last executing test programs:

10.580089536s ago: executing program 2 (id=338):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

10.507670126s ago: executing program 2 (id=343):
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_script(r0, 0x0, 0x0)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r0], 0x78}, 0x1, 0x0, 0x0, 0x20000084}, 0x200008c0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095", @ANYBLOB="3870e3de35d846911ff4ab164421f5d751456ec6a767eb62792cf3c4d2283e8cab99d3725ca7a597fefbf50b0f8ce76153735b47c64aa60d77777a46771091bff510486b2d7f595f4a98aeb720517e7c143f0886acb3d428e538b955403d58f831d9d4753752b46009adbe7d37d8002b8c2fc0d82df4196dc4965b9b91e03e89e73c0f02d463e53a540c9628398f101206861a2022a1b1e1cb23bb65048fd5897ae1658010f1103b77aee808ec25167167b0912d511b678b06832d84e96b", @ANYRES8=r0, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYBLOB="316217cbaaab1ded1eaf403b1d19a0d93f61a1c46acb49410db99bf42b8120fd3c31dbdcc2c25dcda59fdb572ebb75552a32672a8097985058dbb9e50c76698a0aa7a5a183e3c825b927c30860fd7057764719844973e2e874c383b86f0d44e33717534680842fa4ecb269c2e874"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r2, @ANYRES8=r0, @ANYRES16=r2], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x37, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_emit_ethernet(0x7e, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa8100000086dd60fec00000443a00fc000000000000000000000000000010ff0200000000000000000000000000010400907800000000604fa8600000000020010000000000000000000000000000001094008ebaf5dc1258d1da81ddfb3a6000000000002f00"/126], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
listen(r7, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
shutdown(r7, 0x0)
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
readv(r9, &(0x7f0000000080)=[{&(0x7f0000001400)=""/260, 0x104}], 0x1)
ioctl$TCSETS(r9, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xcb, 0xfd, "000080f100df00000000000000000009f600"})

9.60693938s ago: executing program 2 (id=370):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000044700000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000964776ff9746c768310000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000201000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='fib6_table_lookup\x00', r4}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="186800000006", @ANYBLOB="0000000000000000b702000014000000b70300000000000085be07352c537e7267"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"})

9.54545298s ago: executing program 2 (id=373):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRESDEC, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES16], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x69)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000007c0)="189b797171c272ed8c257cdcb5bdc2ca6baec0", &(0x7f00000008c0), 0x5, r1}, 0x38)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f00000002c0)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpjquota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv0}]}, 0xff, 0x573, &(0x7f0000000cc0)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[], 0x0)
open_by_handle_at(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="08000000020000000b"], 0x0)
chown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r8, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r11}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000080000860000000008000000b89442a5", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000f5ffffffbf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f0000000180)={[{@block_validity}, {@quota}, {@nodiscard}]}, 0xfe, 0x4e5, &(0x7f0000000980)="$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")

9.265850811s ago: executing program 2 (id=378):
r0 = socket(0x10, 0x3, 0x0)
r1 = syz_clone(0x20a00000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$getregset(0x4204, r1, 0x202, &(0x7f0000000180)={0x0})
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) (async)
ioprio_get$pid(0x1, r1)

8.395664415s ago: executing program 2 (id=388):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x10)
acct(0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0xffffffffffffffff}, 0x13)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x100)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000080), 0x1}, 0x101502}, 0x0, 0x0, 0xffffffffffffffff, 0xa)

8.395002284s ago: executing program 32 (id=388):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x10)
acct(0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0xffffffffffffffff}, 0x13)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x100)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000080), 0x1}, 0x101502}, 0x0, 0x0, 0xffffffffffffffff, 0xa)

2.159414981s ago: executing program 5 (id=519):
syz_emit_ethernet(0x1f3, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60122d9201bd3afffe8000000000000000000000000000aaff020000000000000000000003000001"], 0x0)

2.115411241s ago: executing program 5 (id=521):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x2000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000002140)={'wg2\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002300)=ANY=[@ANYBLOB="400000006800010000000000feffffff0a00000000000000060007000700000008000500", @ANYRES32=r3, @ANYBLOB="18000880140001"], 0x40}}, 0x0)

2.006556011s ago: executing program 5 (id=527):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4000000}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x18)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0b00000005000000020000000900000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000000)='mm_page_free\x00'}, 0x54)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000005000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r7, 0xfca804a0, 0xfffffffffffffdd4, 0x0, 0x0, 0x0, 0x5ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9}, 0x50)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'})

1.686145523s ago: executing program 0 (id=538):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000001000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001840)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x4}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0)

1.659204313s ago: executing program 0 (id=539):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0xe4ffffff}}}}]}]}, 0x8c}}, 0x0)

1.617815803s ago: executing program 0 (id=540):
creat(&(0x7f0000000040)='./bus\x00', 0x140)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c000000000000000000000c850000006d00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1.617388993s ago: executing program 0 (id=541):
syz_clone(0x40120000, 0x0, 0x0, &(0x7f00000131c0), 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000900f8ffffff000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000000)={<r5=>r4, 0x0, 0xfffffffffffffffc})
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
close_range(r5, 0xffffffffffffffff, 0x0)
socket$rds(0x15, 0x5, 0x0)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01)
write$sndseq(r7, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0xfd, @tick, {}, {}, @result={0xfff}}], 0x1c)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'batadv_slave_1\x00', &(0x7f00000000c0)=@ethtool_cmd={0x13, 0x5, 0x6, 0x2, 0xff, 0xfa, 0x9, 0x0, 0x3, 0x5, 0x2, 0x80000001, 0x7, 0x5, 0x81, 0x598, [0x40, 0x80000001]}})
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x2c, r9, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x6}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xc000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
lsm_set_self_attr(0x68, &(0x7f0000013280)={0x6a, 0x800, 0x20}, 0x20, 0x0)

1.553681333s ago: executing program 5 (id=542):
openat$dir(0xffffffffffffff9c, 0x0, 0x400, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x14, r2, 0x1, 0x0, 0x25dfdbfe, {0x7}}, 0x14}}, 0xc810)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000001b40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x4c, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x4c}}, 0x880)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r3 = getpid()
sched_setscheduler(r3, 0x3, &(0x7f0000000040)=0xf)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
mount$bind(0x0, 0x0, 0x0, 0x2000, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
recvmmsg(r9, &(0x7f0000001980)=[{{&(0x7f0000001a00)=@in={0x2, 0x0, @remote}, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/28}, {&(0x7f0000000240)=""/122}, {&(0x7f0000000100)=""/48}, {&(0x7f00000002c0)=""/238}, {&(0x7f0000000680)=""/4096}], 0x0, &(0x7f0000000440)=""/207}, 0x4}, {{&(0x7f0000000540)=@isdn, 0x0, &(0x7f0000001900)=[{&(0x7f0000001680)=""/243}, {&(0x7f0000001780)=""/161}, {&(0x7f0000001840)=""/135}, {&(0x7f00000005c0)=""/110}], 0x0, &(0x7f0000001940)=""/54}, 0x7}], 0x3c, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r10 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
unlinkat(r10, &(0x7f0000000280)='./file0\x00', 0x200)

1.130469066s ago: executing program 3 (id=549):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRESDEC], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x5, r4}, 0x38)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r5}, 0x10)
setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
close(r3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
unshare(0x42000000)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x530)

1.057679495s ago: executing program 0 (id=551):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000540), 0x84)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0)
perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0xffffffcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

981.060156ms ago: executing program 3 (id=554):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21885e, &(0x7f0000000000)={[{@nolazytime}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x80}}]}, 0x1, 0x50a, &(0x7f00000005c0)="$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")
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05ffef00000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b80200001800a00010071756f7461000000100002800c000140000000000000000034"], 0x118}}, 0x0)

881.847876ms ago: executing program 1 (id=556):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180300002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18010000000000000000020000000000850000007d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

881.464396ms ago: executing program 0 (id=557):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"/643], 0x1, 0x120b, &(0x7f00000036c0)="$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")
rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[], 0x48) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r2 = fcntl$dupfd(r1, 0x0, r1)
write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x1, 0x0, 0x0, @tick=0xfffffffc, {0x0, 0x40}, {0x0, 0x4}, @raw32={[0x2, 0x2]}}, {0xff, 0x5, 0x0, 0x0, @time={0xfa, 0x6}, {0x62, 0x1}, {}, @time=@tick=0x3}], 0x38) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x20, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000010000000000000000000000791209000000000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 32)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) (async, rerun: 32)
bind$inet(r3, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x61) (async, rerun: 32)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18) (async)
r5 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x80, 0x1, @mcast1, 0x5}, 0x1c)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
close(r5)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async)
setsockopt$sock_int(r3, 0x1, 0xc, &(0x7f0000000000)=0x56, 0x4)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x1b) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10)

881.312256ms ago: executing program 3 (id=558):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000600)=@security={'security\x00', 0x44, 0x4, 0x3c0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @empty, [], [], 'nr0\x00', 'nr0\x00'}, 0x203, 0xe0, 0x108, 0x8502, {0x700}, [@common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x4}}}, {{@ipv6={@local, @mcast1, [], [0x0, 0xfffa], 'ip6erspan0\x00', 'veth1_macvtap\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420)

881.152256ms ago: executing program 1 (id=559):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$net_dm(&(0x7f00000003c0), r1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_emit_ethernet(0x1f, 0x0, 0x0)
flock(r2, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x34000, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_GET(r4, 0x0, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000600)=@security={'security\x00', 0x44, 0x4, 0x3c0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @empty, [], [0x70000000], 'nr0\x00', 'nr0\x00'}, 0x203, 0xe0, 0x108, 0x8502, {0x700}, [@common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x4}}}, {{@ipv6={@local, @mcast1, [], [], 'ip6erspan0\x00', 'veth1_macvtap\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100), 0x106, 0xa}}, 0x20)

856.810906ms ago: executing program 1 (id=560):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000044d900000000000000000a20000000000a03000000120060000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2c001280140001800c000100636f756e746572000400028014000180090001006c617374000000000400028008000340000001"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x20050800)

815.101266ms ago: executing program 4 (id=561):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x62)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0x1f8, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac=@random="3c192477987a"}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, 0x4}}}, {{@arp={@loopback, @private=0xa010102, 0xff, 0xffffff00, 0xd, 0x10, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x8, 0x0, 0xe002, 0x8, 0x1, 0x5a, 'macvlan0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 0x0, 0x0, {@mac=@link_local, {[0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)

717.117897ms ago: executing program 1 (id=562):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000964776ff9746c768310000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000201000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='fib6_table_lookup\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="186800000006", @ANYBLOB="0000000000000000b702000014000000b70300000000000085be07352c537e7267"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"})

