955][ T3842]  x64_sys_call+0x2d7e/0x2dc0
[   43.702681][ T3842]  do_syscall_64+0xc9/0x1c0
[   43.707268][ T3842]  ? clear_bhb_loop+0x55/0xb0
[   43.711980][ T3842]  ? clear_bhb_loop+0x55/0xb0
[   43.716669][ T3842]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   43.722607][ T3842] RIP: 0033:0x7efeadcd5d29
[   43.727082][ T3842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   43.746870][ T3842] RSP: 002b:00007efeac340fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[   43.755292][ T3842] RAX: ffffffffffffffda RBX: 00007efeadec5fa0 RCX: 00007efeadcd5d29
[   43.763274][ T3842] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   43.771267][ T3842] RBP: 00007efeac341090 R08: 0000000000000000 R09: 0000000000000000
[   43.779257][ T3842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   43.787253][ T3842] R13: 0000000000000000 R14: 00007efeadec5fa0 R15: 00007ffc3ba2e038
[   43.795307][ T3842]  </TASK>
[   43.914828][ T3848] loop4: detected capacity change from 0 to 512
[   43.920052][ T3850] ref_tracker: memory allocation failure, unreliable refcount tracker.
[   43.926583][ T3848] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[   43.940285][ T3848] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[   43.948728][ T3848] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.119: corrupted in-inode xattr: e_value size too large
[   43.964148][ T3848] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.119: couldn't read orphan inode 15 (err -117)
[   43.978318][ T3848] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.038289][ T3836] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.112: bg 0: block 345: padding at end of block bitmap is not set
[   44.079593][ T3836] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117
[   44.092154][ T3836] EXT4-fs (loop1): This should not happen!! Data will be lost
[   44.092154][ T3836] 
[   44.209611][ T3412] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117
[   44.222361][ T3412] EXT4-fs (loop1): This should not happen!! Data will be lost
[   44.222361][ T3412] 
[   44.277048][ T3412] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28
[   44.290064][ T3412] EXT4-fs (loop1): This should not happen!! Data will be lost
[   44.290064][ T3412] 
[   44.299864][ T3412] EXT4-fs (loop1): Total free blocks count 0
[   44.305948][ T3412] EXT4-fs (loop1): Free/Dirty block details
[   44.311968][ T3412] EXT4-fs (loop1): free_blocks=0
[   44.368880][ T3867] FAULT_INJECTION: forcing a failure.
[   44.368880][ T3867] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   44.382019][ T3867] CPU: 1 UID: 0 PID: 3867 Comm: syz.2.121 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0
[   44.392662][ T3867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   44.402762][ T3867] Call Trace:
[   44.406060][ T3867]  <TASK>
[   44.409005][ T3867]  dump_stack_lvl+0xf2/0x150
[   44.413637][ T3867]  dump_stack+0x15/0x1a
[   44.417934][ T3867]  should_fail_ex+0x223/0x230
[   44.422703][ T3867]  should_fail+0xb/0x10
[   44.426873][ T3867]  should_fail_usercopy+0x1a/0x20
[   44.431936][ T3867]  _copy_from_user+0x1e/0xb0
[   44.436660][ T3867]  copy_msghdr_from_user+0x54/0x2a0
[   44.441879][ T3867]  ? __fget_files+0x17c/0x1c0
[   44.446609][ T3867]  __sys_sendmsg+0x13e/0x230
[   44.451229][ T3867]  __x64_sys_sendmsg+0x46/0x50
[   44.456080][ T3867]  x64_sys_call+0x2734/0x2dc0
[   44.460766][ T3867]  do_syscall_64+0xc9/0x1c0
[   44.465280][ T3867]  ? clear_bhb_loop+0x55/0xb0
[   44.469975][ T3867]  ? clear_bhb_loop+0x55/0xb0
[   44.474718][ T3867]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   44.480621][ T3867] RIP: 0033:0x7fde99b25d29
[   44.485044][ T3867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   44.504816][ T3867] RSP: 002b:00007fde9814f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   44.513254][ T3867] RAX: ffffffffffffffda RBX: 00007fde99d16160 RCX: 00007fde99b25d29
[   44.521231][ T3867] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000009
[   44.529286][ T3867] RBP: 00007fde9814f090 R08: 0000000000000000 R09: 0000000000000000
[   44.537265][ T3867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   44.545319][ T3867] R13: 0000000000000000 R14: 00007fde99d16160 R15: 00007ffea2b45c28
[   44.553307][ T3867]  </TASK>
[   44.743225][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.842406][ T3872] loop4: detected capacity change from 0 to 1024
[   44.849074][ T3872] =======================================================
[   44.849074][ T3872] WARNING: The mand mount option has been deprecated and
[   44.849074][ T3872]          and is ignored by this kernel. Remove the mand
[   44.849074][ T3872]          option from the mount to silence this warning.
