last executing test programs:

2.277942365s ago: executing program 4 (id=203):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f00000004c0)={[{@nodiscard}, {@stripe={'stripe', 0x3d, 0x1}}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}]}, 0xf5, 0x47a, &(0x7f0000000ac0)="$eJzs3M9vFFUcAPDvTLel5YdFxB8gaBWMxB8tLT/kYGI0mnjQaKIHjKd1WwhSwEBNhBBFDxjjwZB4Nx5N/As86cWoJxOveDckxHABPa2ZnRnaLrulpQu7uJ9PMux7M7O89903b/fNe7sNoG+NZf8kEesj4mJEjEZEpfmEsfzh2pWztX+unK0lUa+/9XeSPS2uXjlbK/6LxpZZl++o14v8mhblnn83ojo7O3OyyE/MHftg4tTpM88eOVY9PHN45vjUgQN792wf2j+1ryNxZnFd3frxiW1bXn3nwuu1gxfe+/X7rL7ri+NlHJ00lr+6LT3R6cK6bMOCdFLpYkVYkazdBovtYozGQIxcPzYar3zW1coBt1ul1edz4Vwd+B/LBupAPyo/6LP733K7Q+OOnnD5xXzCI4v7WrHlRyqRFucMNt3fdtJwRBw89+832Ra3aR4CAGChH7PxzzOtxn9pPLDgvHuKNZSNEXFvRGyKiPsiYnNE3B/ROPfBiHhoheU3r5DcOP5JLy3K1gdWWMLSsvHf88Xa1uLxXzn6i40DRW5DI/7B5NCR2ZndxWuyKwbXZPnJRU9Z7KeX//iqed+XxTT72ILxX7Zl5S+OML3UPEE3XZ2rrj7y3OVPI7ZWWsWfXF8HTCJiS0RsvcUyjjz13bZ2x1rFX46Fb6oD60z1byOezNv/XDTFX0rark9OPrd/at/EcMzO7J4or4ob/fb7+Tfblb+q+Dsga/+1La//PP7sHjEZjjh1+szRxnrtqVso5M/Pa0mbQ5tvGv+N139tZ8RQ8nYjPVSeVTwOJa9lDyPl/o+qc3Mnp+afW+Ybj5N5/Lt2zMdfjfn+vym/PWu8Eg9HRHYRb4+IRyLi0aLtHouIxyNixxLh//LSzvfbHWvf/kvMyndQFv/0Eu2fveVlqfn2X3li4OjPP7Qrv76s9t/bSO0q9izn/W+5FVzNawcAAAB3i7TxHfgkHb+eTtPx8fw7/JtjbVqJiKcPnfjw+HT+XfmNMZiWM12jC+ZDJ4u54TI/1ZTfU8wbfz0w0siP107MTnc7eOhz69r0/8xfnV1qAXqR32tB/9L/oX/p/9C/9H/oXy90uwJAdwy13v3Jna4H0BUrH/8P35Z6AHee+3/oX/o/9C/9H/pS29/Gp6v6yf/dmqj0RjVaJkZ6oxplItKeqEbnEm98kXeJXqlPmags+49Z3GJiTctD3X5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Iz/AgAA///NIdoS")
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18)
syz_clone3(&(0x7f00000003c0)={0x220000200, &(0x7f0000000040), &(0x7f0000000080)=<r4=>0x0, &(0x7f0000000140), {0x28}, &(0x7f00000001c0)=""/17, 0x11, &(0x7f0000000280)=""/238, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x6}, 0x58)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x82000, 0x0)
sendfile(0xffffffffffffffff, r5, 0x0, 0x3a)
connect$llc(r5, &(0x7f0000000680)={0x1a, 0x1, 0x3, 0x0, 0x3, 0x5}, 0x10)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000140)=0xf)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0x10c, &(0x7f0000000840)='//sysl%\xfe2M\xfbN.u\xff\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92y\xa4\"dr\x02B\x19\xea\xe34\x95d\xcd\xac\xf2jc_p\xab\x06@\xfd\xe5\x0f\x13\xee\xad\x82\x96\xde\x93\x96\xff\x92\a\xaf\x01Se\xf44\x98\xd3\xc4\x19#h\xb5\xe2\x05\x8eS\xd6\xba?\xad\xa9\xf6\x1b\x17z\xd1nR\xe7_\x00\x0f2\xdcx\x80\xf4\xdb\xbc\x98\xef\xc0z\xb1H\x7fZX;\xe7|\xef\xc7\xc7\x06`\xc6\xa4\rbL/\"\n\\klZ\x9c*\xd5\xb2\'\x95\x0fyu\xcd-\xacH\xb6k\xbd\x84\xdd\x03\xffu\"NO\xdb\\X\'pf\x9f\xcf|%\x17\xbe\x1b3\xcd\x8a\x18\xff%7\xf8S\x85\xc2\xed]\xe8J\xa0XO6_\x1e\x94V<y\x9b\x7f\x8aC\xe4gF\x1a\x86\xeb\xc3,A\xe5\xd1;@u\xa5\xecu\xa5\xcd\a\xe4\xf7\x11\x9a \xf6\xb5\x7f\xa4P\x87X\xa7\xf5\x11k\xd2;\xf2\xcaGO\x9b\xc1\x0e\x8f\x9c\xca}\x93f\xc0ui\x0e\xe90zn\xff(\x87\xfa\xa5H\xd7P'}, 0xfffffffffffffec6)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r7}, 0x18)
creat(0x0, 0xecf86c37d53049cc)
syz_open_dev$tty20(0xc, 0x4, 0x0)
r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, r8)
vmsplice(r1, &(0x7f0000000680), 0x0, 0x5)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0xffffffff, 0x4)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0xe)

2.095521552s ago: executing program 4 (id=207):
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000714010000000000000000000800"], 0x30}}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000bcaf7040a77c8d722c6875993bb7d2d99d68b84e68f3b5a962c4a050cb9dcd70c47139501efee121107f88470d3b1e1c019681a3d16cc5cd5df2397c9878cabc4540fa42c50e5ee4ca67396d1fab5dc3cca8dc20d4809051cd6ce676a375c7aa78b05ac04dfd5e6b9d8a792a4b69ef971331ee5deb9dd79022ad07aed7d3d6d34c3be8fda008788303bfb3320d3a8f6985628bff7878647b1cce811a52a07711beb58e00", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0xffffff0b}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x69, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x22020600)
r3 = eventfd2(0xff, 0x80001)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="00000000f90886e5b6b46879002b6f0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='kmem_cache_free\x00', r5}, 0x18)
r6 = syz_open_procfs(0x0, &(0x7f000000a240)='net/ip6_tables_names\x00')
pread64(r6, &(0x7f0000002b40)=""/244, 0xf4, 0x4eb)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0xa, 0x300)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0xb}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c0002800500010000000000080007400000000008000340"], 0x80}, 0x1, 0x0, 0x0, 0x4000010}, 0x4)
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000300)=r3, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x18)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, r2}, 0x10)

1.960409588s ago: executing program 2 (id=211):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0), 0x111, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000380)={<r1=>0xffffffffffffffff}, 0x13f, 0x8}}, 0x20)
r2 = getpid()
syz_pidfd_open(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b0000000c000000040000004f0c000001000400", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\b\x00\x00\x00\x00\x00'], 0x50)
ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000280)=@get={0x1, &(0x7f0000000140)=""/125, 0x9})
getsockname(r3, &(0x7f0000000080)=@ieee802154={0x24, @long}, &(0x7f0000000100)=0x80)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r5}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000440), 0x23, r5}, 0x38)
r6 = socket$inet6_icmp(0xa, 0x2, 0x3a)
getsockopt$inet6_int(r6, 0x29, 0x14, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f00000024c0), r1}}, 0x18)
r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x6801, 0x0)
setsockopt$inet_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000440), 0x3)
r8 = openat$cgroup_ro(r5, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0)
ioctl$USBDEVFS_RELEASE_PORT(r8, 0x80045519, &(0x7f0000000340)=0xfffffffe)

1.9199479s ago: executing program 2 (id=212):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000940))
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'netdevsim0\x00'})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f000000a780), 0xffffffffffffffff)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x80)
r2 = syz_open_procfs(0x0, 0x0)
pread64(r2, 0x0, 0x0, 0x4)