669.530307ms ago: executing program 1 (id=563):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000140)='sys_enter\x00', r0, 0x0, 0x2000}, 0x18)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000001000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10)
r3 = syz_open_dev$usbfs(0x0, 0x206, 0x8401)
ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522)
ioctl$USBDEVFS_BULK(r3, 0x5523, 0x0)
ioctl$USBDEVFS_FORBID_SUSPEND(r3, 0x5521)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000020000100ffffffff000000000a000000000000080800000014000200fe88000000000000000000000000b90108040a00ffffff7f1400020000000000000000ffac14141200000000e2d5e168abfc638a804d4dd9905e54f758301e4d85c31afca9b5a800707b178d4a7e722d9cd68f84"], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0x2, 0x8, 0x1, @private2, @mcast2, 0x40, 0x20, 0x8, 0x4}})
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/packet\x00')
preadv(r4, &(0x7f0000000100)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x103, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='mm_page_alloc\x00'}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x439, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2110, 0x60000}}, 0x20}}, 0x0)

669.226817ms ago: executing program 3 (id=564):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x0, @local}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2})
ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000100)={r0})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e0000008500000050000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x9)
r5 = syz_io_uring_setup(0x6acf, &(0x7f0000000940), &(0x7f00000009c0), &(0x7f00000003c0))
io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, &(0x7f0000001c80)={0x1, 0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000680)=""/128, 0x80}], &(0x7f0000000540)}, 0x20)
socket(0x8, 0x3, 0x5)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff48, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7)
perf_event_open(&(0x7f0000000380)={0x0, 0xfffffffffffffdd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102030400fefdffffff000200875a65969ff57b0000000000000000f500000000ac1414aa"], 0xfdef)

661.836327ms ago: executing program 4 (id=565):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0xa00}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

593.761227ms ago: executing program 4 (id=566):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x2, 0x30}, 0xc)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0))
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x6, 0x8001, 0x4, 0x2108, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r4 = openat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r4, &(0x7f00000000c0)='memory.swap.events\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x20001400)
ioctl$TUNSETOFFLOAD(r5, 0x40047440, 0x40b942b37d0000)

593.567128ms ago: executing program 5 (id=567):
socket$inet_udp(0x2, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x179, 0x11, 0x2500}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)

511.687328ms ago: executing program 1 (id=568):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000000), 0x6, 0x50d, &(0x7f00000006c0)="$eJzs3U1vI2cdAPD/OPZutg04bTmUSmxDX5RFsE7S9CXiUBqJl1MlRLlnQ+JEUZx4lTjtJlpB+glAqAIkLnDigsQHQEL9CAipEtw4cAJVkKUHLsho7HE3cezgaB1PN/n9pMk88zzx/P+PE4/nmRl7AriypiLirYgYi4iXI6Kc1ReyKQ7bU/p7D47ur6RTEs3mO/9MIsnqutf5ZPaw1Pe+E/GD5HTc3f2DzeVarbpzsvrg9sbW8np1vbo9Pz/3+sIbC68tzA7Yk6R4VutTEfHmNz/52Y9/8+03//C19/629I9bP0zTupO19+rHMLS7XorxE8uXR/p/U2z1EACAx8EzEfF0RLwQEV+JcozFmbvRAAAAwGOo+Y2J650iAAAAcDkVImIikkIlu953IgqFSqV9De8X4olCrb7b+OpafW97NW2LmIxSYW2jVp3NrhWejFKSLs+1yg+XX+lans+uwf2gfCNdbrUBAAAAo7HYNf7/pNwe/wMAAACXTO+T8WMjzwMAAAC4OC7GBwAAgMvP+B8AAAAute++/XY6NR8c3W/dB2D13f29zfq7t1eru5uVrb2Vykp9525lvV5fr1UrA3wioFav3301tvfuzTSKu42Z3f2Dpa363nZjqXVf76Xq0yPoEwAAAHDSU89/+JckIg6/fqM1pa5lbaVcMwM+Q5JiV8WdL+eUCTAU5/6Sn6m9i0kEGLnu93Tg6jDGB5Luiq4dg/F+uwp/7K64+X9j2ecAAIB8TH/R+X+4qgp5JwDk5id5JwDkZuBj8VMXmwcweiW3+YMr79T5/y7j/RpOnf/vp9k8V0IAAMDQTbRnh5GdC5yIQqFS+fS0YLK2UavORsTnI+LP5dL1dHkux3wBAAAAAAAAAAAAAAAAAAAAAAAA4HHUbCbRBAAAAC61iMLfk+z+X9Pllya6jw9cS/5Tbs0j4r1fvvPze8uNxs5cWv+vT+sbv8jqX8njCAYAAABcRaUzWzvj9M44HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACG6cHR/ZXONMq4Hy/GjZjsFb8Y4635eJQi4ol/J1E89rgkIsaGEP/w/Yh4tlf8JE0rJrMsuuMXIuJGzvGfHEJ8uMo+XIyIt3q9/gox1Zr3fv0Vs+lRfbzYepH3jN/Z/o312f59bsAYz330u5m+8d+PeK7Ye/vTiZ/0if/igPHvfP/goF9b89cR0z3ff5L2rJD9YmPr7szu/sHtja3l9ep6dXt+fu71hTcWXluYnVnbqFWznz1j/PRLvz/8oG//2wGOx+/0c7Kd4Y/69f+lAfv/34/uHT3TLpZOx4+49WLvv/+zrXnv5z/9n3g5e3rS9ulO+bBdPu7mb/90s19uafzVPs9/++9fbj6MXzzR/1uDdf/asfKvBnsIAHCRdvcPNpdrterOCAovvDq8FSatQroXNKLk8y50DnZ8VvIZzyf69ci379965PV0hgCPsp6/Dq1f6Zihd1OOGyUAAOBCPNzpzzsTAAAAAAAAAAAAAAAAAAAAuLpan/8fO+cXAT5/vm8a6455mE9XAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADO9L8AAAD//xtBwUM=")

511.387788ms ago: executing program 5 (id=569):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x468, &(0x7f00000004c0)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x6, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000006000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
syz_emit_ethernet(0x52, &(0x7f00000002c0)={@local, @random, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x7, 0xd7, [@multicast2]}, @timestamp={0x44, 0x10, 0xc5, 0x0, 0x9, [0x80, 0xfffffffd, 0x240]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)
lsetxattr$security_capability(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, 0x0, 0x1)
unlink(&(0x7f00000000c0)='./file1\x00')
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b0000ff"], 0x30}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0)
sync_file_range(r3, 0x4, 0x8, 0x7)
chdir(&(0x7f0000000140)='./file0\x00')
bpf$MAP_CREATE(0x0, 0x0, 0x48)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0x18, "2bb2bd6098f2784d82c1d2e0aeea876c2a0c17c5ffde3d11"}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x1001})
creat(&(0x7f000009df00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x60)

511.218828ms ago: executing program 3 (id=570):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x8001, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x40}}}]}}]}, 0x45c}}, 0x0)

233.461499ms ago: executing program 3 (id=571):
syz_io_uring_setup(0x5c20, &(0x7f0000000240)={0x0, 0x0, 0x13290}, 0x0, &(0x7f0000000080))
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$kcm(0x11, 0xa, 0x300)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, 0x0, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18)
open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x39, 0x0, 0x0, 0x6d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)

185.770039ms ago: executing program 4 (id=572):
creat(&(0x7f0000000040)='./bus\x00', 0x140)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c000000000000000000000c850000006d00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

113.172539ms ago: executing program 4 (id=573):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000964776ff9746c768310000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000201000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='fib6_table_lookup\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="186800000006", @ANYBLOB="0000000000000000b702000014000000b70300000000000085be07352c537e7267"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"})

0s ago: executing program 4 (id=574):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r2, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) (fail_nth: 15)

kernel console output (not intermixed with test programs):