[   44.849074][ T3872] =======================================================
[   44.891922][ T3872] EXT4-fs (loop4): Invalid log cluster size: 1284
[   44.912630][ T3838] syz.1.112 (3838) used greatest stack depth: 6360 bytes left
[   45.091929][ T3881] process 'syz.0.129' launched '/dev/fd/8' with NULL argv: empty string added
[   45.245960][ T3887] loop2: detected capacity change from 0 to 128
[   45.368089][ T3897] loop1: detected capacity change from 0 to 512
[   45.390987][ T3898] 
@ÿ: renamed from veth0_vlan (while UP)
[   45.397761][ T3897] EXT4-fs (loop1): #blocks per group too big: 65280
[   45.512734][ T3906] TCP: out of memory -- consider tuning tcp_mem
[   45.589459][ T3912] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9)
[   45.596022][ T3912] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[   45.603809][ T3912] vhci_hcd vhci_hcd.0: Device attached
[   45.616476][ T3911] openvswitch: netlink: Message has 12 unknown bytes.
[   45.630970][ T3914] vhci_hcd: connection closed
[   45.631350][   T36] vhci_hcd: stop threads
[   45.640371][   T36] vhci_hcd: release socket
[   45.644835][   T36] vhci_hcd: disconnect device
[   46.226613][ T3937] TCP: out of memory -- consider tuning tcp_mem
[   46.265273][ T3939] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280
[   47.222162][ T3966] __nla_validate_parse: 3 callbacks suppressed
[   47.222190][ T3966] netlink: 16 bytes leftover after parsing attributes in process `syz.3.160'.
[   47.260066][ T3966] SELinux:  policydb version -1213253740 does not match my version range 15-33
[   47.269533][ T3966] SELinux: failed to load policy
[   47.292683][ T3966] SELinux:  policydb version 536870936 does not match my version range 15-33
[   47.318057][ T3966] SELinux: failed to load policy
[   47.559739][ T3979] netlink: 112 bytes leftover after parsing attributes in process `syz.1.165'.
[   47.561931][ T3981] loop4: detected capacity change from 0 to 2048
[   47.574788][ T3979] netlink: 112 bytes leftover after parsing attributes in process `syz.1.165'.
[   47.659151][ T3981] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.686547][ T3981] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   47.947807][   T29] kauditd_printk_skb: 233 callbacks suppressed
[   47.947825][   T29] audit: type=1400 audit(1737084603.709:1162): avc:  denied  { map } for  pid=3980 comm="syz.4.166" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5577 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   48.016926][   T29] audit: type=1400 audit(1737084603.709:1163): avc:  denied  { read write } for  pid=3980 comm="syz.4.166" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5577 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   48.041829][   T29] audit: type=1400 audit(1737084603.709:1164): avc:  denied  { read } for  pid=3980 comm="syz.4.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   48.061171][   T29] audit: type=1400 audit(1737084603.759:1165): avc:  denied  { read } for  pid=3992 comm="syz.1.169" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[   48.084267][   T29] audit: type=1400 audit(1737084603.759:1166): avc:  denied  { open } for  pid=3992 comm="syz.1.169" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[   48.107979][   T29] audit: type=1400 audit(1737084603.759:1167): avc:  denied  { ioctl } for  pid=3992 comm="syz.1.169" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[   48.133055][   T29] audit: type=1400 audit(1737084603.769:1168): avc:  denied  { watch watch_reads } for  pid=3992 comm="syz.1.169" path="/31" dev="tmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   48.155810][   T29] audit: type=1326 audit(1737084603.769:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3992 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4386d5d29 code=0x7ffc0000
[   48.179331][   T29] audit: type=1326 audit(1737084603.769:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3992 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4386d5d29 code=0x7ffc0000
[   48.202808][   T29] audit: type=1326 audit(1737084603.769:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3992 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fe4386d5d29 code=0x7ffc0000
[   48.296100][ T3996] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9)
[   48.302675][ T3996] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[   48.310363][ T3996] vhci_hcd vhci_hcd.0: Device attached
[   48.352238][ T3996] netlink: 20 bytes leftover after parsing attributes in process `syz.1.170'.