1.91895483s ago: executing program 2 (id=213):
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x0, &(0x7f00000001c0)})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10)
r2 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0xfac, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefce)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0x5}, 0xfffffffffffffe56)
r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r6}, 0x10)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
write$selinux_attr(r4, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="040100001600010025bd7000ffdbdf2dfe800000000000000000000000000014ffffffff0000000000000000000000004e2300004e220003020020103a0000009d5c9e32be6c3d1a43c65f63ba39e1e80500326666dec5c038c88b281ebe3c5d0c9c442dc7b27925b7da320c83804fe3d73e29b161a2db4f7cdf4a75cd0a3b83f909d556e356340bdfc55bd180fef133d3129ae08ef0b6c53c17c83b86940892442d66d81b607550d46c55afcb2ce50bb66c9b839f983b1df9f6e2238c821e95c02a144aa383574fd5e2cefe964eee3ffed6325f874019921e325f20e4e395483bc6a6fed50ae537a04aaf2642d2fa77", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000004d233000000ac1414aa000000000000000000000000010000000000000010000000000000000400000000000000018000000000000008000000000000000500000000000000f0aa00000000000001000000000000000200500000000000040000000000000004000000000000000200000000000000060000008a262721080000002b3d70000a3500000a000000100000000000000000000000020000800c0008000800080001040000"], 0x104}, 0x1, 0x0, 0x0, 0x63a0f7cf031481fc}, 0x48080)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r3}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r7, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
recvmsg(0xffffffffffffffff, 0x0, 0x1f00)
setpriority(0x1, 0xff, 0xa)

1.90960843s ago: executing program 1 (id=215):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000740)={0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400"], 0x50)
syz_open_dev$sg(&(0x7f00000060c0), 0x800000, 0x68101)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}, 0x1, 0x0, 0x0, 0x44810}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[@ANYBLOB="4c0000000906010400000000000000000500ffff240007801800018014000240fe8000000000000000000000000000aa08000a40000000020900020073797a310000000005000100070000"], 0x4c}}, 0x4000080)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000030605000000000020000000000000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40010)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e0000000000000002000000ff"], 0x50)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000180)={0x7ff, 0x0, 0x2, 0x6, 0x7, "3ba8f3ce17542e33"})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1000000, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffff0d)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
r7 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={&(0x7f0000000080)}, 0x529, 0x0, 0x2}, r1, 0x7, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, r1, 0x0, 0xffffffffffffffff, 0x0)
close(r7)
syz_open_dev$usbfs(&(0x7f0000000040), 0x6, 0x4000)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000100000000850000000c000000b704000000000000851010000300000018000000000000000000e0ffffffffff94000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94)
ioctl$TCFLSH(r0, 0x400455c8, 0x0)

1.738185177s ago: executing program 1 (id=217):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f0000"], 0x50)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(0x0, r1)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000010", @ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf252500000005002b000300000005002e00970000000a00"], 0x30}, 0x1, 0x0, 0x0, 0x4004040}, 0x4c0d0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="180500000000000000000000001f0000b7080000000000007b8af8ff00000000b708000000000b007b8af0ff00000000bfa100000000000007010cccf8ff7fffbfa4001a00000000070460cb063f2c0915a90000f0ffffffb70200000800000018230700", @ANYRES32, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5464fadc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x8}, 0x100b28, 0x9, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf2501000000000000000b40"], 0x34}, 0x1, 0x0, 0x0, 0x51}, 0x40000)
futex(&(0x7f0000000000)=0x1, 0x5, 0x20001, 0x0, 0x0, 0xc3000000)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)={0xffffffffffffffd2, r2, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x1c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
symlink(&(0x7f0000000040)='./file0/file0/../file0\x00', 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r4 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x2b3}, &(0x7f0000000300)=<r5=>0x0, &(0x7f0000000580)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4})
io_uring_enter(r4, 0x6e2, 0x3900, 0x1, 0x0, 0xe00)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0}, './file0/file0/../file0\x00'})
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x14, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r7, 0x408c5333, 0x0)
r9 = io_uring_setup(0x7268, &(0x7f0000000200)={0x0, 0xca6a, 0x40, 0x3, 0x11b, 0x0, r4})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r9, 0xb, &(0x7f0000000480), 0x66)
dup2(r4, r4)
rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8)

1.524375026s ago: executing program 4 (id=219):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)

1.495933678s ago: executing program 4 (id=220):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f0000"], 0x50)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(0x0, r1)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000010", @ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf252500000005002b000300000005002e00970000000a00"], 0x30}, 0x1, 0x0, 0x0, 0x4004040}, 0x4c0d0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="180500000000000000000000001f0000b7080000000000007b8af8ff00000000b708000000000b007b8af0ff00000000bfa100000000000007010cccf8ff7fffbfa4001a00000000070460cb063f2c0915a90000f0ffffffb70200000800000018230700", @ANYRES32, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5464fadc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x8}, 0x100b28, 0x9, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf2501000000000000000b40"], 0x34}, 0x1, 0x0, 0x0, 0x51}, 0x40000)
futex(&(0x7f0000000000)=0x1, 0x5, 0x20001, 0x0, 0x0, 0xc3000000)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)={0xffffffffffffffd2, r2, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x1c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
symlink(&(0x7f0000000040)='./file0/file0/../file0\x00', 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r4 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x2b3}, &(0x7f0000000300)=<r5=>0x0, &(0x7f0000000580)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4})
io_uring_enter(r4, 0x6e2, 0x3900, 0x1, 0x0, 0xe00)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0}, './file0/file0/../file0\x00'})
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x14, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r7, 0x408c5333, 0x0)
r9 = io_uring_setup(0x7268, &(0x7f0000000200)={0x0, 0xca6a, 0x40, 0x3, 0x11b, 0x0, r4})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r9, 0xb, &(0x7f0000000480), 0x66)
dup2(r4, r4)
rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8)

954.2834ms ago: executing program 2 (id=225):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r2 = gettid()
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'})
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002000000)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r4}, 0x10)
open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)

861.703664ms ago: executing program 2 (id=228):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f00000004c0)={[{@nodiscard}, {@stripe={'stripe', 0x3d, 0x1}}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}]}, 0xf5, 0x47a, &(0x7f0000000ac0)="$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")
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18)
syz_clone3(&(0x7f00000003c0)={0x220000200, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000140), {0x28}, &(0x7f00000001c0)=""/17, 0x11, &(0x7f0000000280)=""/238, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x6}, 0x58)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x82000, 0x0)
sendfile(0xffffffffffffffff, r3, 0x0, 0x3a)
connect$llc(r3, &(0x7f0000000680)={0x1a, 0x1, 0x3, 0x0, 0x3, 0x5}, 0x10)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0xf)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r2, 0xffffffffffffffff, 0x0, 0x10c, &(0x7f0000000840)='//sysl%\xfe2M\xfbN.u\xff\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92y\xa4\"dr\x02B\x19\xea\xe34\x95d\xcd\xac\xf2jc_p\xab\x06@\xfd\xe5\x0f\x13\xee\xad\x82\x96\xde\x93\x96\xff\x92\a\xaf\x01Se\xf44\x98\xd3\xc4\x19#h\xb5\xe2\x05\x8eS\xd6\xba?\xad\xa9\xf6\x1b\x17z\xd1nR\xe7_\x00\x0f2\xdcx\x80\xf4\xdb\xbc\x98\xef\xc0z\xb1H\x7fZX;\xe7|\xef\xc7\xc7\x06`\xc6\xa4\rbL/\"\n\\klZ\x9c*\xd5\xb2\'\x95\x0fyu\xcd-\xacH\xb6k\xbd\x84\xdd\x03\xffu\"NO\xdb\\X\'pf\x9f\xcf|%\x17\xbe\x1b3\xcd\x8a\x18\xff%7\xf8S\x85\xc2\xed]\xe8J\xa0XO6_\x1e\x94V<y\x9b\x7f\x8aC\xe4gF\x1a\x86\xeb\xc3,A\xe5\xd1;@u\xa5\xecu\xa5\xcd\a\xe4\xf7\x11\x9a \xf6\xb5\x7f\xa4P\x87X\xa7\xf5\x11k\xd2;\xf2\xcaGO\x9b\xc1\x0e\x8f\x9c\xca}\x93f\xc0ui\x0e\xe90zn\xff(\x87\xfa\xa5H\xd7P'}, 0xfffffffffffffec6)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, r5)