[   21.927791][   T29] audit: type=1400 audit(1733375445.138:81): avc:  denied  { read } for  pid=2981 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
Warning: Permanently added '10.128.1.26' (ED25519) to the list of known hosts.
[   27.384755][   T29] audit: type=1400 audit(1733375450.578:82): avc:  denied  { mounton } for  pid=3286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   27.386023][ T3286] cgroup: Unknown subsys name 'net'
[   27.407613][   T29] audit: type=1400 audit(1733375450.578:83): avc:  denied  { mount } for  pid=3286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   27.434983][   T29] audit: type=1400 audit(1733375450.618:84): avc:  denied  { unmount } for  pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   27.547023][ T3286] cgroup: Unknown subsys name 'cpuset'
[   27.553428][ T3286] cgroup: Unknown subsys name 'rlimit'
[   27.664785][   T29] audit: type=1400 audit(1733375450.868:85): avc:  denied  { setattr } for  pid=3286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   27.688276][   T29] audit: type=1400 audit(1733375450.868:86): avc:  denied  { create } for  pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   27.706342][ T3289] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   27.708888][   T29] audit: type=1400 audit(1733375450.868:87): avc:  denied  { write } for  pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   27.737811][   T29] audit: type=1400 audit(1733375450.868:88): avc:  denied  { read } for  pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   27.758103][   T29] audit: type=1400 audit(1733375450.868:89): avc:  denied  { mounton } for  pid=3286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   27.776519][ T3286] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   27.783113][   T29] audit: type=1400 audit(1733375450.868:90): avc:  denied  { mount } for  pid=3286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   27.814922][   T29] audit: type=1400 audit(1733375450.928:91): avc:  denied  { relabelto } for  pid=3289 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   28.977624][ T3296] chnl_net:caif_netlink_parms(): no params data found
[   29.088395][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.095499][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.102774][ T3296] bridge_slave_0: entered allmulticast mode
[   29.109346][ T3296] bridge_slave_0: entered promiscuous mode
[   29.116115][ T3300] chnl_net:caif_netlink_parms(): no params data found
[   29.148243][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.155325][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.162731][ T3296] bridge_slave_1: entered allmulticast mode
[   29.169275][ T3296] bridge_slave_1: entered promiscuous mode
[   29.197271][ T3305] chnl_net:caif_netlink_parms(): no params data found
[   29.225294][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.236242][ T3299] chnl_net:caif_netlink_parms(): no params data found
[   29.244857][ T3307] chnl_net:caif_netlink_parms(): no params data found
[   29.273035][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.300920][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.308024][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.315153][ T3300] bridge_slave_0: entered allmulticast mode
[   29.321838][ T3300] bridge_slave_0: entered promiscuous mode
[   29.331229][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.338327][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.345566][ T3300] bridge_slave_1: entered allmulticast mode
[   29.352043][ T3300] bridge_slave_1: entered promiscuous mode
[   29.383403][ T3296] team0: Port device team_slave_0 added
[   29.399500][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.418391][ T3296] team0: Port device team_slave_1 added
[   29.431114][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.438201][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.445444][ T3305] bridge_slave_0: entered allmulticast mode
[   29.451943][ T3305] bridge_slave_0: entered promiscuous mode
[   29.458667][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.465712][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.473033][ T3305] bridge_slave_1: entered allmulticast mode
[   29.479370][ T3305] bridge_slave_1: entered promiscuous mode
[   29.486291][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.515375][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.522465][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.529780][ T3307] bridge_slave_0: entered allmulticast mode
[   29.536678][ T3307] bridge_slave_0: entered promiscuous mode
[   29.557663][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.566940][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.573895][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.599804][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.615066][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.622213][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.629433][ T3307] bridge_slave_1: entered allmulticast mode
[   29.635893][ T3307] bridge_slave_1: entered promiscuous mode
[   29.642848][ T3300] team0: Port device team_slave_0 added
[   29.649346][ T3300] team0: Port device team_slave_1 added
[   29.660173][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.674503][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.681645][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.707681][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.732596][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.739582][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.765525][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.778672][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.785669][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.811603][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.822346][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.829542][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.836809][ T3299] bridge_slave_0: entered allmulticast mode
[   29.843149][ T3299] bridge_slave_0: entered promiscuous mode
[   29.861827][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.868975][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.876233][ T3299] bridge_slave_1: entered allmulticast mode
[   29.882950][ T3299] bridge_slave_1: entered promiscuous mode
[   29.890205][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.905213][ T3305] team0: Port device team_slave_0 added
[   29.911746][ T3305] team0: Port device team_slave_1 added
[   29.923416][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.957305][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.980001][ T3296] hsr_slave_0: entered promiscuous mode
[   29.986143][ T3296] hsr_slave_1: entered promiscuous mode
[   29.992554][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.999554][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.025606][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.041802][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.057515][ T3300] hsr_slave_0: entered promiscuous mode
[   30.063429][ T3300] hsr_slave_1: entered promiscuous mode
[   30.069528][ T3300] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   30.077213][ T3300] Cannot create hsr debugfs directory
[   30.082897][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.089906][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.115824][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.127178][ T3307] team0: Port device team_slave_0 added
[   30.147943][ T3307] team0: Port device team_slave_1 added
[   30.183949][ T3305] hsr_slave_0: entered promiscuous mode
[   30.190177][ T3305] hsr_slave_1: entered promiscuous mode
[   30.196261][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   30.203811][ T3305] Cannot create hsr debugfs directory
[   30.209947][ T3299] team0: Port device team_slave_0 added
[   30.222615][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.229619][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.255561][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.267090][ T3299] team0: Port device team_slave_1 added
[   30.281969][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.289105][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.315102][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.356864][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.363870][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.389912][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.415397][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.422456][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.448422][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.468735][ T3307] hsr_slave_0: entered promiscuous mode
[   30.474714][ T3307] hsr_slave_1: entered promiscuous mode
[   30.481446][ T3307] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   30.489025][ T3307] Cannot create hsr debugfs directory
[   30.580884][ T3299] hsr_slave_0: entered promiscuous mode
[   30.588137][ T3299] hsr_slave_1: entered promiscuous mode
[   30.594131][ T3299] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   30.601769][ T3299] Cannot create hsr debugfs directory
[   30.616422][ T3296] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   30.649581][ T3296] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   30.670899][ T3296] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   30.681728][ T3305] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   30.693583][ T3296] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   30.711213][ T3305] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   30.738833][ T3305] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   30.747676][ T3305] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   30.778893][ T3300] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   30.795063][ T3300] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   30.813339][ T3307] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   30.822997][ T3300] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   30.831690][ T3300] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   30.843725][ T3307] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   30.853370][ T3307] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   30.870667][ T3307] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   30.880395][ T3299] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   30.891845][ T3299] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   30.920352][ T3299] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   30.943215][ T3299] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   30.971357][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.996817][ T3305] 8021q: adding VLAN 0 to HW filter on device team0
[   31.015509][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.043667][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.050869][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.059894][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.067010][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.085719][ T3296] 8021q: adding VLAN 0 to HW filter on device team0
[   31.098266][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.114418][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.121526][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.143673][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.157855][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.164921][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.190125][ T3300] 8021q: adding VLAN 0 to HW filter on device team0
[   31.199705][ T3307] 8021q: adding VLAN 0 to HW filter on device team0
[   31.214673][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.234240][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.241326][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.254700][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.261758][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.270644][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.277832][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.288325][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.295386][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.337541][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.373055][ T3299] 8021q: adding VLAN 0 to HW filter on device team0
[   31.436964][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.457043][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.467367][  T576] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.474457][  T576] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.483583][  T576] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.490674][  T576] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.518454][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.559016][ T3299] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   31.569577][ T3299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.588022][ T3305] veth0_vlan: entered promiscuous mode
[   31.607452][ T3305] veth1_vlan: entered promiscuous mode
[   31.644041][ T3296] veth0_vlan: entered promiscuous mode
[   31.668709][ T3296] veth1_vlan: entered promiscuous mode
[   31.684955][ T3305] veth0_macvtap: entered promiscuous mode
[   31.708410][ T3296] veth0_macvtap: entered promiscuous mode
[   31.724063][ T3305] veth1_macvtap: entered promiscuous mode
[   31.745348][ T3296] veth1_macvtap: entered promiscuous mode
[   31.761045][ T3300] veth0_vlan: entered promiscuous mode
[   31.771497][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.782815][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.791852][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.802093][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.812575][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.823463][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.831588][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.842090][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.852826][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.865071][ T3305] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.874039][ T3305] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.882837][ T3305] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.891638][ T3305] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.903136][ T3300] veth1_vlan: entered promiscuous mode
[   31.914089][ T3307] veth0_vlan: entered promiscuous mode
[   31.922573][ T3296] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.931480][ T3296] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.940276][ T3296] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.949096][ T3296] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.971869][ T3307] veth1_vlan: entered promiscuous mode
[   31.985574][ T3300] veth0_macvtap: entered promiscuous mode