[   48.361186][ T3996] netlink: 20 bytes leftover after parsing attributes in process `syz.1.170'.
[   48.407934][   T11] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set
[   48.424605][ T3997] vhci_hcd: connection closed
[   48.434883][  T381] vhci_hcd: stop threads
[   48.443939][  T381] vhci_hcd: release socket
[   48.448461][  T381] vhci_hcd: disconnect device
[   48.454800][   T11] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117
[   48.458267][ T4001] 9pnet: Could not find request transport: dno=
[   48.467453][   T11] EXT4-fs (loop4): This should not happen!! Data will be lost
[   48.467453][   T11] 
[   48.537933][   T28] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 229 with error 28
[   48.550704][   T28] EXT4-fs (loop4): This should not happen!! Data will be lost
[   48.550704][   T28] 
[   48.560439][   T28] EXT4-fs (loop4): Total free blocks count 0
[   48.566543][   T28] EXT4-fs (loop4): Free/Dirty block details
[   48.572450][   T28] EXT4-fs (loop4): free_blocks=0
[   48.577504][   T28] EXT4-fs (loop4): dirty_blocks=240
[   48.582713][   T28] EXT4-fs (loop4): Block reservation details
[   48.964125][ T4018] loop4: detected capacity change from 0 to 512
[   49.013841][ T4018] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   49.055072][ T4018] EXT4-fs (loop4): 1 truncate cleaned up
[   49.063542][ T4018] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.158128][ T4030] loop1: detected capacity change from 0 to 512
[   49.185507][ T4030] EXT4-fs: Ignoring removed orlov option
[   49.217982][ T4030] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   49.249900][ T4030] EXT4-fs (loop1): 1 truncate cleaned up
[   49.256007][ T4030] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.360393][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.469511][ T4036] loop2: detected capacity change from 0 to 8192
[   49.569029][ T4042] loop0: detected capacity change from 0 to 512
[   49.671905][ T4042] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c118, mo2=0002]
[   49.693945][ T4042] System zones: 0-2, 18-18, 34-34
[   49.706754][ T4042] EXT4-fs (loop0): too many log groups per flexible block group
[   49.714557][ T4042] EXT4-fs (loop0): failed to initialize mballoc (-12)
[   49.721564][ T4042] EXT4-fs (loop0): mount failed
[   49.784980][ T4051] loop3: detected capacity change from 0 to 2048
[   49.803600][ T4053] TCP: out of memory -- consider tuning tcp_mem
[   49.843747][ T4051] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.857622][ T4051] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   49.903789][ T4057] loop1: detected capacity change from 0 to 128
[   50.019193][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.162005][ T4070] FAULT_INJECTION: forcing a failure.