832.526385ms ago: executing program 1 (id=229):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001000c10701000000000000000a0000000900020054495043"], 0x7b}}, 0x20048482)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94)
iopl(0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000240), 0x3af4701e)
sendfile(r2, r0, 0x0, 0x10000a007)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x62}}, 0x0)
getsockname$packet(r8, &(0x7f00000005c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b00)=@newtclass={0x8c4, 0x28, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xfff9}, {0x8, 0x9}, {0x6, 0xb}}, [@tclass_kind_options=@c_htb={{0x8}, {0x40c, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x0, 0x222, 0x9, 0x0, 0x4, 0x1, 0x1b9, 0x1, 0x3, 0x7ff, 0xfffffff7, 0xffffffff, 0x401, 0x8, 0x9, 0xffffff4b, 0xe, 0x8001, 0x0, 0x1, 0x7, 0x8, 0x10, 0x7, 0xa7, 0x88a, 0x4, 0x6, 0x8001, 0x7, 0x7, 0xffff, 0x10, 0x6, 0x2, 0x5, 0xde6, 0x3, 0x8, 0x0, 0x8, 0xfffffff9, 0x10000, 0x3, 0x7a, 0x9, 0x3, 0x6, 0x3ff, 0x80, 0x1e, 0xe11c, 0xa2d, 0x6, 0x0, 0x10, 0xc, 0x5, 0x1, 0x3, 0x8, 0xb, 0x5, 0x5, 0x7, 0x8, 0x9, 0xffff7fff, 0x1, 0xfffffff2, 0x4, 0x7fff, 0x7, 0x8, 0x5, 0x2, 0x0, 0x2, 0x8, 0x2, 0x10000, 0x6, 0x80000000, 0x8001, 0x5, 0x7, 0xff, 0x3f2, 0x5, 0x7, 0x8, 0x0, 0x1, 0x2, 0x2, 0x7fff, 0xf32, 0x6, 0x4, 0x6, 0x3, 0x200, 0x80000001, 0xf08, 0x4117, 0x2, 0x6, 0x8000, 0x6, 0x0, 0x6, 0xc0c, 0x4eb, 0xc, 0xfb, 0x5, 0xa, 0x8, 0x1, 0xff, 0x5, 0x80000000, 0x77, 0x0, 0x0, 0xf9f, 0x94b, 0x11, 0x0, 0x7, 0x7, 0xff, 0x0, 0x4, 0x1, 0xffffffd3, 0x2, 0x9, 0x34, 0x0, 0xfd, 0x1265, 0xd94, 0x5, 0x15, 0xc65, 0x8, 0x3, 0x5, 0x1, 0xfffffffc, 0x10, 0xf, 0xb48, 0x9, 0xfffffff7, 0xa, 0x9, 0x1, 0x2, 0x6, 0x9, 0x1806, 0x79f, 0x10001, 0x6, 0xeab, 0x100, 0x5, 0x100, 0x1c, 0x7, 0xfffffffa, 0x1, 0x7, 0x3, 0xd6f, 0x800, 0x2, 0xa5de, 0x4, 0x7, 0x2, 0xf95f, 0x5, 0x1, 0x235080f7, 0x71294841, 0x0, 0x9, 0x0, 0xfff, 0x0, 0x4, 0x0, 0x0, 0x3ff, 0x9, 0x8, 0x0, 0xfffffffd, 0xfffffceb, 0x1, 0x9, 0x5, 0x9, 0x1ff, 0x9, 0x7, 0xb10, 0x7, 0x400, 0x3, 0x4, 0xabdd, 0xfffffff8, 0x3, 0x8000000, 0x3, 0x6, 0x7, 0x4, 0x2, 0x100000, 0x6, 0x1, 0x3, 0x6, 0x7, 0x4, 0x10000, 0x5, 0xfffffff9, 0xfffffff7, 0x4, 0x3, 0x9, 0x292, 0x81, 0xc, 0x81, 0x6, 0x9, 0x0, 0x6, 0x3, 0x80, 0xffffffff, 0x2, 0xd, 0x40, 0x0, 0x81, 0x2, 0x5, 0xd6]}, @TCA_HTB_OFFLOAD={0x4}]}}, @TCA_RATE={0x6, 0x5, {0xf9, 0xd}}, @TCA_RATE={0x6, 0x5, {0x4, 0xe4}}, @TCA_RATE={0x6, 0x5, {0x9, 0xfc}}, @tclass_kind_options=@c_htb={{0x8}, {0x450, 0x2, [@TCA_HTB_RATE64={0xc, 0x6, 0x1}, @TCA_HTB_RTAB={0x404, 0x4, [0x7, 0x4, 0xc9, 0x3, 0x7fffffff, 0x101, 0x6, 0x5, 0x9, 0x6bfc, 0xb31c, 0x1, 0x2, 0xfffffff7, 0x0, 0x21ea, 0x5, 0x8, 0x0, 0x1, 0xade, 0x7, 0x0, 0x5, 0x1, 0x3, 0x100, 0x8, 0x2, 0x0, 0x7, 0x9, 0x8, 0x1, 0xa, 0x9, 0x8, 0x8c9e, 0x6c73a3ac, 0x8000, 0x0, 0xfffffffc, 0xbc0, 0x3, 0xe, 0x5, 0x240000, 0x1, 0x7, 0xffffff6e, 0x7, 0xffffffff, 0x5, 0x9, 0x0, 0xffff, 0x40, 0xf, 0x6, 0x1c0, 0x8001, 0x6, 0x8c8, 0xfffffffb, 0xffff8000, 0x3, 0x7, 0x800000, 0x5, 0x5, 0x9, 0x2, 0x6, 0x79e0, 0x1, 0xd5, 0x200, 0x80000001, 0x4, 0x101, 0x5408e3, 0x9, 0x7, 0x0, 0x2, 0x2, 0xe, 0xf7c8, 0xb, 0x9, 0x4, 0x9, 0x3, 0x6, 0x9, 0xfffffff4, 0x7, 0x5, 0x8, 0xffffffff, 0x4, 0x4bb3, 0x68, 0xde1d, 0x6, 0x4, 0xfffffffe, 0x7f, 0x1, 0x0, 0x3, 0x575, 0xa98, 0xfffffffa, 0x8, 0x1000, 0x48d, 0x7, 0x4, 0x3, 0x977f, 0x0, 0x6, 0x8, 0x0, 0xfffffff7, 0x7f, 0x3, 0x6, 0xffff8001, 0x7, 0x90, 0x9, 0x5, 0x3, 0x200, 0x4, 0xfffff000, 0x1, 0x6, 0x7fff, 0x8, 0x5, 0xffff8000, 0x7, 0x1, 0x10001, 0x8, 0x2, 0x0, 0x10001, 0x0, 0x10000, 0x4, 0x94, 0xffff7fff, 0x2, 0x9, 0x0, 0x1, 0xed, 0x9, 0x3, 0x6, 0x7, 0x9, 0x212acbe1, 0x343, 0x1, 0x10000, 0x6b3, 0x717, 0x0, 0x0, 0x9af, 0x0, 0xc66e, 0x8, 0x4, 0x10, 0x0, 0x7, 0x3, 0xfffffffa, 0x3, 0x85, 0x3, 0x8, 0xea, 0x800, 0x57, 0xc3, 0x471, 0x1, 0x9, 0x0, 0x80000000, 0x7, 0x1, 0xdb02, 0x1, 0x200, 0x6, 0x5, 0x4, 0xfffffff8, 0x31ca, 0xac61, 0x6, 0x0, 0x8, 0x4, 0x7fffffff, 0x3, 0x800, 0x6, 0x0, 0xfffffffb, 0xc, 0x4, 0x5, 0x4, 0xffffff00, 0x6, 0x80000000, 0x1, 0xfffffffd, 0x38c7, 0x1, 0x9, 0x9, 0x3, 0x86, 0x8, 0x10000, 0x2, 0x4, 0x200, 0x9, 0xe1, 0x0, 0x9, 0x7fffffff, 0x1, 0x1, 0x2, 0x1, 0x8, 0x100, 0x5, 0x6, 0x2, 0x2, 0xd, 0xfc3, 0xd6]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7f, 0x1, 0x800, 0x9, 0x5, 0x5}, {0x3, 0x1, 0x1, 0xfff4, 0x800, 0x7}, 0x10, 0x3, 0x7, 0x9, 0x923}}, @TCA_HTB_RATE64={0xc, 0x6, 0x9}]}}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_red={0x8}]}, 0x8c4}}, 0x800)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r11}, 0x10)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r12, 0x0, 0xfffe}, 0x38)

769.073228ms ago: executing program 3 (id=231):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x20780, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10)
ustat(0x8000000000000001, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x4}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='kmem_cache_free\x00'}, 0x18)
syz_emit_ethernet(0x1f, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2b001142"], 0x0)
keyctl$chown(0x4, r3, 0xee01, 0xee00)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x20000023892)
rmdir(&(0x7f0000000080)='./cgroup/../file0\x00')
keyctl$chown(0x4, r3, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x6000)
setresuid(0xee01, r6, r6)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00'}, 0x10)