[   32.005958][ T3300] veth1_macvtap: entered promiscuous mode
[   32.033843][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.044372][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.054223][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.064731][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.078361][ T3305] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   32.078666][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.108556][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.119023][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.128863][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.139341][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.151126][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.173668][ T3436] loop0: detected capacity change from 0 to 1024
[   32.178908][ T3299] veth0_vlan: entered promiscuous mode
[   32.187423][ T3299] veth1_vlan: entered promiscuous mode
[   32.193603][ T3307] veth0_macvtap: entered promiscuous mode
[   32.205303][ T3436] EXT4-fs: Ignoring removed nomblk_io_submit option
[   32.220732][ T3438] loop3: detected capacity change from 0 to 1024
[   32.221713][ T3436] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (16), stripe is disabled
[   32.230066][ T3307] veth1_macvtap: entered promiscuous mode
[   32.239783][ T3438] EXT4-fs: Ignoring removed nomblk_io_submit option
[   32.247751][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.259721][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.269595][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.280108][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.289936][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.300409][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.306948][ T3438] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (16), stripe is disabled
[   32.312211][ T3436] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   32.322585][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.339974][ T3300] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.348786][ T3300] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.351391][ T3436] EXT4-fs (loop0): Online resizing not supported with bigalloc
[   32.357656][ T3300] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.373940][ T3300] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.375290][ T3438] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   32.402926][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.413426][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.423327][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.433820][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.443661][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.454137][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.466528][ T3436] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[   32.473133][ T3436] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   32.480716][ T3436] vhci_hcd vhci_hcd.0: Device attached
[   32.487586][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.500053][ T3444] vhci_hcd: connection closed
[   32.500297][   T11] vhci_hcd: stop threads
[   32.509509][   T11] vhci_hcd: release socket
[   32.514015][   T11] vhci_hcd: disconnect device
[   32.539286][ T3307] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.548137][ T3307] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.556972][ T3307] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.565709][ T3307] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.587482][   T29] kauditd_printk_skb: 37 callbacks suppressed
[   32.587498][   T29] audit: type=1400 audit(1733375455.788:129): avc:  denied  { open } for  pid=3437 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   32.603275][ T3299] veth0_macvtap: entered promiscuous mode
[   32.612582][   T29] audit: type=1400 audit(1733375455.788:130): avc:  denied  { perfmon } for  pid=3437 comm="syz.3.4" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   32.622967][ T3299] veth1_macvtap: entered promiscuous mode
[   32.638881][   T29] audit: type=1400 audit(1733375455.788:131): avc:  denied  { kernel } for  pid=3437 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   32.645070][ T3450] EXT4-fs (loop3): Online resizing not supported with bigalloc
[   32.678716][ T3438] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[   32.685274][ T3438] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   32.693027][ T3438] vhci_hcd vhci_hcd.0: Device attached
[   32.709906][ T3455] vhci_hcd: connection closed
[   32.710056][   T50] vhci_hcd: stop threads
[   32.719153][   T50] vhci_hcd: release socket
[   32.723576][   T50] vhci_hcd: disconnect device
[   32.730798][ T3458] loop2: detected capacity change from 0 to 1024
[   32.750230][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.760776][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.770648][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.781149][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.781492][ T3458] EXT4-fs: Ignoring removed nomblk_io_submit option
[   32.791047][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.808104][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.811130][ T3458] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (16), stripe is disabled
[   32.817943][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.838428][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.848826][ T3458] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   32.849701][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.869074][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.879681][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.889511][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.899991][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.909844][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.920289][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.930148][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.940589][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.951002][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.959223][ T3299] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.968068][ T3299] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.976805][ T3299] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.985556][ T3299] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.008344][   T29] audit: type=1400 audit(1733375456.208:132): avc:  denied  { create } for  pid=3462 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   33.027682][   T29] audit: type=1400 audit(1733375456.208:133): avc:  denied  { create } for  pid=3462 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   33.047636][   T29] audit: type=1400 audit(1733375456.208:134): avc:  denied  { map_create } for  pid=3462 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   33.066502][   T29] audit: type=1400 audit(1733375456.208:135): avc:  denied  { map_read map_write } for  pid=3462 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   33.086050][   T29] audit: type=1400 audit(1733375456.208:136): avc:  denied  { prog_run } for  pid=3462 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   33.126389][ T3458] EXT4-fs (loop2): Online resizing not supported with bigalloc
[   33.133996][ T3458] FAULT_INJECTION: forcing a failure.
[   33.133996][ T3458] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   33.136238][   T29] audit: type=1400 audit(1733375456.288:137): avc:  denied  { write } for  pid=3462 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   33.147161][ T3458] CPU: 0 UID: 0 PID: 3458 Comm: syz.2.3 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0
[   33.166831][   T29] audit: type=1400 audit(1733375456.288:138): avc:  denied  { nlmsg_write } for  pid=3462 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   33.177245][ T3458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   33.177284][ T3458] Call Trace:
[   33.177298][ T3458]  <TASK>
[   33.177306][ T3458]  dump_stack_lvl+0xf2/0x150
[   33.218491][ T3458]  dump_stack+0x15/0x1a
[   33.222749][ T3458]  should_fail_ex+0x223/0x230
[   33.227475][ T3458]  should_fail+0xb/0x10
[   33.231725][ T3458]  should_fail_usercopy+0x1a/0x20
[   33.236832][ T3458]  _copy_to_user+0x20/0xa0
[   33.241342][ T3458]  simple_read_from_buffer+0xa0/0x110
[   33.246768][ T3458]  proc_fail_nth_read+0xf9/0x140
[   33.251794][ T3458]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   33.257382][ T3458]  vfs_read+0x1a2/0x700
[   33.261767][ T3458]  ? __rcu_read_unlock+0x4e/0x70
[   33.266705][ T3458]  ? __fget_files+0x17c/0x1c0
[   33.271403][ T3458]  ksys_read+0xe8/0x1b0
[   33.275634][ T3458]  __x64_sys_read+0x42/0x50
[   33.280150][ T3458]  x64_sys_call+0x2874/0x2dc0
[   33.284923][ T3458]  do_syscall_64+0xc9/0x1c0
[   33.289504][ T3458]  ? clear_bhb_loop+0x55/0xb0
[   33.294207][ T3458]  ? clear_bhb_loop+0x55/0xb0
[   33.298964][ T3458]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   33.304951][ T3458] RIP: 0033:0x7fddf916e92c
[   33.309531][ T3458] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   33.329230][ T3458] RSP: 002b:00007fddf77e7050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   33.337673][ T3458] RAX: ffffffffffffffda RBX: 00007fddf9335fa0 RCX: 00007fddf916e92c
[   33.345644][ T3458] RDX: 000000000000000f RSI: 00007fddf77e70b0 RDI: 0000000000000006
[   33.353610][ T3458] RBP: 00007fddf77e70a0 R08: 0000000000000000 R09: 0000000000000000
[   33.361691][ T3458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   33.369659][ T3458] R13: 0000000000000000 R14: 00007fddf9335fa0 R15: 00007ffc62157d68
[   33.377683][ T3458]  </TASK>
[   33.401409][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.412864][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.415818][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.529111][    C1] hrtimer: interrupt took 34748 ns
[   33.548364][ T3486] process 'syz.1.10' launched '/dev/fd/6' with NULL argv: empty string added
[   33.567503][ T3488] Zero length message leads to an empty skb
[   33.584937][ T3476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8'.
[   33.782653][ T3503] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   33.853836][ T3492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13'.
[   33.862643][ T3492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13'.
[   33.980556][ T3503] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[   34.575084][ T3526] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   34.959374][ T3552] FAULT_INJECTION: forcing a failure.
[   34.959374][ T3552] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   34.972534][ T3552] CPU: 1 UID: 0 PID: 3552 Comm: syz.3.34 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0
[   34.983075][ T3552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   34.985814][ T3556] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   34.993303][ T3552] Call Trace:
[   34.993313][ T3552]  <TASK>
[   34.993322][ T3552]  dump_stack_lvl+0xf2/0x150
[   35.015920][ T3552]  dump_stack+0x15/0x1a
[   35.020152][ T3552]  should_fail_ex+0x223/0x230
[   35.024860][ T3552]  should_fail+0xb/0x10
[   35.029111][ T3552]  should_fail_usercopy+0x1a/0x20
[   35.034181][ T3552]  _copy_from_user+0x1e/0xb0
[   35.038832][ T3552]  copy_msghdr_from_user+0x54/0x2a0
[   35.044102][ T3552]  ? __fget_files+0x17c/0x1c0
[   35.048826][ T3552]  __sys_sendmmsg+0x1e8/0x4b0
[   35.053588][ T3552]  __x64_sys_sendmmsg+0x57/0x70
[   35.058499][ T3552]  x64_sys_call+0x29aa/0x2dc0
[   35.063198][ T3552]  do_syscall_64+0xc9/0x1c0
[   35.067764][ T3552]  ? clear_bhb_loop+0x55/0xb0
[   35.072451][ T3552]  ? clear_bhb_loop+0x55/0xb0
[   35.077195][ T3552]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   35.083114][ T3552] RIP: 0033:0x7f1bafb0ff19
[   35.087531][ T3552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   35.107242][ T3552] RSP: 002b:00007f1bae187058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   35.115676][ T3552] RAX: ffffffffffffffda RBX: 00007f1bafcd5fa0 RCX: 00007f1bafb0ff19
[   35.123690][ T3552] RDX: 0000000000000001 RSI: 000000002000a2c0 RDI: 0000000000000006
[   35.131680][ T3552] RBP: 00007f1bae1870a0 R08: 0000000000000000 R09: 0000000000000000
[   35.139668][ T3552] R10: 0000000000040805 R11: 0000000000000246 R12: 0000000000000001
[   35.147720][ T3552] R13: 0000000000000000 R14: 00007f1bafcd5fa0 R15: 00007ffebc0ac328
[   35.155728][ T3552]  </TASK>
[   35.273247][ T3574] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in;
[   35.273247][ T3574]    program syz.0.44 not setting count and/or reply_len properly
[   35.394880][ T3584] loop2: detected capacity change from 0 to 512
[   35.441294][ T3584] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.460150][ T3597] netlink: 60 bytes leftover after parsing attributes in process `syz.1.50'.
[   35.566937][ T3597] netlink: 60 bytes leftover after parsing attributes in process `syz.1.50'.
[   35.585306][ T3584] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   35.681758][ T3597] netlink: 60 bytes leftover after parsing attributes in process `syz.1.50'.
[   35.693125][ T3597] netlink: 60 bytes leftover after parsing attributes in process `syz.1.50'.
[   35.749426][ T3597] netlink: 60 bytes leftover after parsing attributes in process `syz.1.50'.
[   35.770867][ T3627] pim6reg1: entered promiscuous mode
[   35.776359][ T3627] pim6reg1: entered allmulticast mode
[   35.780321][ T3597] netlink: 60 bytes leftover after parsing attributes in process `syz.1.50'.
[   35.794430][ T3627] EXT4-fs (loop2): shut down requested (0)
[   35.830610][ T3632] loop3: detected capacity change from 0 to 2048
[   35.875841][ T3632] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   35.899995][ T3636] loop0: detected capacity change from 0 to 128
[   35.925166][ T3632] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.951968][ T3636] syz.0.56: attempt to access beyond end of device
[   35.951968][ T3636] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128
[   35.974818][ T3658] capability: warning: `syz.1.59' uses deprecated v2 capabilities in a way that may be insecure
[   35.976858][ T3636] syz.0.56: attempt to access beyond end of device
[   35.976858][ T3636] loop0: rw=0, sector=177, nr_sectors = 1 limit=128
[   36.003322][ T3634] syz.0.56: attempt to access beyond end of device
[   36.003322][ T3634] loop0: rw=524288, sector=145, nr_sectors = 32 limit=128
[   36.017356][ T3634] syz.0.56: attempt to access beyond end of device
[   36.017356][ T3634] loop0: rw=524288, sector=185, nr_sectors = 184 limit=128
[   36.191793][ T3666] can0: slcan on ttyS3.
[   36.990303][ T3584] syz.2.46 (3584) used greatest stack depth: 10744 bytes left
[   37.173868][ T3682] loop1: detected capacity change from 0 to 512
[   37.185534][ T3666] can0 (unregistered): slcan off ttyS3.