[   50.162005][ T4070] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   50.175308][ T4070] CPU: 1 UID: 0 PID: 4070 Comm: syz.1.190 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0
[   50.185993][ T4070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   50.196564][ T4070] Call Trace:
[   50.199863][ T4070]  <TASK>
[   50.202880][ T4070]  dump_stack_lvl+0xf2/0x150
[   50.207531][ T4070]  dump_stack+0x15/0x1a
[   50.211716][ T4070]  should_fail_ex+0x223/0x230
[   50.216450][ T4070]  should_fail+0xb/0x10
[   50.220682][ T4070]  should_fail_usercopy+0x1a/0x20
[   50.225739][ T4070]  _copy_from_user+0x1e/0xb0
[   50.230376][ T4070]  move_addr_to_kernel+0x82/0x120
[   50.235478][ T4070]  __sys_connect+0x67/0x1b0
[   50.240033][ T4070]  __x64_sys_connect+0x41/0x50
[   50.244917][ T4070]  x64_sys_call+0x22a7/0x2dc0
[   50.249608][ T4070]  do_syscall_64+0xc9/0x1c0
[   50.254171][ T4070]  ? clear_bhb_loop+0x55/0xb0
[   50.258877][ T4070]  ? clear_bhb_loop+0x55/0xb0
[   50.263633][ T4070]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.269571][ T4070] RIP: 0033:0x7fe4386d5d29
[   50.274081][ T4070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   50.293787][ T4070] RSP: 002b:00007fe436d41038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[   50.302226][ T4070] RAX: ffffffffffffffda RBX: 00007fe4388c5fa0 RCX: 00007fe4386d5d29
[   50.310239][ T4070] RDX: 000000000000001c RSI: 0000000020000040 RDI: 0000000000000006
[   50.318260][ T4070] RBP: 00007fe436d41090 R08: 0000000000000000 R09: 0000000000000000
[   50.326235][ T4070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   50.334226][ T4070] R13: 0000000000000000 R14: 00007fe4388c5fa0 R15: 00007ffc0deec608
[   50.342228][ T4070]  </TASK>
[   50.364518][   T36] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 345: padding at end of block bitmap is not set
[   50.399248][   T36] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117
[   50.411949][   T36] EXT4-fs (loop3): This should not happen!! Data will be lost
[   50.411949][   T36] 
[   50.500052][ T4074] loop0: detected capacity change from 0 to 512
[   50.599229][ T4074] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.610817][   T36] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 1422 with error 28
[   50.624634][   T36] EXT4-fs (loop3): This should not happen!! Data will be lost
[   50.624634][   T36] 
[   50.634479][   T36] EXT4-fs (loop3): Total free blocks count 0
[   50.640542][   T36] EXT4-fs (loop3): Free/Dirty block details
[   50.644488][ T4074] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   50.646647][   T36] EXT4-fs (loop3): free_blocks=0
[   50.661961][   T36] EXT4-fs (loop3): dirty_blocks=1424
[   50.667296][   T36] EXT4-fs (loop3): Block reservation details
[   50.765726][ T4076] loop1: detected capacity change from 0 to 8192
[   50.778476][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.971879][ T4095] 9pnet: Could not find request transport: dno=
[   51.093918][ T4106] xt_hashlimit: size too large, truncated to 1048576
[   51.303894][ T4102] loop0: detected capacity change from 0 to 1024
[   51.366319][ T4102] EXT4-fs (loop0): Invalid log cluster size: 1284
[   51.437031][ T4117] xt_hashlimit: size too large, truncated to 1048576
[   52.006577][ T4125] netlink: 112 bytes leftover after parsing attributes in process `syz.0.208'.
[   52.036185][ T4125] netlink: 112 bytes leftover after parsing attributes in process `syz.0.208'.
[   52.620392][ T4147] loop0: detected capacity change from 0 to 2048
[   52.638537][ T4147] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   52.651915][ T4147] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   52.905648][ T4159] xt_CT: You must specify a L4 protocol and not use inversions on it
[   52.959255][   T29] kauditd_printk_skb: 358 callbacks suppressed
[   52.959273][   T29] audit: type=1400 audit(1737084608.709:1530): avc:  denied  { open } for  pid=4164 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   52.990534][   T29] audit: type=1400 audit(1737084608.709:1531): avc:  denied  { getattr } for  pid=4164 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   53.044796][ T4154] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.216: bg 0: block 345: padding at end of block bitmap is not set
[   53.074321][ T4154] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117
[   53.086854][ T4154] EXT4-fs (loop0): This should not happen!! Data will be lost
[   53.086854][ T4154] 