714.72171ms ago: executing program 3 (id=232):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
r3 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xdd86, 0x2c}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)='b', 0x28}], 0x1}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
pipe2(&(0x7f0000001cc0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x800)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="2c756e616d653dd0"])
r9 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)=""/15, 0xf}], 0x1)
dup2(r1, r0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r0, 0x0)
process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x100000000000026d, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
unshare(0x64000600)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r10}, 0x10)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)

701.946601ms ago: executing program 0 (id=233):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f00000004c0)={[{@nodiscard}, {@stripe={'stripe', 0x3d, 0x1}}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}]}, 0xf5, 0x47a, &(0x7f0000000ac0)="$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")
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18)
syz_clone3(&(0x7f00000003c0)={0x220000200, &(0x7f0000000040), &(0x7f0000000080)=<r4=>0x0, &(0x7f0000000140), {0x28}, &(0x7f00000001c0)=""/17, 0x11, &(0x7f0000000280)=""/238, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x6}, 0x58)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x82000, 0x0)
sendfile(0xffffffffffffffff, r5, 0x0, 0x3a)
connect$llc(r5, &(0x7f0000000680)={0x1a, 0x1, 0x3, 0x0, 0x3, 0x5}, 0x10)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000140)=0xf)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0x10c, &(0x7f0000000840)='//sysl%\xfe2M\xfbN.u\xff\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92y\xa4\"dr\x02B\x19\xea\xe34\x95d\xcd\xac\xf2jc_p\xab\x06@\xfd\xe5\x0f\x13\xee\xad\x82\x96\xde\x93\x96\xff\x92\a\xaf\x01Se\xf44\x98\xd3\xc4\x19#h\xb5\xe2\x05\x8eS\xd6\xba?\xad\xa9\xf6\x1b\x17z\xd1nR\xe7_\x00\x0f2\xdcx\x80\xf4\xdb\xbc\x98\xef\xc0z\xb1H\x7fZX;\xe7|\xef\xc7\xc7\x06`\xc6\xa4\rbL/\"\n\\klZ\x9c*\xd5\xb2\'\x95\x0fyu\xcd-\xacH\xb6k\xbd\x84\xdd\x03\xffu\"NO\xdb\\X\'pf\x9f\xcf|%\x17\xbe\x1b3\xcd\x8a\x18\xff%7\xf8S\x85\xc2\xed]\xe8J\xa0XO6_\x1e\x94V<y\x9b\x7f\x8aC\xe4gF\x1a\x86\xeb\xc3,A\xe5\xd1;@u\xa5\xecu\xa5\xcd\a\xe4\xf7\x11\x9a \xf6\xb5\x7f\xa4P\x87X\xa7\xf5\x11k\xd2;\xf2\xcaGO\x9b\xc1\x0e\x8f\x9c\xca}\x93f\xc0ui\x0e\xe90zn\xff(\x87\xfa\xa5H\xd7P'}, 0xfffffffffffffec6)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r7}, 0x18)
creat(0x0, 0xecf86c37d53049cc)
syz_open_dev$tty20(0xc, 0x4, 0x0)
r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, r8)
vmsplice(r1, &(0x7f0000000680), 0x0, 0x5)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0xffffffff, 0x4)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0xe)

568.934236ms ago: executing program 1 (id=234):
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdir(0x0, 0x92)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r2 = inotify_init()
inotify_add_watch(r2, 0x0, 0x4000200)
lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x81}, 0x18)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, 0x0, 0x0)
listen(r4, 0x2)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x2)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
epoll_create1(0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r6, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)}}, {}], 0x3, 0x1c000)
fallocate(r3, 0x3b, 0xf3, 0x0)

562.996776ms ago: executing program 2 (id=235):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f0000"], 0x50)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(0x0, r1)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000010", @ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf252500000005002b000300000005002e00970000000a0001007770616e30000000"], 0x30}, 0x1, 0x0, 0x0, 0x4004040}, 0x4c0d0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="180500000000000000000000001f0000b7080000000000007b8af8ff00000000b708000000000b007b8af0ff00000000bfa100000000000007010cccf8ff7fffbfa4001a00000000070460cb063f2c0915a90000f0ffffffb70200000800000018230700", @ANYRES32, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5464fadc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x8}, 0x100b28, 0x9, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf2501000000000000000b40"], 0x34}, 0x1, 0x0, 0x0, 0x51}, 0x40000)
futex(&(0x7f0000000000)=0x1, 0x5, 0x20001, 0x0, 0x0, 0xc3000000)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)={0xffffffffffffffd2, r2, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x1c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
symlink(&(0x7f0000000040)='./file0/file0/../file0\x00', 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r4 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x2b3}, &(0x7f0000000300)=<r5=>0x0, &(0x7f0000000580)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4})
io_uring_enter(r4, 0x6e2, 0x3900, 0x1, 0x0, 0xe00)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0}, './file0/file0/../file0\x00'})
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x14, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r7, 0x408c5333, 0x0)
r9 = io_uring_setup(0x7268, &(0x7f0000000200)={0x0, 0xca6a, 0x40, 0x3, 0x11b, 0x0, r4})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r9, 0xb, &(0x7f0000000480), 0x66)
dup2(r4, r4)
rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8)

549.551927ms ago: executing program 4 (id=236):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000240)='kfree\x00', r2}, 0x18)
signalfd(0xffffffffffffffff, &(0x7f0000000300), 0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x1}}, './file0\x00'})
syz_emit_ethernet(0x2a, &(0x7f0000000600)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x300, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x8}}}}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x20008000)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)

524.082778ms ago: executing program 0 (id=237):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000740)={0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400"], 0x50)
syz_open_dev$sg(&(0x7f00000060c0), 0x800000, 0x68101)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a000000"], 0x4c}, 0x1, 0x0, 0x0, 0x44810}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[@ANYBLOB="4c0000000906010400000000000000000500ffff240007801800018014000240fe8000000000000000000000000000aa08000a40000000020900020073797a310000000005000100070000"], 0x4c}}, 0x4000080)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r4, 0x0, 0x40010)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e0000000000000002000000ff"], 0x50)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000180)={0x7ff, 0x0, 0x2, 0x6, 0x7, "3ba8f3ce17542e33"})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x40, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1000000, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffff0d)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
r7 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={&(0x7f0000000080)}, 0x529, 0x0, 0x2}, r1, 0x7, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, r1, 0x0, 0xffffffffffffffff, 0x0)
close(r7)
syz_open_dev$usbfs(&(0x7f0000000040), 0x6, 0x4000)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[], 0x50)
ioctl$TCFLSH(r0, 0x400455c8, 0x0)

523.632748ms ago: executing program 1 (id=238):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r2 = gettid()
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'})
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002000000)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r4}, 0x10)
open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)

486.26862ms ago: executing program 4 (id=239):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f0000"], 0x50)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(0x0, r1)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000010", @ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf252500000005002b000300000005002e00970000000a00"], 0x30}, 0x1, 0x0, 0x0, 0x4004040}, 0x4c0d0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="180500000000000000000000001f0000b7080000000000007b8af8ff00000000b708000000000b007b8af0ff00000000bfa100000000000007010cccf8ff7fffbfa4001a00000000070460cb063f2c0915a90000f0ffffffb70200000800000018230700", @ANYRES32, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5464fadc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x8}, 0x100b28, 0x9, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf2501000000000000000b40"], 0x34}, 0x1, 0x0, 0x0, 0x51}, 0x40000)
futex(&(0x7f0000000000)=0x1, 0x5, 0x20001, 0x0, 0x0, 0xc3000000)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)={0xffffffffffffffd2, r2, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x1c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
symlink(&(0x7f0000000040)='./file0/file0/../file0\x00', 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r4 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x2b3}, &(0x7f0000000300)=<r5=>0x0, &(0x7f0000000580)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4})
io_uring_enter(r4, 0x6e2, 0x3900, 0x1, 0x0, 0xe00)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0}, './file0/file0/../file0\x00'})
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x14, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r7, 0x408c5333, 0x0)
r9 = io_uring_setup(0x7268, &(0x7f0000000200)={0x0, 0xca6a, 0x40, 0x3, 0x11b, 0x0, r4})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r9, 0xb, &(0x7f0000000480), 0x66)
dup2(r4, r4)
rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8)