[   37.236234][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.260072][ T3682] EXT4-fs: Ignoring removed oldalloc option
[   37.285555][ T3690] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0
[   37.312445][ T3682] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.68: Parent and EA inode have the same ino 15
[   37.341334][ T3682] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   37.354656][ T3682] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.68: Parent and EA inode have the same ino 15
[   37.367773][ T3682] EXT4-fs (loop1): 1 orphan inode deleted
[   37.373932][ T3682] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.422146][ T3696] mmap: syz.3.70 (3696) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   37.436246][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.539807][ T3708] loop0: detected capacity change from 0 to 512
[   37.570970][ T3708] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   37.584147][ T3708] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   37.666079][   T29] kauditd_printk_skb: 470 callbacks suppressed
[   37.666147][   T29] audit: type=1326 audit(1733375460.798:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3686 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1bafb06ee7 code=0x7ffc0000
[   37.695474][   T29] audit: type=1326 audit(1733375460.798:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3686 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1bafaac129 code=0x7ffc0000
[   37.718678][   T29] audit: type=1326 audit(1733375460.798:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3686 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f1bafb0ff19 code=0x7ffc0000
[   37.742060][   T29] audit: type=1326 audit(1733375460.818:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3686 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1bafb06ee7 code=0x7ffc0000
[   37.765120][   T29] audit: type=1326 audit(1733375460.818:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3686 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1bafaac129 code=0x7ffc0000
[   37.788768][   T29] audit: type=1326 audit(1733375460.818:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3686 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f1bafb0ff19 code=0x7ffc0000
[   37.812144][   T29] audit: type=1326 audit(1733375460.818:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3686 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1bafb06ee7 code=0x7ffc0000
[   37.835247][   T29] audit: type=1326 audit(1733375460.818:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3686 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1bafaac129 code=0x7ffc0000
[   37.858319][   T29] audit: type=1326 audit(1733375460.818:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3686 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f1bafb0ff19 code=0x7ffc0000
[   37.881963][   T29] audit: type=1326 audit(1733375460.838:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3686 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1bafb06ee7 code=0x7ffc0000
[   37.923253][ T3708] EXT4-fs (loop0): 1 truncate cleaned up
[   37.930752][ T3708] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.948450][ T3708] kernel profiling enabled (shift: 17)
[   38.012341][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.132841][ T3718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.82'.
[   38.260670][ T3732] loop4: detected capacity change from 0 to 1024
[   38.270119][ T3732] EXT4-fs: Ignoring removed mblk_io_submit option
[   38.284992][ T3732] ext4: Unknown parameter 'smackfshat'
[   38.371934][ T3732] Falling back ldisc for ttyS3.
[   38.440592][ T3748] netlink: 'syz.2.91': attribute type 10 has an invalid length.
[   38.465547][ T3748] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.638831][ T3760] syz.0.100 uses obsolete (PF_INET,SOCK_PACKET)
[   38.665097][ T3758] loop4: detected capacity change from 0 to 512
[   38.686004][ T3758] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   38.707503][ T3761] loop1: detected capacity change from 0 to 128
[   38.736680][ T3763] bond1: entered promiscuous mode
[   38.742106][ T3763] bond1: entered allmulticast mode
[   38.743372][ T3758] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.747465][ T3763] 8021q: adding VLAN 0 to HW filter on device bond1
[   38.760613][ T3758] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   38.779946][ T3763] bond1 (unregistering): Released all slaves
[   38.810496][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.867663][ T3773] __nla_validate_parse: 1 callbacks suppressed
[   38.867682][ T3773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.104'.
[   38.981558][ T3779] netlink: 'syz.0.107': attribute type 4 has an invalid length.
[   39.043997][ T3785] Illegal XDP return value 4294967274 on prog  (id 95) dev N/A, expect packet loss!
[   39.246242][ T3808] netlink: 'syz.2.122': attribute type 10 has an invalid length.
[   39.254925][ T3812] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   39.274430][ T3808] team0: Device macvtap0 is up. Set it down before adding it as a team port
[   39.422528][ T3812] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   39.447341][ T3829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.128'.
[   39.510310][ T3812] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   39.579750][ T3845] x_tables: ip6_tables: sctp match: only valid for protocol 132
[   39.754061][ T3856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.131'.
[   39.762923][ T3856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.131'.
[   40.104132][ T3812] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   40.245936][ T3865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.145'.
[   40.482009][ T3812] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.518218][ T3812] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.548462][ T3812] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.562354][ T3886] netlink: 16 bytes leftover after parsing attributes in process `syz.4.151'.
[   40.571273][ T3886] netlink: 16 bytes leftover after parsing attributes in process `syz.4.151'.
[   40.580207][ T3886] netlink: 32 bytes leftover after parsing attributes in process `syz.4.151'.
[   40.604020][ T3812] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.734306][ T3865] syz.1.145 (3865) used greatest stack depth: 10552 bytes left
[   40.847184][ T3912] 9pnet_fd: Insufficient options for proto=fd
[   40.863357][ T3916] loop1: detected capacity change from 0 to 512
[   40.874117][ T3918] loop2: detected capacity change from 0 to 512
[   40.874073][ T3916] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   40.894235][ T3912] loop3: detected capacity change from 0 to 1024
[   40.903259][ T3918] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   40.914435][ T3912] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   40.930587][ T3912] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.945198][ T3916] EXT4-fs (loop1): 1 truncate cleaned up
[   40.951537][ T3916] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.952683][ T3912] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.983495][ T3918] EXT4-fs (loop2): 1 truncate cleaned up
[   40.989793][ T3918] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.013094][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.025088][ T3912] loop3: detected capacity change from 0 to 256
[   41.072073][ T3912] FAT-fs (loop3): bogus number of FAT sectors
[   41.078200][ T3912] FAT-fs (loop3): Can't find a valid FAT filesystem
[   41.116678][ T3927] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   41.151933][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.182718][ T3927] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   41.199366][ T3932] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3932 comm=syz.3.169
[   41.211890][ T3932] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3932 comm=syz.3.169
[   41.275514][ T3936] netlink: 'syz.3.170': attribute type 12 has an invalid length.
[   41.287543][ T3936] netlink: 152 bytes leftover after parsing attributes in process `syz.3.170'.
[   41.303818][ T3936] loop3: detected capacity change from 0 to 512
[   41.311393][ T3936] =======================================================
[   41.311393][ T3936] WARNING: The mand mount option has been deprecated and
[   41.311393][ T3936]          and is ignored by this kernel. Remove the mand
[   41.311393][ T3936]          option from the mount to silence this warning.
[   41.311393][ T3936] =======================================================
[   41.372595][ T3927] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   41.447716][ T3939] vlan2: entered promiscuous mode
[   41.467791][ T3927] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   41.490637][ T3941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   41.500927][ T3941] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   41.520207][ T3936] EXT4-fs: Ignoring removed bh option
[   41.534034][ T3927] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.546673][ T3927] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   41.558076][ T3927] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   41.569572][ T3927] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.619223][ T3936] EXT4-fs error (device loop3): __ext4_iget:4984: inode #12: block 2: comm syz.3.170: invalid block
[   41.630701][ T3936] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.170: couldn't read orphan inode 12 (err -117)
[   41.645173][ T3936] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.660093][ T3936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   41.672187][ T3936] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   41.742997][ T3953] loop1: detected capacity change from 0 to 512
[   41.795098][ T3959] loop2: detected capacity change from 0 to 2048
[   41.798003][ T3956] ebtables: ebtables: counters copy to user failed while replacing table
[   41.811661][ T3953] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   41.823167][ T3953] EXT4-fs (loop1): 1 truncate cleaned up
[   41.829438][ T3953] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.846185][ T3965] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   41.856973][ T3959] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.882294][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.070230][ T3977] loop1: detected capacity change from 0 to 128
[   42.090131][ T3970] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   42.113393][ T3970] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[   42.125873][ T3970] EXT4-fs (loop2): This should not happen!! Data will be lost
[   42.125873][ T3970] 
[   42.135540][ T3970] EXT4-fs (loop2): Total free blocks count 0
[   42.141558][ T3970] EXT4-fs (loop2): Free/Dirty block details
[   42.147560][ T3970] EXT4-fs (loop2): free_blocks=2415919104
[   42.153401][ T3970] EXT4-fs (loop2): dirty_blocks=8192
[   42.158723][ T3970] EXT4-fs (loop2): Block reservation details
[   42.164826][ T3970] EXT4-fs (loop2): i_reserved_data_blocks=512
[   42.203724][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.225631][ T3959] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[   42.249136][ T3989] loop3: detected capacity change from 0 to 1024
[   42.272737][ T3991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.188'.
[   42.295326][ T3993] loop1: detected capacity change from 0 to 512
[   42.320621][ T3989] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.320752][ T3993] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6
[   42.349497][ T3970] syz.2.178 (3970) used greatest stack depth: 10392 bytes left
[   42.394571][ T3999] loop4: detected capacity change from 0 to 512
[   42.422468][ T3999] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   42.433549][ T3999] EXT4-fs (loop4): 1 truncate cleaned up
[   42.439675][ T3999] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.466565][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.513633][ T4011] loop4: detected capacity change from 0 to 512
[   42.596491][ T4011] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.617028][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.628856][ T4011] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   42.654611][ T4019] loop0: detected capacity change from 0 to 2048
[   42.672923][ T4019] EXT4-fs: Ignoring removed mblk_io_submit option
[   42.684945][ T4023] loop1: detected capacity change from 0 to 512
[   42.701535][ T4023] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   42.719655][   T29] kauditd_printk_skb: 251 callbacks suppressed
[   42.719671][   T29] audit: type=1326 audit(1733375465.965:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4024 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf916ff19 code=0x7ffc0000
[   42.722281][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.725957][   T29] audit: type=1326 audit(1733375465.965:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4024 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fddf916ff19 code=0x7ffc0000
[   42.781440][   T29] audit: type=1326 audit(1733375465.965:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4024 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf916ff19 code=0x7ffc0000
[   42.804741][   T29] audit: type=1326 audit(1733375465.965:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4024 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fddf916ff19 code=0x7ffc0000
[   42.828109][   T29] audit: type=1326 audit(1733375465.965:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4024 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf916ff19 code=0x7ffc0000
[   42.851455][   T29] audit: type=1326 audit(1733375465.965:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4024 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fddf916ff19 code=0x7ffc0000
[   42.874720][   T29] audit: type=1326 audit(1733375465.965:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4024 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf916ff19 code=0x7ffc0000
[   42.898053][   T29] audit: type=1326 audit(1733375465.965:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4024 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fddf916e9cf code=0x7ffc0000
[   42.921153][   T29] audit: type=1326 audit(1733375465.965:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4024 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf916ff19 code=0x7ffc0000
[   42.945005][   T29] audit: type=1326 audit(1733375466.076:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4024 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fddf916ff19 code=0x7ffc0000
[   42.970228][ T4019] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.971128][ T4023] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.009394][ T4019] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.196: bg 0: block 234: padding at end of block bitmap is not set