[   53.093812][ T4159] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[   53.150518][   T29] audit: type=1400 audit(1737084608.909:1532): avc:  denied  { write } for  pid=4162 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=415 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   53.173706][   T29] audit: type=1400 audit(1737084608.909:1533): avc:  denied  { add_name } for  pid=4162 comm="dhcpcd-run-hook" name="resolv.conf.cfttyS3.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   53.196533][   T29] audit: type=1400 audit(1737084608.909:1534): avc:  denied  { create } for  pid=4162 comm="dhcpcd-run-hook" name="resolv.conf.cfttyS3.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   53.219172][   T29] audit: type=1400 audit(1737084608.909:1535): avc:  denied  { write } for  pid=4162 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.cfttyS3.link" dev="tmpfs" ino=1717 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   53.245626][   T29] audit: type=1400 audit(1737084608.909:1536): avc:  denied  { append } for  pid=4162 comm="dhcpcd-run-hook" name="resolv.conf.cfttyS3.link" dev="tmpfs" ino=1717 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   53.306725][   T29] audit: type=1400 audit(1737084609.059:1537): avc:  denied  { remove_name } for  pid=4176 comm="rm" name="resolv.conf.cfttyS3.link" dev="tmpfs" ino=1717 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   53.330484][   T29] audit: type=1400 audit(1737084609.059:1538): avc:  denied  { unlink } for  pid=4176 comm="rm" name="resolv.conf.cfttyS3.link" dev="tmpfs" ino=1717 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   53.359819][ T4178] loop3: detected capacity change from 0 to 512
[   53.390103][ T4178] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[   53.398612][   T29] audit: type=1326 audit(1737084609.109:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4177 comm="syz.3.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69de005d29 code=0x7ffc0000
[   53.426352][ T4178] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[   53.434562][ T4178] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.221: corrupted in-inode xattr: e_value size too large
[   53.457340][ T4178] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.221: couldn't read orphan inode 15 (err -117)
[   53.511965][ T4178] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   53.835151][   T36] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117
[   53.847922][   T36] EXT4-fs (loop0): This should not happen!! Data will be lost
[   53.847922][   T36] 
[   53.934189][   T50] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28
[   53.947062][   T50] EXT4-fs (loop0): This should not happen!! Data will be lost
[   53.947062][   T50] 
[   53.956810][   T50] EXT4-fs (loop0): Total free blocks count 0
[   53.962853][   T50] EXT4-fs (loop0): Free/Dirty block details
[   53.968870][   T50] EXT4-fs (loop0): free_blocks=0
[   54.152424][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.198170][ T4221] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280
[   55.110942][ T4249] loop1: detected capacity change from 0 to 128
[   55.209724][ T4252] loop0: detected capacity change from 0 to 4096
[   55.243893][ T4252] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.259213][ T4252] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #15: comm syz.0.237: corrupted inode contents
[   55.281243][ T4252] EXT4-fs error (device loop0): ext4_dirty_inode:6041: inode #15: comm syz.0.237: mark_inode_dirty error
[   55.303952][ T4252] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #15: comm syz.0.237: corrupted inode contents
[   55.344909][ T4252] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #15: comm syz.0.237: mark_inode_dirty error
[   55.375393][ T4260] syz.2.239 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   55.392342][ T4252] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #15: comm syz.0.237: corrupted inode contents
[   55.406499][ T4252] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #15: comm syz.0.237: mark_inode_dirty error
[   55.417971][ T4252] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #15: comm syz.0.237: corrupted inode contents
[   55.439863][ T4262] loop3: detected capacity change from 0 to 512
[   55.462072][ T4252] EXT4-fs error (device loop0): ext4_truncate:4240: inode #15: comm syz.0.237: mark_inode_dirty error
[   55.475254][ T4262] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[   55.485047][ T4252] EXT4-fs error (device loop0): ext4_evict_inode:267: comm syz.0.237: couldn't truncate inode 15 (err -117)
[   55.503028][ T4262] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[   55.526125][ T4262] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.241: corrupted in-inode xattr: e_value size too large
[   55.543870][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.552358][ T4271] loop1: detected capacity change from 0 to 512
[   55.564524][ T4262] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.241: couldn't read orphan inode 15 (err -117)
[   55.579212][ T4262] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   55.592119][ T4271] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.616518][ T4271] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   55.654700][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.713970][ T4279] netlink: 12 bytes leftover after parsing attributes in process `syz.4.248'.