462.53915ms ago: executing program 3 (id=240):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000740)={0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400"], 0x50)
syz_open_dev$sg(&(0x7f00000060c0), 0x800000, 0x68101)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}, 0x1, 0x0, 0x0, 0x44810}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[@ANYBLOB="4c0000000906010400000000000000000500ffff240007801800018014000240fe8000000000000000000000000000aa08000a40000000020900020073797a310000000005000100070000"], 0x4c}}, 0x4000080)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000030605000000000020000000000000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40010)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e0000000000000002000000ff"], 0x50)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000180)={0x7ff, 0x0, 0x2, 0x6, 0x7, "3ba8f3ce17542e33"})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1000000, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffff0d)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
r7 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={&(0x7f0000000080)}, 0x529, 0x0, 0x2}, r1, 0x7, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, r1, 0x0, 0xffffffffffffffff, 0x0)
close(r7)
syz_open_dev$usbfs(&(0x7f0000000040), 0x6, 0x4000)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000100000000850000000c000000b704000000000000851010000300000018000000000000000000e0ffffffffff940000000000000095000000"], &(0x7f0000000000)='GPL\x00'}, 0x94)
ioctl$TCFLSH(r0, 0x400455c8, 0x0)

420.688663ms ago: executing program 0 (id=241):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="084318934a8b10b3a4420818000000000000000000000000000000c967bd30", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r3 = socket$kcm(0xa, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(r3, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)}], 0x1, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'r'}], 0x18}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r4 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000280))
io_uring_register$IORING_REGISTER_PROBE(r4, 0x8, 0xfffffffffffffffe, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x1, 0x5, 0x0, 'queue0\x00', 0x5})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000380))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x43c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x410, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x2, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0xfffffffd, 0x1, 0x0, 0x0, 0x3, 0x0, 0x2000, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x5, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0xffff8000, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x8, 0x6, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x4cc, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2000000, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x800004, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x102, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PBURST={0x8, 0x7, 0x55f}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYBLOB, @ANYRESDEC], 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r10)
sendmsg$NFC_CMD_SE_IO(r10, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000040)={0x28, r11, 0x501, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_SE_APDU={0x4}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40089}, 0x8884)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x70, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x2, 0x5a}}}}, [@NL80211_ATTR_IE={0xa, 0x2a, [@chsw_timing={0x68, 0x4, {0xc, 0x2}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x18, 0x34, @random="d7f3a7ee52432030f66c9d2e3fbbf40d6782ea35"}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r9, 0x0, 0x7eda}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r13 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810)

363.195825ms ago: executing program 0 (id=242):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
r2 = gettid()
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'})
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002000000)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)

349.610096ms ago: executing program 1 (id=243):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x20780, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10)
ustat(0x8000000000000001, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x4}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='kmem_cache_free\x00'}, 0x18)
syz_emit_ethernet(0x1f, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2b001142"], 0x0)
keyctl$chown(0x4, r3, 0xee01, 0xee00)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x20000023892)
rmdir(&(0x7f0000000080)='./cgroup/../file0\x00')
keyctl$chown(0x4, r3, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x6000)
setresuid(0xee01, r6, r6)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00'}, 0x10)

336.896156ms ago: executing program 3 (id=244):
r0 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1<e\a\xa5\x8f\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\xd3K\xfa\xc8\x8d#\xce)\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^\x97\b\x14\xc5\xad\t\f\xdeg\x8d\x16wW\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B4/#W\xc5\x05\x9d\xd6\x02\x8cU!a\xdc|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3\x93\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^', &(0x7f00000000c0)='dE\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)=':.*}$+.]\r&$#\x00', &(0x7f0000000100)='\x19-]*\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000007c0)='\xd5@=\b\a:\x993\x00', &(0x7f0000000600)='dU|\xcbM\xe6\x91q\b', 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2, 0x0, 0x5}, 0x18)
close(r0) (fail_nth: 1)

82.592147ms ago: executing program 3 (id=245):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xa, 0xfb, 0x7ffc1ffb}]}) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
mlockall(0x7)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x7, 0x4, 0x100, 0x4, 0x20}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x9, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000031c0000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) (async)
close(0xffffffffffffffff) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000006c0)={'syztnl0\x00', 0x0, 0x80, 0x8, 0x2, 0x10000, {{0x33, 0x4, 0x1, 0x4, 0xcc, 0x64, 0x0, 0x5, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @cipso={0x86, 0x49, 0x0, [{0x0, 0xc, "73597e659a6ff2bce17c"}, {0x0, 0x7, "763ee4b073"}, {0x7, 0x2}, {0x7, 0xd, "18e4b8cb77c988c285d64f"}, {0x5, 0xe, "c809e5191a69556bc7ca101c"}, {0x6, 0x11, "907192ef5e726ba5859d855ae6be02"}, {0x0, 0x2}]}, @end, @noop, @lsrr={0x83, 0xb, 0xf7, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x18}]}, @ssrr={0x89, 0x23, 0x23, [@multicast2, @dev={0xac, 0x14, 0x14, 0x1c}, @multicast1, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010100, @loopback]}, @timestamp_addr={0x44, 0x3c, 0x65, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@multicast1, 0x74}, {@multicast2, 0x4}, {@multicast2, 0x29748313}, {@multicast1, 0x4}, {@private=0xa010102, 0x30000}, {@multicast1, 0x5}]}]}}}}})
r5 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r5, 0x0) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x5}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r5, 0x2) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async)
r6 = io_uring_setup(0x30e5, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x22002f6}) (async)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x14, r7, 0x800, 0x70bd28, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x10000041) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xb, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) (async)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@o_path={&(0x7f00000003c0)='./file0\x00', 0x0, 0x28, r4}, 0x18) (async)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@generic={&(0x7f0000000440)='./file0\x00', 0x0, 0x10}, 0x18)

82.192977ms ago: executing program 0 (id=246):
r0 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1<e\a\xa5\x8f\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\xd3K\xfa\xc8\x8d#\xce)\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^\x97\b\x14\xc5\xad\t\f\xdeg\x8d\x16wW\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B4/#W\xc5\x05\x9d\xd6\x02\x8cU!a\xdc|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3\x93\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^', &(0x7f00000000c0)='dE\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)=':.*}$+.]\r&$#\x00', &(0x7f0000000100)='\x19-]*\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000007c0)='\xd5@=\b\a:\x993\x00', &(0x7f0000000600)='dU|\xcbM\xe6\x91q\b', 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f0000000900)="aab39a0963c72d47a0699bbe5f0f05a76e18bd20a501398b034987f6c9a823879d5ecf59db7aca3deb2700b740d5f121a453912fa7d25edf0a325ced308790a598bb9b170e68e718aa814096f4a92496d1ee44d1236953261359fa0b23cace31fbf568801409f9ba157424e08e41bf4c12c2075e9dff304f45724554d379e77aed6cb282ecc70c4f02784f439cef1b2941368006d9b5df4862f5a8", 0x9b)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r2}, 0x10)
unshare(0xc000400)
unshare(0x28000600)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x19, &(0x7f0000000800)=@raw=[@func, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ldst={0x2, 0x0, 0x1, 0x9, 0x8, 0x20}, @call={0x85, 0x0, 0x0, 0xb8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], 0x0, 0xfffffff9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4, 0x0, 0x5}, 0x18)
close(r0)

750.76µs ago: executing program 0 (id=247):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f00000004c0)={[{@nodiscard}, {@stripe={'stripe', 0x3d, 0x1}}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}]}, 0xf5, 0x47a, &(0x7f0000000ac0)="$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")
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18)
syz_clone3(&(0x7f00000003c0)={0x220000200, &(0x7f0000000040), &(0x7f0000000080)=<r4=>0x0, &(0x7f0000000140), {0x28}, &(0x7f00000001c0)=""/17, 0x11, &(0x7f0000000280)=""/238, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x6}, 0x58)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x82000, 0x0)
sendfile(0xffffffffffffffff, r5, 0x0, 0x3a)
connect$llc(r5, &(0x7f0000000680)={0x1a, 0x1, 0x3, 0x0, 0x3, 0x5}, 0x10)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000140)=0xf)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x0, 0x10c, &(0x7f0000000840)='//sysl%\xfe2M\xfbN.u\xff\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92y\xa4\"dr\x02B\x19\xea\xe34\x95d\xcd\xac\xf2jc_p\xab\x06@\xfd\xe5\x0f\x13\xee\xad\x82\x96\xde\x93\x96\xff\x92\a\xaf\x01Se\xf44\x98\xd3\xc4\x19#h\xb5\xe2\x05\x8eS\xd6\xba?\xad\xa9\xf6\x1b\x17z\xd1nR\xe7_\x00\x0f2\xdcx\x80\xf4\xdb\xbc\x98\xef\xc0z\xb1H\x7fZX;\xe7|\xef\xc7\xc7\x06`\xc6\xa4\rbL/\"\n\\klZ\x9c*\xd5\xb2\'\x95\x0fyu\xcd-\xacH\xb6k\xbd\x84\xdd\x03\xffu\"NO\xdb\\X\'pf\x9f\xcf|%\x17\xbe\x1b3\xcd\x8a\x18\xff%7\xf8S\x85\xc2\xed]\xe8J\xa0XO6_\x1e\x94V<y\x9b\x7f\x8aC\xe4gF\x1a\x86\xeb\xc3,A\xe5\xd1;@u\xa5\xecu\xa5\xcd\a\xe4\xf7\x11\x9a \xf6\xb5\x7f\xa4P\x87X\xa7\xf5\x11k\xd2;\xf2\xcaGO\x9b\xc1\x0e\x8f\x9c\xca}\x93f\xc0ui\x0e\xe90zn\xff(\x87\xfa\xa5H\xd7P'}, 0xfffffffffffffec6)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r7}, 0x18)
creat(0x0, 0xecf86c37d53049cc)
syz_open_dev$tty20(0xc, 0x4, 0x0)
r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, r8)
vmsplice(r1, &(0x7f0000000680), 0x0, 0x5)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0xffffffff, 0x4)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0xe)