[   43.029982][ T4042] loop3: detected capacity change from 0 to 512
[   43.050104][ T4042] /dev/loop3: Can't open blockdev
[   43.055773][ T4019] EXT4-fs (loop0): Remounting filesystem read-only
[   43.067476][ T4046] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[   43.080199][ T4019] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=12
[   43.091692][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.101179][ T4019] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=12
[   43.128388][ T4019] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=12
[   43.147494][ T4019] syz.0.196 (4019) used greatest stack depth: 9640 bytes left
[   43.186958][ T4058] loop3: detected capacity change from 0 to 512
[   43.202519][ T4058] EXT4-fs: inline encryption not supported
[   43.225524][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.321755][ T4058] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.352259][ T4058] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   43.365780][ T4058] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.208: corrupted inode contents
[   43.393804][ T4058] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #2: comm syz.3.208: mark_inode_dirty error
[   43.407831][ T4058] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.208: corrupted inode contents
[   43.438546][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.452069][ T4075] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.517245][ T4075] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.569315][ T4090] SELinux:  Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped).
[   43.608963][ T4075] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.630828][ T4090] tap0: tun_chr_ioctl cmd 1074025680
[   43.688938][ T4090] loop1: detected capacity change from 0 to 8192
[   43.764193][ T4075] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.870841][ T4075] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   43.890808][ T4075] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   43.909969][ T4075] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   43.934803][ T4075] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   44.000590][ T4107] __nla_validate_parse: 1 callbacks suppressed
[   44.000607][ T4107] netlink: 36 bytes leftover after parsing attributes in process `syz.3.225'.
[   44.015792][ T4107] netlink: 36 bytes leftover after parsing attributes in process `syz.3.225'.
[   44.026799][ T4107] netlink: 36 bytes leftover after parsing attributes in process `syz.3.225'.
[   44.080239][ T4107] netlink: 36 bytes leftover after parsing attributes in process `syz.3.225'.
[   44.089264][ T4107] netlink: 36 bytes leftover after parsing attributes in process `syz.3.225'.
[   44.102970][ T4109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.227'.
[   44.111934][ T4109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.227'.
[   44.122714][ T4107] netlink: 36 bytes leftover after parsing attributes in process `syz.3.225'.
[   44.185818][ T4107] netlink: 36 bytes leftover after parsing attributes in process `syz.3.225'.
[   44.194829][ T4107] netlink: 36 bytes leftover after parsing attributes in process `syz.3.225'.
[   44.278601][ T4122] netlink: 'syz.3.230': attribute type 4 has an invalid length.
[   44.321733][ T4122] netlink: 'syz.3.230': attribute type 4 has an invalid length.
[   44.404185][ T4128] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   44.427933][ T4128] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   44.439845][ T4129] loop1: detected capacity change from 0 to 1024
[   44.450292][ T4131] loop4: detected capacity change from 0 to 128
[   44.457824][ T4129] EXT4-fs: Ignoring removed nomblk_io_submit option
[   44.501747][ T4129] EXT4-fs (loop1): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.533966][ T4131] syz.4.235: attempt to access beyond end of device
[   44.533966][ T4131] loop4: rw=0, sector=121, nr_sectors = 920 limit=128
[   44.613552][ T4139] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.711413][ T4139] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.747324][ T4139] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.773505][ T4148] loop4: detected capacity change from 0 to 512
[   44.784360][ T4148] EXT4-fs: inline encryption not supported
[   44.813235][ T4139] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.855274][ T4148] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.867947][ T4148] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   44.889115][ T4139] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   44.900430][ T4148] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   44.909236][ T4148] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   44.917968][ T4148] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   44.926909][ T4148] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   44.935912][ T4148] vxlan0: entered promiscuous mode
[   44.941077][ T4148] vxlan0: entered allmulticast mode
[   44.942240][ T4155] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #2: comm syz.4.241: corrupted inode contents
[   44.958195][ T4148] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   44.958301][ T4155] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #2: comm syz.4.241: mark_inode_dirty error
[   44.967139][ T4148] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   44.980005][ T4155] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #2: comm syz.4.241: corrupted inode contents
[   44.987204][ T4148] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   45.001276][ T4155] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.241: mark_inode_dirty error
[   45.007734][ T4148] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   45.036554][ T4139] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.066937][ T4139] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.094646][ T4139] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   45.124240][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.184563][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0500-0000-0000-000000000000.
[   45.257087][ T4170] loop4: detected capacity change from 0 to 512
[   45.285061][ T4170] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   45.323851][ T4170] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.332477][ T4183] FAULT_INJECTION: forcing a failure.
[   45.332477][ T4183] name failslab, interval 1, probability 0, space 0, times 1
[   45.348974][ T4183] CPU: 0 UID: 0 PID: 4183 Comm: syz.0.256 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0
[   45.350859][ T4170] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   45.359558][ T4183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   45.359575][ T4183] Call Trace:
[   45.359584][ T4183]  <TASK>
[   45.386236][ T4183]  dump_stack_lvl+0xf2/0x150
[   45.390873][ T4183]  dump_stack+0x15/0x1a
[   45.395066][ T4183]  should_fail_ex+0x223/0x230
[   45.399773][ T4183]  should_failslab+0x8f/0xb0
[   45.404496][ T4183]  kmem_cache_alloc_node_noprof+0x59/0x320
[   45.410326][ T4183]  ? __alloc_skb+0x10b/0x310
[   45.414999][ T4183]  ? xas_load+0x3ae/0x3d0
[   45.419434][ T4183]  __alloc_skb+0x10b/0x310
[   45.423966][ T4183]  tcp_stream_alloc_skb+0x2f/0x1e0
[   45.429118][ T4183]  tcp_sendmsg_locked+0x92f/0x2710
[   45.434258][ T4183]  ? page_counter_charge+0x21a/0x240
[   45.439613][ T4183]  ? __rcu_read_unlock+0x4e/0x70
[   45.444617][ T4183]  ? __pfx_tcp_sendmsg+0x10/0x10
[   45.449568][ T4183]  tcp_sendmsg+0x30/0x50
[   45.453842][ T4183]  inet_sendmsg+0x77/0xd0
[   45.458188][ T4183]  __sock_sendmsg+0x102/0x180
[   45.462938][ T4183]  ____sys_sendmsg+0x312/0x410
[   45.467765][ T4183]  __sys_sendmmsg+0x227/0x4b0
[   45.472523][ T4183]  __x64_sys_sendmmsg+0x57/0x70
[   45.477427][ T4183]  x64_sys_call+0x29aa/0x2dc0
[   45.482149][ T4183]  do_syscall_64+0xc9/0x1c0
[   45.486658][ T4183]  ? clear_bhb_loop+0x55/0xb0
[   45.491524][ T4183]  ? clear_bhb_loop+0x55/0xb0
[   45.496269][ T4183]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   45.502227][ T4183] RIP: 0033:0x7fde060dff19
[   45.506727][ T4183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   45.526433][ T4183] RSP: 002b:00007fde04757058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   45.534854][ T4183] RAX: ffffffffffffffda RBX: 00007fde062a5fa0 RCX: 00007fde060dff19
[   45.542829][ T4183] RDX: 0000000000000001 RSI: 000000002000a2c0 RDI: 0000000000000006
[   45.550797][ T4183] RBP: 00007fde047570a0 R08: 0000000000000000 R09: 0000000000000000
[   45.558837][ T4183] R10: 0000000000040805 R11: 0000000000000246 R12: 0000000000000001
[   45.566810][ T4183] R13: 0000000000000000 R14: 00007fde062a5fa0 R15: 00007fffd2f34088
[   45.574839][ T4183]  </TASK>
[   45.586289][ T4170] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback.
[   45.622529][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.703032][ T4199] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   45.789359][ T4203] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   45.860213][ T4203] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   45.923202][ T4217] loop2: detected capacity change from 0 to 512
[   45.939136][ T4217] EXT4-fs: Ignoring removed nomblk_io_submit option
[   45.959285][ T4203] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.128191][ T4203] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.135117][ T4217] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   46.161714][ T4221] vlan2: entered allmulticast mode
[   46.261816][ T4217] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a85ec028, mo2=0002]
[   46.276272][ T4217] System zones: 0-2, 18-18, 34-34
[   46.287552][ T4217] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   46.318521][ T4203] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.342537][ T4217] EXT4-fs (loop2): 1 truncate cleaned up
[   46.352598][ T4203] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.363552][ T4217] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.376245][ T4203] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.379309][ T4217] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.266: corrupted xattr block 19: invalid header
[   46.399521][ T4203] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.418483][ T4217] EXT4-fs (loop2): Remounting filesystem read-only
[   46.425095][ T4217] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=15
[   46.446402][ T4217] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop2 ino=15
[   46.484727][ T4217] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop2 ino=12
[   46.513583][ T4217] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop2 ino=12
[   46.555370][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.589189][ T4190] syz.3.257 (4190) used greatest stack depth: 7360 bytes left
[   46.606211][ T4231] loop4: detected capacity change from 0 to 256
[   46.643559][ T4234] gretap0: entered promiscuous mode
[   46.652238][ T4234] batadv_slave_1: entered promiscuous mode
[   46.886467][ T4252] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.940781][ T4252] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   47.014450][ T4252] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   47.045853][ T4265] loop3: detected capacity change from 0 to 1024
[   47.092495][ T4265] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.112901][ T4252] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   47.157001][ T4278] xt_TPROXY: Can be used only with -p tcp or -p udp
[   47.221773][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.267473][ T4252] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.283651][ T4284] vlan0: entered allmulticast mode
[   47.319690][ T4252] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.333601][ T4252] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.354938][ T4252] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.479637][ T4298] Cannot find add_set index 4 as target
[   47.650872][ T4326] loop2: detected capacity change from 0 to 128
[   47.978406][   T29] kauditd_printk_skb: 283 callbacks suppressed
[   47.978422][   T29] audit: type=1400 audit(1733375471.252:1163): avc:  denied  { create } for  pid=4359 comm="syz.3.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   48.041785][   T29] audit: type=1400 audit(1733375471.252:1164): avc:  denied  { bind } for  pid=4359 comm="syz.3.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   48.061277][   T29] audit: type=1400 audit(1733375471.252:1165): avc:  denied  { name_bind } for  pid=4359 comm="syz.3.315" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[   48.081890][   T29] audit: type=1400 audit(1733375471.252:1166): avc:  denied  { node_bind } for  pid=4359 comm="syz.3.315" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[   48.112174][ T4365] xt_TPROXY: Can be used only with -p tcp or -p udp
[   48.141090][   T29] audit: type=1400 audit(1733375471.403:1167): avc:  denied  { setopt } for  pid=4359 comm="syz.3.315" lport=512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   48.248492][   T29] audit: type=1400 audit(1733375471.524:1168): avc:  denied  { write } for  pid=4370 comm="syz.1.319" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   48.398562][ T4372] bond1: entered promiscuous mode
[   48.403892][ T4372] bond1: entered allmulticast mode
[   48.419397][ T4372] 8021q: adding VLAN 0 to HW filter on device bond1
[   48.437992][ T4372] bond1 (unregistering): Released all slaves
[   48.965699][ T4390] loop0: detected capacity change from 0 to 256
[   48.985341][ T4390] FAT-fs (loop0): count of clusters too big (2359294)
[   48.992301][ T4390] FAT-fs (loop0): Can't find a valid FAT filesystem
[   49.036821][ T4326] syz.2.306 (4326) used greatest stack depth: 7240 bytes left
[   49.083637][ T4398] bond1: entered promiscuous mode
[   49.088827][ T4398] bond1: entered allmulticast mode
[   49.114673][ T4398] 8021q: adding VLAN 0 to HW filter on device bond1
[   49.158860][ T4409] __nla_validate_parse: 5 callbacks suppressed
[   49.158884][ T4409] netlink: 300 bytes leftover after parsing attributes in process `syz.0.333'.
[   49.178054][ T4398] bond1 (unregistering): Released all slaves
[   49.319939][   T29] audit: type=1326 audit(1733375472.601:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4424 comm="syz.0.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde060dff19 code=0x7ffc0000
[   49.346668][ T4428] syz.0.340[4428] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   49.346836][ T4428] syz.0.340[4428] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   49.368571][   T29] audit: type=1326 audit(1733375472.631:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4424 comm="syz.0.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde060dff19 code=0x7ffc0000
[   49.428929][ T4439] loop4: detected capacity change from 0 to 2048