[   55.764796][ T4279] loop4: detected capacity change from 0 to 4096
[   55.790583][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.820381][ T4279] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.835380][ T4279] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #15: comm syz.4.248: corrupted inode contents
[   55.848574][ T4279] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #15: comm syz.4.248: mark_inode_dirty error
[   55.860323][ T4279] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #15: comm syz.4.248: corrupted inode contents
[   55.875517][ T4279] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.248: mark_inode_dirty error
[   55.889600][ T4279] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #15: comm syz.4.248: corrupted inode contents
[   55.904705][ T4279] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.248: mark_inode_dirty error
[   55.917770][ T4279] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #15: comm syz.4.248: corrupted inode contents
[   55.930929][ T4279] EXT4-fs error (device loop4): ext4_truncate:4240: inode #15: comm syz.4.248: mark_inode_dirty error
[   55.948278][ T4279] EXT4-fs error (device loop4): ext4_evict_inode:267: comm syz.4.248: couldn't truncate inode 15 (err -117)
[   56.012916][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.035090][ T4301] loop3: detected capacity change from 0 to 512
[   56.045770][ T4301] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[   56.049057][    T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1
[   56.061543][    T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   56.062222][ T4301] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[   56.068952][    T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   56.068982][    T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   56.078467][ T4301] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.254: corrupted in-inode xattr: e_value size too large
[   56.084276][    T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2
[   56.092130][ T4301] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.254: couldn't read orphan inode 15 (err -117)
[   56.105667][    T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   56.105697][    T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   56.115625][ T4301] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   56.124850][    T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   56.159244][    T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   56.166834][    T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x4
[   56.174350][    T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   56.181805][    T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   56.189249][    T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2
[   56.196755][    T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   56.204157][    T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   56.211649][    T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   56.219082][    T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   56.226544][    T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   56.234046][    T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   56.241479][    T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   56.248925][    T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   56.256418][    T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   56.263897][    T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   56.271324][    T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   56.278815][    T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   56.286240][    T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   56.293665][    T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   56.301119][    T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   56.308548][    T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   56.315961][    T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   56.323405][    T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   56.330831][    T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   56.338251][    T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   56.345644][    T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   56.353366][    T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   56.360908][    T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   56.371560][    T8] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   56.372030][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.415725][ T4307] netlink: 112 bytes leftover after parsing attributes in process `syz.2.256'.
[   56.428552][ T4307] netlink: 112 bytes leftover after parsing attributes in process `syz.2.256'.
[   56.447767][ T4310] loop1: detected capacity change from 0 to 512
[   56.517279][ T4310] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   56.537966][ T4310] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[   56.549038][ T4310] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.257: corrupted in-inode xattr: e_value size too large
[   56.573450][ T4310] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.257: couldn't read orphan inode 15 (err -117)
[   56.604754][ T4310] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   57.108432][ T4328] loop0: detected capacity change from 0 to 1024
[   57.122310][ T4328] EXT4-fs (loop0): Invalid log cluster size: 1284
[   57.287979][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.468368][ T4337] ==================================================================
[   57.476517][ T4337] BUG: KCSAN: data-race in rxrpc_input_call_event / rxrpc_send_data
[   57.484560][ T4337] 
[   57.486896][ T4337] write to 0xffff888118c89474 of 4 bytes by task 4338 on cpu 0:
[   57.494549][ T4337]  rxrpc_input_call_event+0x8ef/0x12e0
[   57.500053][ T4337]  rxrpc_io_thread+0x30e/0x1fb0
[   57.504936][ T4337]  kthread+0x1d1/0x210
[   57.509028][ T4337]  ret_from_fork+0x4b/0x60
[   57.513566][ T4337]  ret_from_fork_asm+0x1a/0x30
[   57.518362][ T4337] 
[   57.520692][ T4337] read to 0xffff888118c89474 of 4 bytes by task 4337 on cpu 1:
[   57.528255][ T4337]  rxrpc_send_data+0x889/0x1820
[   57.533151][ T4337]  rxrpc_do_sendmsg+0xb92/0xc30
[   57.538050][ T4337]  rxrpc_sendmsg+0x417/0x520
[   57.542755][ T4337]  __sock_sendmsg+0x140/0x180
[   57.547469][ T4337]  ____sys_sendmsg+0x312/0x410
[   57.552275][ T4337]  __sys_sendmsg+0x19d/0x230
[   57.556900][ T4337]  __x64_sys_sendmsg+0x46/0x50
[   57.561701][ T4337]  x64_sys_call+0x2734/0x2dc0
[   57.566456][ T4337]  do_syscall_64+0xc9/0x1c0
[   57.570990][ T4337]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.576917][ T4337] 
[   57.579258][ T4337] value changed: 0x00000001 -> 0x00000002
[   57.585001][ T4337] 
[   57.587331][ T4337] Reported by Kernel Concurrency Sanitizer on:
[   57.593488][ T4337] CPU: 1 UID: 0 PID: 4337 Comm: syz.1.263 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0
[   57.604107][ T4337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   57.614192][ T4337] ==================================================================
[   57.638044][ T4339] TCP: out of memory -- consider tuning tcp_mem