0s ago: executing program 3 (id=257):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r2 = gettid()
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'})
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002000000)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.224' (ED25519) to the list of known hosts.
[   34.167649][   T29] audit: type=1400 audit(1764656758.515:62): avc:  denied  { mounton } for  pid=3304 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   34.190769][   T29] audit: type=1400 audit(1764656758.535:63): avc:  denied  { mount } for  pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   34.191755][ T3304] cgroup: Unknown subsys name 'net'
[   34.218544][   T29] audit: type=1400 audit(1764656758.575:64): avc:  denied  { unmount } for  pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   34.353550][ T3304] cgroup: Unknown subsys name 'cpuset'
[   34.359989][ T3304] cgroup: Unknown subsys name 'rlimit'
[   34.471689][   T29] audit: type=1400 audit(1764656758.815:65): avc:  denied  { setattr } for  pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   34.496048][   T29] audit: type=1400 audit(1764656758.825:66): avc:  denied  { create } for  pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   34.516713][   T29] audit: type=1400 audit(1764656758.825:67): avc:  denied  { write } for  pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   34.525378][ T3307] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   34.537139][   T29] audit: type=1400 audit(1764656758.825:68): avc:  denied  { read } for  pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   34.564829][ T3304] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   34.566067][   T29] audit: type=1400 audit(1764656758.825:69): avc:  denied  { mounton } for  pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   34.599515][   T29] audit: type=1400 audit(1764656758.825:70): avc:  denied  { mount } for  pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   34.623012][   T29] audit: type=1400 audit(1764656758.905:71): avc:  denied  { relabelto } for  pid=3307 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   36.457650][ T3314] chnl_net:caif_netlink_parms(): no params data found
[   36.570848][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.577966][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.585219][ T3314] bridge_slave_0: entered allmulticast mode
[   36.591679][ T3314] bridge_slave_0: entered promiscuous mode
[   36.600535][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.607669][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.614897][ T3314] bridge_slave_1: entered allmulticast mode
[   36.621337][ T3314] bridge_slave_1: entered promiscuous mode
[   36.667247][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.678890][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.726935][ T3314] team0: Port device team_slave_0 added
[   36.735910][ T3314] team0: Port device team_slave_1 added
[   36.756828][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.763933][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   36.789988][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.817435][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.824457][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   36.850491][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.905517][ T3314] hsr_slave_0: entered promiscuous mode
[   36.911754][ T3314] hsr_slave_1: entered promiscuous mode
[   36.921132][ T3323] chnl_net:caif_netlink_parms(): no params data found
[   36.932869][ T3327] chnl_net:caif_netlink_parms(): no params data found
[   37.017681][ T3325] chnl_net:caif_netlink_parms(): no params data found
[   37.060097][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.067231][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.074456][ T3323] bridge_slave_0: entered allmulticast mode
[   37.080997][ T3323] bridge_slave_0: entered promiscuous mode
[   37.102332][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.109538][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.116771][ T3323] bridge_slave_1: entered allmulticast mode
[   37.123214][ T3323] bridge_slave_1: entered promiscuous mode
[   37.129748][ T3327] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.136879][ T3327] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.144176][ T3327] bridge_slave_0: entered allmulticast mode
[   37.150789][ T3327] bridge_slave_0: entered promiscuous mode
[   37.164139][ T3326] chnl_net:caif_netlink_parms(): no params data found
[   37.184897][ T3327] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.191977][ T3327] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.199412][ T3327] bridge_slave_1: entered allmulticast mode
[   37.205840][ T3327] bridge_slave_1: entered promiscuous mode
[   37.231215][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   37.261254][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   37.271562][ T3327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   37.293221][ T3327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   37.333507][ T3323] team0: Port device team_slave_0 added
[   37.344178][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.351302][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.358567][ T3325] bridge_slave_0: entered allmulticast mode
[   37.365147][ T3325] bridge_slave_0: entered promiscuous mode
[   37.371778][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.378868][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.386038][ T3325] bridge_slave_1: entered allmulticast mode
[   37.392399][ T3325] bridge_slave_1: entered promiscuous mode
[   37.409202][ T3323] team0: Port device team_slave_1 added
[   37.415625][ T3327] team0: Port device team_slave_0 added
[   37.429035][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.436161][ T3326] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.443465][ T3326] bridge_slave_0: entered allmulticast mode
[   37.449890][ T3326] bridge_slave_0: entered promiscuous mode
[   37.462810][ T3327] team0: Port device team_slave_1 added
[   37.475219][ T3325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   37.484467][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.491567][ T3326] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.498793][ T3326] bridge_slave_1: entered allmulticast mode
[   37.505210][ T3326] bridge_slave_1: entered promiscuous mode
[   37.519152][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.526145][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.552121][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.568619][ T3325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   37.578146][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.585151][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.611171][ T3327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.636825][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.643828][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.669788][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.686178][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.693160][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.719093][ T3327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.736146][ T3326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   37.748875][ T3326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   37.763671][ T3325] team0: Port device team_slave_0 added
[   37.770327][ T3325] team0: Port device team_slave_1 added
[   37.801914][ T3326] team0: Port device team_slave_0 added
[   37.808578][ T3326] team0: Port device team_slave_1 added
[   37.814676][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.821678][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.847658][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.868505][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   37.881976][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.888966][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.915025][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.935474][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   37.952441][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.959447][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.985526][ T3326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.998474][ T3327] hsr_slave_0: entered promiscuous mode
[   38.004651][ T3327] hsr_slave_1: entered promiscuous mode
[   38.010550][ T3327] debugfs: 'hsr0' already exists in 'hsr'
[   38.016343][ T3327] Cannot create hsr debugfs directory
[   38.024163][ T3323] hsr_slave_0: entered promiscuous mode
[   38.030256][ T3323] hsr_slave_1: entered promiscuous mode
[   38.036272][ T3323] debugfs: 'hsr0' already exists in 'hsr'
[   38.042010][ T3323] Cannot create hsr debugfs directory
[   38.047667][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   38.057480][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   38.066282][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.073354][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.099456][ T3326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.146785][ T3325] hsr_slave_0: entered promiscuous mode
[   38.153344][ T3325] hsr_slave_1: entered promiscuous mode
[   38.159218][ T3325] debugfs: 'hsr0' already exists in 'hsr'
[   38.165063][ T3325] Cannot create hsr debugfs directory
[   38.199121][ T3326] hsr_slave_0: entered promiscuous mode
[   38.205319][ T3326] hsr_slave_1: entered promiscuous mode
[   38.211268][ T3326] debugfs: 'hsr0' already exists in 'hsr'
[   38.217042][ T3326] Cannot create hsr debugfs directory
[   38.374393][ T3327] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   38.383580][ T3327] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   38.393216][ T3327] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   38.417741][ T3327] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   38.426782][ T3326] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   38.439458][ T3326] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   38.451768][ T3326] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   38.471503][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.479056][ T3326] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   38.488765][ T3323] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   38.498158][ T3323] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   38.507251][ T3323] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   38.521933][ T3323] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   38.564632][ T3314] 8021q: adding VLAN 0 to HW filter on device team0