[   49.436853][   T29] audit: type=1326 audit(1733375472.692:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4424 comm="syz.0.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde060dff19 code=0x7ffc0000
[   49.460430][   T29] audit: type=1326 audit(1733375472.692:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4424 comm="syz.0.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde060dff19 code=0x7ffc0000
[   49.496067][ T4428] loop0: detected capacity change from 0 to 512
[   49.509972][ T4439] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.554014][ T4428] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   49.579999][ T4428] EXT4-fs (loop0): 1 truncate cleaned up
[   49.581253][ T4451] loop3: detected capacity change from 0 to 1024
[   49.604762][ T4428] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.656409][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.698366][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.722304][ T4464] loop0: detected capacity change from 0 to 512
[   49.731938][ T4464] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   49.752725][ T4464] EXT4-fs (loop0): 1 truncate cleaned up
[   49.759178][ T4464] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.816638][ T4479] netlink: 16 bytes leftover after parsing attributes in process `syz.4.361'.
[   49.873279][ T4490] loop4: detected capacity change from 0 to 512
[   49.880843][ T4490] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   49.893023][ T4492] loop3: detected capacity change from 0 to 128
[   49.900950][ T4464] bridge_slave_0: left allmulticast mode
[   49.906661][ T4464] bridge_slave_0: left promiscuous mode
[   49.912557][ T4464] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.920713][ T4490] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.364: Failed to acquire dquot type 0
[   49.932394][ T4492] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   49.945143][ T4490] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   49.946689][ T4492] ext4 filesystem being mounted at /74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   49.961826][ T4490] EXT4-fs (loop4): 1 truncate cleaned up
[   49.992974][ T4464] bridge_slave_1: left allmulticast mode
[   49.999462][ T4490] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.002952][ T4464] bridge_slave_1: left promiscuous mode
[   50.021140][ T4464] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.044516][ T4464] bond0: (slave bond_slave_0): Releasing backup interface
[   50.058284][ T4464] bond0: (slave bond_slave_1): Releasing backup interface
[   50.067369][ T3296] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   50.084981][ T4464] team0: Port device team_slave_0 removed
[   50.103425][ T4464] team0: Port device team_slave_1 removed
[   50.110596][ T4464] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   50.118079][ T4464] batman_adv: batadv0: Removing interface: batadv_slave_0
[   50.128662][ T4464] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   50.136121][ T4464] batman_adv: batadv0: Removing interface: batadv_slave_1
[   50.189710][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.220763][ T4507] netlink: 16 bytes leftover after parsing attributes in process `syz.3.368'.
[   50.264449][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.312275][ T4517] loop2: detected capacity change from 0 to 1024
[   50.347880][ T4517] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.362572][ T4518] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.379418][ T4523] netlink: 'syz.4.374': attribute type 4 has an invalid length.
[   50.399038][ T4517] EXT4-fs error (device loop2): ext4_xattr_inode_iget:440: inode #11: comm syz.2.373: missing EA_INODE flag
[   50.424365][ T4517] EXT4-fs (loop2): Remounting filesystem read-only
[   50.459965][ T4518] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.472633][ T4528] syz.1.375 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   50.513956][ T3300] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop2 ino=11
[   50.523025][ T3300] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop2 ino=11
[   50.532609][ T3300] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop2 ino=11
[   50.541654][ T3300] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop2 ino=11
[   50.556800][ T3300] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop2 ino=11
[   50.566066][ T3300] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop2 ino=11
[   50.574224][ T4518] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.598459][ T3300] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop2 ino=11
[   50.607531][ T3300] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop2 ino=11
[   50.650333][ T4518] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.666876][ T4538] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[   50.673416][ T4538] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   50.680966][ T4538] vhci_hcd vhci_hcd.0: Device attached
[   50.694893][ T4538] loop1: detected capacity change from 0 to 1024
[   50.717467][ T4541] vhci_hcd: connection closed
[   50.717669][  T576] vhci_hcd: stop threads
[   50.726693][  T576] vhci_hcd: release socket
[   50.731107][  T576] vhci_hcd: disconnect device
[   51.044029][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.084442][  T178] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.163336][  T178] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.245143][  T178] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.373916][  T178] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.515997][  T178] bridge_slave_1: left allmulticast mode
[   51.521708][  T178] bridge_slave_1: left promiscuous mode
[   51.527409][  T178] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.543949][  T178] bridge_slave_0: left allmulticast mode
[   51.549744][  T178] bridge_slave_0: left promiscuous mode
[   51.555500][  T178] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.563799][ T4565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   51.572509][ T4565] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   51.681224][  T178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   51.691248][  T178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   51.701285][  T178] bond0 (unregistering): Released all slaves
[   51.735833][ T4565] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   51.758682][  T178] hsr_slave_0: left promiscuous mode
[   51.766704][  T178] hsr_slave_1: left promiscuous mode
[   51.774154][  T178] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   51.781765][  T178] batman_adv: batadv0: Removing interface: batadv_slave_0
[   51.810496][  T178] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   51.818065][  T178] batman_adv: batadv0: Removing interface: batadv_slave_1
[   51.827431][  T178] veth1_macvtap: left promiscuous mode
[   51.833066][  T178] veth0_macvtap: left promiscuous mode
[   51.838861][  T178] veth1_vlan: left promiscuous mode
[   51.844424][  T178] veth0_vlan: left promiscuous mode
[   51.933890][  T178] team0 (unregistering): Port device team_slave_1 removed
[   51.944326][  T178] team0 (unregistering): Port device team_slave_0 removed
[   51.991323][ T4583] netlink: 'syz.4.397': attribute type 4 has an invalid length.
[   51.999060][ T4583] netlink: 17 bytes leftover after parsing attributes in process `syz.4.397'.
[   52.014154][ T4518] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   52.058403][ T4518] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   52.077618][ T4594] loop4: detected capacity change from 0 to 512
[   52.086074][ T4518] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   52.104388][ T4594] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   52.109157][ T4518] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   52.132858][ T4594] EXT4-fs (loop4): 1 truncate cleaned up
[   52.141319][ T4594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   52.295943][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.340926][ T4616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.403'.
[   52.350077][ T4616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.403'.
[   52.629659][ T4561] chnl_net:caif_netlink_parms(): no params data found
[   52.982097][ T4561] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.989286][ T4561] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.996689][ T4561] bridge_slave_0: entered allmulticast mode
[   53.004321][ T4561] bridge_slave_0: entered promiscuous mode
[   53.022372][ T4561] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.029499][ T4561] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.044162][ T4667] loop1: detected capacity change from 0 to 512
[   53.058009][ T4667] EXT4-fs: Ignoring removed bh option
[   53.087928][ T4561] bridge_slave_1: entered allmulticast mode
[   53.105848][ T4561] bridge_slave_1: entered promiscuous mode
[   53.123875][ T4671] loop4: detected capacity change from 0 to 1024
[   53.135336][ T4667] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.157258][ T4667] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   53.174621][ T4656] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   53.202331][   T29] kauditd_printk_skb: 182 callbacks suppressed
[   53.202349][   T29] audit: type=1400 audit(1733375476.506:1353): avc:  denied  { setattr } for  pid=4666 comm="syz.1.415" path="/87/file0/hugetlb.2MB.rsvd.usage_in_bytes" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   53.253328][ T4561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.289409][ T4561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.310052][ T4561] team0: Port device team_slave_0 added
[   53.321366][ T4561] team0: Port device team_slave_1 added
[   53.335637][ T4667] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #19: comm syz.1.415: corrupted inode contents
[   53.347555][   T29] audit: type=1400 audit(1733375476.647:1354): avc:  denied  { ioctl } for  pid=4684 comm="syz.4.419" path="socket:[9313]" dev="sockfs" ino=9313 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[   53.394356][ T4667] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #19: comm syz.1.415: mark_inode_dirty error
[   53.412356][ T4561] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.419395][ T4561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.444367][ T4700] loop3: detected capacity change from 0 to 512
[   53.445464][ T4561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.463496][ T4667] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #19: comm syz.1.415: corrupted inode contents
[   53.475650][ T4667] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3006: inode #19: comm syz.1.415: mark_inode_dirty error
[   53.478800][ T4700] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   53.500817][ T4667] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3009: inode #19: comm syz.1.415: mark inode dirty (error -117)
[   53.514953][ T4561] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.516346][ T4667] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117)
[   53.521947][ T4561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.557113][ T4561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.587179][ T4700] EXT4-fs (loop3): 1 truncate cleaned up
[   53.593267][ T4700] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   53.626439][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.645403][ T4561] hsr_slave_0: entered promiscuous mode
[   53.662338][ T4561] hsr_slave_1: entered promiscuous mode
[   53.668432][ T4561] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   53.676460][ T4561] Cannot create hsr debugfs directory
[   53.697137][ T4700] netlink: 132 bytes leftover after parsing attributes in process `syz.3.420'.
[   53.741288][   T29] audit: type=1326 audit(1733375477.049:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4724 comm="syz.1.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd9e5ff19 code=0x7ffc0000
[   53.764773][   T29] audit: type=1326 audit(1733375477.049:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4724 comm="syz.1.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1bd9e5ff19 code=0x7ffc0000
[   53.788243][   T29] audit: type=1326 audit(1733375477.049:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4724 comm="syz.1.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd9e5ff19 code=0x7ffc0000
[   53.811631][   T29] audit: type=1326 audit(1733375477.049:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4724 comm="syz.1.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd9e5ff19 code=0x7ffc0000
[   53.835205][   T29] audit: type=1326 audit(1733375477.049:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4724 comm="syz.1.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1bd9e5ff19 code=0x7ffc0000
[   53.858614][   T29] audit: type=1326 audit(1733375477.049:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4724 comm="syz.1.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd9e5ff19 code=0x7ffc0000
[   53.882035][   T29] audit: type=1326 audit(1733375477.049:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4724 comm="syz.1.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd9e5ff19 code=0x7ffc0000
[   53.905442][   T29] audit: type=1326 audit(1733375477.049:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4724 comm="syz.1.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1bd9e5ff19 code=0x7ffc0000
[   53.975255][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.063242][ T4738] bridge0: port 1(vlan2) entered blocking state
[   54.069621][ T4738] bridge0: port 1(vlan2) entered disabled state
[   54.079324][ T4738] vlan2: entered allmulticast mode
[   54.093235][ T4738] vlan2: left allmulticast mode
[   54.144461][ T4561] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   54.184601][ T4561] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   54.201904][ T4756] xt_CT: No such helper "snmp_trap"
[   54.204307][ T4561] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   54.242569][ T4561] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   54.303544][ T4766] netlink: 'syz.1.439': attribute type 1 has an invalid length.
[   54.327726][ T4561] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.364783][ T4561] 8021q: adding VLAN 0 to HW filter on device team0
[   54.376130][ T4773] netlink: 36 bytes leftover after parsing attributes in process `syz.0.440'.
[   54.385107][ T4773] netlink: 36 bytes leftover after parsing attributes in process `syz.0.440'.
[   54.393772][  T178] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.401172][  T178] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.405020][ T4773] netlink: 36 bytes leftover after parsing attributes in process `syz.0.440'.
[   54.441653][ T4773] netlink: 36 bytes leftover after parsing attributes in process `syz.0.440'.
[   54.450656][ T4773] netlink: 36 bytes leftover after parsing attributes in process `syz.0.440'.
[   54.461913][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.469110][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.483061][ T4773] netlink: 36 bytes leftover after parsing attributes in process `syz.0.440'.
[   54.513714][ T4779] vlan2: entered allmulticast mode
[   54.539394][ T4776] netlink: 'syz.1.441': attribute type 10 has an invalid length.
[   54.547347][ T4773] netlink: 36 bytes leftover after parsing attributes in process `syz.0.440'.
[   54.553299][ T4763] netlink: 16 bytes leftover after parsing attributes in process `syz.4.437'.
[   54.556434][ T4773] netlink: 36 bytes leftover after parsing attributes in process `syz.0.440'.
[   54.575947][ T4773] netlink: 36 bytes leftover after parsing attributes in process `syz.0.440'.
[   54.597914][ T4561] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   54.608302][ T4561] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   54.634708][ T4776] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.726010][ T4794] loop0: detected capacity change from 0 to 1024
[   54.743355][ T4790] loop3: detected capacity change from 0 to 2048
[   54.754720][ T4794] EXT4-fs (loop0): VFS: Can't find ext4 filesystem
[   54.773542][ T4790] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   54.824683][ T4561] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.929513][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.079144][ T4840] loop4: detected capacity change from 0 to 256
[   55.102905][ T4840] vfat: Unknown parameter 'uni_xlatete'
[   55.168500][ T4561] veth0_vlan: entered promiscuous mode
[   55.197510][ T4561] veth1_vlan: entered promiscuous mode
[   55.246572][ T4561] veth0_macvtap: entered promiscuous mode
[   55.283418][ T4561] veth1_macvtap: entered promiscuous mode
[   55.321996][ T4864] wireguard0: entered promiscuous mode
[   55.327575][ T4864] wireguard0: entered allmulticast mode
[   55.356563][ T4868] vlan2: entered allmulticast mode
[   55.403940][ T4561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   55.414501][ T4561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.424479][ T4561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   55.435058][ T4561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.444917][ T4561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   55.455464][ T4561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.488407][ T4561] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.497190][ T4561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   55.507736][ T4561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.517629][ T4561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   55.528252][ T4561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.538095][ T4561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   55.548544][ T4561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.559124][ T4561] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.604858][ T4561] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.613729][ T4561] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.622556][ T4561] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.631358][ T4561] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.679560][ T4901] loop3: detected capacity change from 0 to 512
[   55.685038][ T4902] Cannot find add_set index 0 as target
[   55.711627][ T4901] EXT4-fs (loop3): 1 truncate cleaned up
[   55.757904][ T4901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   55.783567][ T4888] loop0: detected capacity change from 0 to 2048
[   55.835433][ T4888] EXT4-fs (loop0): failed to initialize system zone (-117)
[   55.863534][ T4888] EXT4-fs (loop0): mount failed
[   55.922659][ T4936] loop5: detected capacity change from 0 to 512
[   56.056327][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.074373][ T4936] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   56.101235][ T4936] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   56.181338][ T4943] loop4: detected capacity change from 0 to 512
[   56.206986][ T4943] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   56.259452][ T4943] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   56.474741][ T4978] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   56.600526][ T4992] loop0: detected capacity change from 0 to 512
[   56.649625][ T4992] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   56.652357][ T5002] loop4: detected capacity change from 0 to 128
[   56.886623][ T5010] loop5: detected capacity change from 0 to 256
[   56.917907][ T5010] FAT-fs (loop5): count of clusters too big (2359294)
[   56.924809][ T5010] FAT-fs (loop5): Can't find a valid FAT filesystem
[   56.957536][ T5016] loop3: detected capacity change from 0 to 512
[   56.967762][ T5016] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   56.976949][ T5016] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[   57.003783][ T5016] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[   57.003820][ T5016] EXT4-fs: failed to create workqueue
[   57.018808][ T5016] EXT4-fs (loop3): mount failed
[   57.414650][ T5048] x_tables: duplicate underflow at hook 1
[   57.506590][ T5053] vlan2: entered allmulticast mode
[   57.726886][ T5069] netlink: 'syz.5.521': attribute type 1 has an invalid length.
[   58.070561][ T5106] loop4: detected capacity change from 0 to 128
[   58.089329][ T5106] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   58.324182][   T29] kauditd_printk_skb: 148 callbacks suppressed
[   58.324200][   T29] audit: type=1400 audit(1733375481.656:1511): avc:  denied  { ioctl } for  pid=5116 comm="syz.0.541" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   58.394630][   T29] audit: type=1400 audit(1733375481.726:1512): avc:  denied  { create } for  pid=5116 comm="syz.0.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   58.414644][   T29] audit: type=1400 audit(1733375481.726:1513): avc:  denied  { bind } for  pid=5116 comm="syz.0.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   58.446972][ T5131] FAULT_INJECTION: forcing a failure.
[   58.446972][ T5131] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   58.460104][ T5131] CPU: 0 UID: 0 PID: 5131 Comm: syz.4.546 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0
[   58.463995][ T5127] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   58.470706][ T5131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   58.470747][ T5131] Call Trace:
[   58.470755][ T5131]  <TASK>
[   58.470762][ T5131]  dump_stack_lvl+0xf2/0x150
[   58.498708][ T5131]  dump_stack+0x15/0x1a
[   58.502888][ T5131]  should_fail_ex+0x223/0x230
[   58.507720][ T5131]  should_fail+0xb/0x10
[   58.511923][ T5131]  should_fail_usercopy+0x1a/0x20
[   58.517066][ T5131]  _copy_from_iter+0x24b/0xd00
[   58.521851][ T5131]  ? __alloc_skb+0x21f/0x310
[   58.526529][ T5131]  ? __virt_addr_valid+0x1ed/0x250
[   58.531734][ T5131]  ? __check_object_size+0x364/0x520
[   58.537112][ T5131]  netlink_sendmsg+0x460/0x6e0
[   58.541935][ T5131]  ? __pfx_netlink_sendmsg+0x10/0x10
[   58.547301][ T5131]  __sock_sendmsg+0x140/0x180
[   58.551997][ T5131]  ____sys_sendmsg+0x312/0x410
[   58.556863][ T5131]  __sys_sendmsg+0x19d/0x230
[   58.561498][ T5131]  __x64_sys_sendmsg+0x46/0x50
[   58.566272][ T5131]  x64_sys_call+0x2734/0x2dc0
[   58.571022][ T5131]  do_syscall_64+0xc9/0x1c0
[   58.575530][ T5131]  ? clear_bhb_loop+0x55/0xb0
[   58.580220][ T5131]  ? clear_bhb_loop+0x55/0xb0
[   58.584974][ T5131]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.590890][ T5131] RIP: 0033:0x7fc5a1c5ff19
[   58.595310][ T5131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   58.614949][ T5131] RSP: 002b:00007fc5a02d7058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   58.623431][ T5131] RAX: ffffffffffffffda RBX: 00007fc5a1e25fa0 RCX: 00007fc5a1c5ff19
[   58.631410][ T5131] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004
[   58.639389][ T5131] RBP: 00007fc5a02d70a0 R08: 0000000000000000 R09: 0000000000000000
[   58.647382][ T5131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   58.655399][ T5131] R13: 0000000000000000 R14: 00007fc5a1e25fa0 R15: 00007ffe81d1e388
[   58.663388][ T5131]  </TASK>
[   58.671266][ T5129] loop3: detected capacity change from 0 to 764
[   58.677862][ T5129] iso9660: Unknown parameter 'ÿ'
[   58.746520][   T29] audit: type=1400 audit(1733375482.078:1514): avc:  denied  { cpu } for  pid=5138 comm="syz.0.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   58.824331][ T5147] loop3: detected capacity change from 0 to 512
[   58.859176][ T5147] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   58.944316][   T29] audit: type=1326 audit(1733375482.279:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5159 comm="syz.1.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd9e5ff19 code=0x7ffc0000
[   59.037492][   T29] audit: type=1326 audit(1733375482.279:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5159 comm="syz.1.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1bd9e5ff19 code=0x7ffc0000
[   59.060867][   T29] audit: type=1326 audit(1733375482.279:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5159 comm="syz.1.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd9e5ff19 code=0x7ffc0000
[   59.084256][   T29] audit: type=1326 audit(1733375482.279:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5159 comm="syz.1.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1bd9e5ff19 code=0x7ffc0000
[   59.107745][   T29] audit: type=1326 audit(1733375482.279:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5159 comm="syz.1.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd9e5ff19 code=0x7ffc0000
[   59.131222][   T29] audit: type=1326 audit(1733375482.290:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5159 comm="syz.1.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1bd9e5ff19 code=0x7ffc0000
[   59.362646][ T5185] syz.1.568[5185] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   59.362710][ T5185] syz.1.568[5185] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   59.382321][ T5185] syz.1.568[5185] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   59.417498][ T5185] loop1: detected capacity change from 0 to 512
[   59.476236][ T5188] loop5: detected capacity change from 0 to 512
[   59.485021][ T5188] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[   59.504157][ T5185] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   59.523265][ T5189] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[   59.532348][ T5188] EXT4-fs (loop5): invalid journal inode
[   59.538029][ T5188] EXT4-fs (loop5): can't get journal size
[   59.833044][ T2999] ==================================================================
[   59.841159][ T2999] BUG: KCSAN: data-race in d_delete / step_into
[   59.847419][ T2999] 
[   59.849751][ T2999] read-write to 0xffff88811c4ba240 of 4 bytes by task 3599 on cpu 0:
[   59.857838][ T2999]  d_delete+0x15a/0x180
[   59.862025][ T2999]  d_delete_notify+0x34/0x100
[   59.864661][ T5201] FAULT_INJECTION: forcing a failure.
[   59.864661][ T5201] name failslab, interval 1, probability 0, space 0, times 0
[   59.866718][ T2999]  vfs_unlink+0x320/0x430
[   59.879376][ T5201] CPU: 0 UID: 0 PID: 5201 Comm: syz.4.574 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0
[   59.883719][ T2999]  do_unlinkat+0x237/0x4d0
[   59.894279][ T5201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   59.898678][ T2999]  __x64_sys_unlink+0x2e/0x40
[   59.908726][ T5201] Call Trace:
[   59.908736][ T5201]  <TASK>
[   59.913382][ T2999]  x64_sys_call+0x2329/0x2dc0
[   59.913406][ T2999]  do_syscall_64+0xc9/0x1c0
[   59.916694][ T5201]  dump_stack_lvl+0xf2/0x150
[   59.919620][ T2999]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.919656][ T2999] 
[   59.919662][ T2999] read to 0xffff88811c4ba240 of 4 bytes by task 2999 on cpu 1:
[   59.919678][ T2999]  step_into+0x12f/0x840
[   59.924772][ T5201]  dump_stack+0x15/0x1a
[   59.929255][ T2999]  walk_component+0x169/0x230
[   59.933825][ T5201]  should_fail_ex+0x223/0x230
[   59.939700][ T2999]  path_lookupat+0x10a/0x2b0
[   59.942018][ T5201]  should_failslab+0x8f/0xb0
[   59.949622][ T2999]  filename_lookup+0x150/0x340
[   59.953847][ T5201]  kmem_cache_alloc_noprof+0x52/0x320
[   59.957984][ T2999]  do_readlinkat+0x89/0x210
[   59.962643][ T5201]  ? mas_alloc_nodes+0x1e3/0x490
[   59.967297][ T2999]  __x64_sys_readlink+0x47/0x60
[   59.971876][ T5201]  mas_alloc_nodes+0x1e3/0x490
[   59.976443][ T2999]  x64_sys_call+0x28ba/0x2dc0
[   59.981193][ T5201]  mas_preallocate+0x44a/0x650
[   59.986537][ T2999]  do_syscall_64+0xc9/0x1c0
[   59.991030][ T5201]  __mmap_region+0x809/0x13f0
[   59.995935][ T2999]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.000896][ T5201]  mmap_region+0x164/0x1e0
[   60.005608][ T2999] 
[   60.005614][ T2999] value changed: 0x00600108 -> 0x00008008
[   60.010269][ T5201]  do_mmap+0x718/0xb60
[   60.015008][ T2999] 
[   60.015014][ T2999] Reported by Kernel Concurrency Sanitizer on:
[   60.019502][ T5201]  vm_mmap_pgoff+0x133/0x290
[   60.024169][ T2999] CPU: 1 UID: 0 PID: 2999 Comm: udevd Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0
[   60.030052][ T5201]  ksys_mmap_pgoff+0x2de/0x330
[   60.034439][ T2999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   60.036757][ T5201]  x64_sys_call+0x1940/0x2dc0
[   60.042468][ T2999] ==================================================================
[   60.098116][ T5201]  do_syscall_64+0xc9/0x1c0
[   60.102655][ T5201]  ? clear_bhb_loop+0x55/0xb0
[   60.107352][ T5201]  ? clear_bhb_loop+0x55/0xb0
[   60.112121][ T5201]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.118073][ T5201] RIP: 0033:0x7fc5a1c5ff19
[   60.122554][ T5201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   60.142195][ T5201] RSP: 002b:00007fc5a02d7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[   60.150722][ T5201] RAX: ffffffffffffffda RBX: 00007fc5a1e25fa0 RCX: 00007fc5a1c5ff19
[   60.158791][ T5201] RDX: 0000000000000000 RSI: 0000000000c00008 RDI: 0000000020400000
[   60.166779][ T5201] RBP: 00007fc5a02d70a0 R08: ffffffffffffffff R09: 0000000000000000
[   60.174872][ T5201] R10: 0000000000050032 R11: 0000000000000246 R12: 0000000000000002
[   60.182918][ T5201] R13: 0000000000000000 R14: 00007fc5a1e25fa0 R15: 00007ffe81d1e388
[   60.190933][ T5201]  </TASK>
[   60.513635][ T5188] EXT4-fs (loop5): 1 truncate cleaned up
[   60.519676][ T5185] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #17: comm syz.1.568: iget: bad i_size value: -6917529027641081756
[   60.540409][ T5185] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.568: couldn't read orphan inode 17 (err -117)
[   60.558313][ T5188] __nla_validate_parse: 27 callbacks suppressed
[   60.558407][ T5188] netlink: 8 bytes leftover after parsing attributes in process `syz.5.569'.