[   38.588531][ T3325] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   38.598112][ T3325] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   38.608870][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.615973][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.629943][ T3325] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   38.639696][ T3325] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   38.654563][ T1809] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.661637][ T1809] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.709180][ T3327] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.719618][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   38.735699][ T3326] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.768592][ T3326] 8021q: adding VLAN 0 to HW filter on device team0
[   38.785759][ T3327] 8021q: adding VLAN 0 to HW filter on device team0
[   38.795942][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.808350][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.815431][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.824399][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.831448][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.840348][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.847414][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.865455][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.872617][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.886366][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.897086][ T3323] 8021q: adding VLAN 0 to HW filter on device team0
[   38.913312][ T1809] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.920385][ T1809] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.935531][ T1809] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.942707][ T1809] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.956377][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.978010][ T3327] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   38.988477][ T3327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   39.020259][ T3325] 8021q: adding VLAN 0 to HW filter on device team0
[   39.041846][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.049043][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.064668][ T1809] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.071762][ T1809] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.115929][ T3314] veth0_vlan: entered promiscuous mode
[   39.140630][ T3327] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.152474][ T3314] veth1_vlan: entered promiscuous mode
[   39.160966][ T3325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   39.181821][ T3326] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.212493][ T3314] veth0_macvtap: entered promiscuous mode
[   39.232751][ T3314] veth1_macvtap: entered promiscuous mode
[   39.249905][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.264111][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.286560][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.300389][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.336180][ T1809] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.350373][ T1809] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.379527][ T1809] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.392573][ T3327] veth0_vlan: entered promiscuous mode
[   39.399037][   T29] kauditd_printk_skb: 9 callbacks suppressed
[   39.399055][   T29] audit: type=1400 audit(1764656763.745:81): avc:  denied  { mounton } for  pid=3314 comm="syz-executor" path="/root/syzkaller.KU8x48/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   39.438795][ T3326] veth0_vlan: entered promiscuous mode
[   39.447578][ T1809] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.464196][ T3327] veth1_vlan: entered promiscuous mode
[   39.476910][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   39.496768][ T3327] veth0_macvtap: entered promiscuous mode
[   39.503532][   T29] audit: type=1400 audit(1764656763.765:82): avc:  denied  { mount } for  pid=3314 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   39.507705][ T3326] veth1_vlan: entered promiscuous mode
[   39.525522][   T29] audit: type=1400 audit(1764656763.765:83): avc:  denied  { mounton } for  pid=3314 comm="syz-executor" path="/root/syzkaller.KU8x48/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   39.544764][ T3326] veth0_macvtap: entered promiscuous mode
[   39.556214][   T29] audit: type=1400 audit(1764656763.765:84): avc:  denied  { mount } for  pid=3314 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   39.570876][ T3323] veth0_vlan: entered promiscuous mode
[   39.583687][   T29] audit: type=1400 audit(1764656763.765:85): avc:  denied  { mounton } for  pid=3314 comm="syz-executor" path="/root/syzkaller.KU8x48/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   39.598931][ T3327] veth1_macvtap: entered promiscuous mode
[   39.615638][   T29] audit: type=1400 audit(1764656763.765:86): avc:  denied  { mounton } for  pid=3314 comm="syz-executor" path="/root/syzkaller.KU8x48/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   39.648651][   T29] audit: type=1400 audit(1764656763.765:87): avc:  denied  { unmount } for  pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   39.659877][ T3323] veth1_vlan: entered promiscuous mode
[   39.668247][   T29] audit: type=1400 audit(1764656763.785:88): avc:  denied  { mounton } for  pid=3314 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   39.681793][ T3326] veth1_macvtap: entered promiscuous mode
[   39.696454][   T29] audit: type=1400 audit(1764656763.785:89): avc:  denied  { mount } for  pid=3314 comm="syz-executor" name="/" dev="gadgetfs" ino=3743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   39.729354][   T29] audit: type=1400 audit(1764656764.085:90): avc:  denied  { read write } for  pid=3314 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   39.750054][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.771025][ T3323] veth0_macvtap: entered promiscuous mode
[   39.786516][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.797410][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.810296][ T1809] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.823112][ T3323] veth1_macvtap: entered promiscuous mode
[   39.826305][    C1] hrtimer: interrupt took 37683 ns
[   39.830798][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.848884][ T1809] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.861908][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.873490][ T1809] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.891210][  T328] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.910929][  T328] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.932738][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.962932][  T328] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.985400][ T3325] veth0_vlan: entered promiscuous mode
[   39.996901][ T3488] loop2: detected capacity change from 0 to 164
[   40.008549][  T328] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.019991][ T3325] veth1_vlan: entered promiscuous mode
[   40.030554][ T3491] mmap: syz.1.6 (3491) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   40.050677][  T328] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.053464][ T3488] rock: directory entry would overflow storage
[   40.065822][ T3488] rock: sig=0x4f50, size=4, remaining=3
[   40.071390][ T3488] iso9660: Corrupted directory entry in block 4 of inode 1792
[   40.080227][   T58] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.112979][   T58] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.121776][   T58] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.153838][   T58] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.163345][ T3325] veth0_macvtap: entered promiscuous mode
[   40.188955][ T3325] veth1_macvtap: entered promiscuous mode
[   40.229967][ T3501] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4'.
[   40.244272][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.273773][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.285732][  T385] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.303940][ T1809] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.323057][ T3501] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   40.356564][ T1809] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.366663][ T1809] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.429153][ T3503] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3503 comm=syz.2.8
[   40.441966][ T3503] sch_fq: defrate 6 ignored.
[   40.518439][ T3517] lo speed is unknown, defaulting to 1000
[   40.540060][ T3519] loop0: detected capacity change from 0 to 512
[   40.556905][ T3515] capability: warning: `syz.1.11' uses deprecated v2 capabilities in a way that may be insecure
[   40.557190][ T3517] lo speed is unknown, defaulting to 1000
[   40.574159][ T3517] lo speed is unknown, defaulting to 1000
[   40.580494][ T3517] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   40.588124][ T3519] =======================================================
[   40.588124][ T3519] WARNING: The mand mount option has been deprecated and
[   40.588124][ T3519]          and is ignored by this kernel. Remove the mand
[   40.588124][ T3519]          option from the mount to silence this warning.
[   40.588124][ T3519] =======================================================
[   40.628384][ T3517] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   40.640245][ T3519] EXT4-fs (loop0): external journal device major/minor numbers have changed
[   40.649438][ T3519] EXT4-fs (loop0): failed to open journal device unknown-block(8,0) -16
[   40.649958][ T3521] loop3: detected capacity change from 0 to 512
[   40.666689][ T3517] lo speed is unknown, defaulting to 1000
[   40.681946][ T3517] lo speed is unknown, defaulting to 1000
[   40.690310][ T3521] EXT4-fs (loop3): external journal device major/minor numbers have changed
[   40.696340][ T3517] lo speed is unknown, defaulting to 1000
[   40.711659][ T3521] EXT4-fs (loop3): failed to open journal device unknown-block(8,0) -16
[   40.729954][ T3517] lo speed is unknown, defaulting to 1000
[   40.736170][ T3517] lo speed is unknown, defaulting to 1000
[   40.742438][ T3517] lo speed is unknown, defaulting to 1000
[   40.899447][ T3532] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17'.
[   40.904006][ T3530] syz.4.16 uses obsolete (PF_INET,SOCK_PACKET)
[   40.916198][ T3532] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   41.028459][ T3540] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16'.
[   41.135900][ T3547] loop0: detected capacity change from 0 to 512
[   41.147914][ T3547] EXT4-fs (loop0): external journal device major/minor numbers have changed
[   41.158146][ T3547] EXT4-fs (loop0): failed to open journal device unknown-block(8,0) -16
[   41.199276][ T3550] netlink: 20 bytes leftover after parsing attributes in process `syz.2.23'.
[   41.209000][ T3550] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   41.640589][ T3563] loop1: detected capacity change from 0 to 512
[   41.675106][ T3563] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.688733][ T3563] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   41.730338][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.778352][ T3568] netlink: 'syz.3.29': attribute type 3 has an invalid length.
[   41.852828][ T3578] loop3: detected capacity change from 0 to 512
[   41.868821][ T3578] EXT4-fs (loop3): external journal device major/minor numbers have changed
[   41.878086][ T3578] EXT4-fs (loop3): failed to open journal device unknown-block(8,0) -16
[   42.069143][ T3587] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[   42.149238][ T3594] netlink: 40 bytes leftover after parsing attributes in process `syz.2.39'.
[   42.158982][ T3594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.39'.
[   42.280281][ T3600] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[   42.295800][ T3600] team0 (unregistering): Port device team_slave_0 removed
[   42.306878][ T3600] team0 (unregistering): Port device team_slave_1 removed
[   42.651430][ T3612] netlink: 20 bytes leftover after parsing attributes in process `syz.1.43'.
[   42.663065][ T3612] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   42.775037][ T3617] loop2: detected capacity change from 0 to 512
[   42.782376][ T3617] EXT4-fs (loop2): external journal device major/minor numbers have changed
[   42.791677][ T3617] EXT4-fs (loop2): failed to open journal device unknown-block(8,0) -16
[   43.060612][ T3623] netlink: 20 bytes leftover after parsing attributes in process `syz.1.47'.
[   43.083123][ T3623] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   43.100774][ T3625] loop0: detected capacity change from 0 to 512
[   43.117563][ T3625] EXT4-fs (loop0): external journal device major/minor numbers have changed
[   43.127366][ T3625] EXT4-fs (loop0): failed to open journal device unknown-block(8,0) -16
[   43.815114][ T3646] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3646 comm=syz.2.52
[   43.827874][ T3646] sch_fq: defrate 6 ignored.
[   43.847401][ T3646] lo speed is unknown, defaulting to 1000
[   43.857406][ T3652] siw: device registration error -23
[   44.013567][   T31] Bluetooth: hci0: Frame reassembly failed (-84)
[   44.403595][   T29] kauditd_printk_skb: 3295 callbacks suppressed
[   44.403609][   T29] audit: type=1326 audit(1764656768.755:3386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3649 comm="syz.4.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa3573e2005 code=0x7ffc0000
[   44.433740][   T29] audit: type=1326 audit(1764656768.755:3387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3657 comm="syz.0.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5017822005 code=0x7ffc0000
[   44.457345][   T29] audit: type=1326 audit(1764656768.755:3388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3649 comm="syz.4.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa3573e2005 code=0x7ffc0000
[   44.480870][   T29] audit: type=1326 audit(1764656768.755:3389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3657 comm="syz.0.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5017822005 code=0x7ffc0000
[   44.504216][   T29] audit: type=1326 audit(1764656768.755:3390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3649 comm="syz.4.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa3573e2005 code=0x7ffc0000
[   44.527487][   T29] audit: type=1326 audit(1764656768.755:3391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3657 comm="syz.0.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5017822005 code=0x7ffc0000
[   44.551283][   T29] audit: type=1326 audit(1764656768.755:3392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3649 comm="syz.4.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa3573e2005 code=0x7ffc0000
[   44.575171][   T29] audit: type=1326 audit(1764656768.755:3393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3657 comm="syz.0.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5017822005 code=0x7ffc0000
[   44.598667][   T29] audit: type=1326 audit(1764656768.755:3394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3649 comm="syz.4.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa3573e2005 code=0x7ffc0000
[   44.622334][   T29] audit: type=1326 audit(1764656768.755:3395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3657 comm="syz.0.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5017822005 code=0x7ffc0000
[   44.700494][ T3676] loop4: detected capacity change from 0 to 512
[   44.716311][ T3676] EXT4-fs (loop4): external journal device major/minor numbers have changed
[   44.725283][ T3676] EXT4-fs (loop4): failed to open journal device unknown-block(8,0) -16
[   44.837412][ T3686] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   44.848779][ T3686] netlink: 28 bytes leftover after parsing attributes in process `syz.2.66'.
[   44.923878][ T3691] siw: device registration error -23
[   44.995389][ T3697] loop1: detected capacity change from 0 to 512
[   45.023850][ T3697] EXT4-fs (loop1): external journal device major/minor numbers have changed
[   45.033515][ T3697] EXT4-fs (loop1): failed to open journal device unknown-block(8,0) -16
[   45.091931][ T3707] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   45.260327][ T3717] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3717 comm=syz.1.75
[   45.273266][ T3717] sch_fq: defrate 6 ignored.
[   45.290932][ T3717] lo speed is unknown, defaulting to 1000
[   45.835975][ T3725] loop4: detected capacity change from 0 to 512
[   45.844803][ T3725] EXT4-fs (loop4): external journal device major/minor numbers have changed
[   45.854075][ T3725] EXT4-fs (loop4): failed to open journal device unknown-block(8,0) -16
[   45.981818][ T3729] netlink: 'syz.1.80': attribute type 6 has an invalid length.
[   46.040681][ T3731] siw: device registration error -23
[   46.052939][   T44] Bluetooth: hci0: command 0x1003 tx timeout
[   46.059407][ T3545] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   46.125498][ T3741] loop3: detected capacity change from 0 to 512
[   46.135952][ T3744] loop1: detected capacity change from 0 to 512
[   46.142550][ T3744] SELinux: security_context_str_to_sid (root) failed with errno=-22
[   46.158999][ T3744] geneve2: entered promiscuous mode
[   46.170357][ T3741] EXT4-fs (loop3): external journal device major/minor numbers have changed
[   46.179835][   T58] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 44211 - 0
[   46.191049][ T3744] __nla_validate_parse: 2 callbacks suppressed
[   46.191067][ T3744] netlink: 16 bytes leftover after parsing attributes in process `syz.1.86'.
[   46.213897][   T58] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 44211 - 0
[   46.222724][   T58] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 44211 - 0
[   46.232371][ T3744] loop1: detected capacity change from 0 to 512
[   46.241556][ T3741] EXT4-fs (loop3): failed to open journal device unknown-block(8,0) -16
[   46.246537][   T58] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 44211 - 0
[   46.306046][ T3756] xt_hashlimit: max too large, truncated to 1048576
[   46.318158][ T3758] netlink: 20 bytes leftover after parsing attributes in process `syz.2.89'.
[   46.323388][ T3744] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.327587][ T3758] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   46.353869][ T3744] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   46.372403][ T3760] loop0: detected capacity change from 0 to 512
[   46.396408][ T3760] EXT4-fs (loop0): external journal device major/minor numbers have changed
[   46.400472][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.405785][ T3760] EXT4-fs (loop0): failed to open journal device unknown-block(8,0) -16
[   46.527602][ T3766] netlink: 8 bytes leftover after parsing attributes in process `gtp'.
[   46.563114][ T3764] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3764 comm=syz.3.91
[   46.575764][ T3764] sch_fq: defrate 6 ignored.
[   46.591852][ T3764] lo speed is unknown, defaulting to 1000
[   46.846748][ T3774] siw: device registration error -23
[   46.899981][ T3787] loop2: detected capacity change from 0 to 512
[   46.907556][ T3787] EXT4-fs (loop2): external journal device major/minor numbers have changed
[   46.917097][ T3787] EXT4-fs (loop2): failed to open journal device unknown-block(8,0) -16
[   47.193829][ T3800] FAULT_INJECTION: forcing a failure.
[   47.193829][ T3800] name failslab, interval 1, probability 0, space 0, times 1
[   47.206545][ T3800] CPU: 0 UID: 0 PID: 3800 Comm: syz.2.103 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   47.206572][ T3800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   47.206584][ T3800] Call Trace:
[   47.206592][ T3800]  <TASK>
[   47.206599][ T3800]  __dump_stack+0x1d/0x30
[   47.206677][ T3800]  dump_stack_lvl+0xe8/0x140
[   47.206749][ T3800]  dump_stack+0x15/0x1b
[   47.206771][ T3800]  should_fail_ex+0x265/0x280
[   47.206797][ T3800]  should_failslab+0x8c/0xb0
[   47.206837][ T3800]  kmem_cache_alloc_node_noprof+0x57/0x4a0
[   47.206947][ T3800]  ? __alloc_skb+0x101/0x320
[   47.207095][ T3800]  __alloc_skb+0x101/0x320
[   47.207141][ T3800]  netlink_alloc_large_skb+0xbf/0xf0
[   47.207185][ T3800]  netlink_sendmsg+0x3cf/0x6b0
[   47.207257][ T3800]  ? __pfx_netlink_sendmsg+0x10/0x10
[   47.207285][ T3800]  __sock_sendmsg+0x145/0x180
[   47.207318][ T3800]  ____sys_sendmsg+0x31e/0x4e0
[   47.207347][ T3800]  ___sys_sendmsg+0x17b/0x1d0
[   47.207389][ T3800]  __x64_sys_sendmsg+0xd4/0x160
[   47.207435][ T3800]  x64_sys_call+0x17ba/0x3000
[   47.207529][ T3800]  do_syscall_64+0xd2/0x200
[   47.207615][ T3800]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   47.207648][ T3800]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   47.207676][ T3800]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   47.207700][ T3800] RIP: 0033:0x7ffb1e17f749
[   47.207722][ T3800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   47.207831][ T3800] RSP: 002b:00007ffb1cbe7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   47.207903][ T3800] RAX: ffffffffffffffda RBX: 00007ffb1e3d5fa0 RCX: 00007ffb1e17f749
[   47.207918][ T3800] RDX: 0000000004000054 RSI: 0000200000000280 RDI: 0000000000000007
[   47.207929][ T3800] RBP: 00007ffb1cbe7090 R08: 0000000000000000 R09: 0000000000000000
[   47.207941][ T3800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   47.207952][ T3800] R13: 00007ffb1e3d6038 R14: 00007ffb1e3d5fa0 R15: 00007ffcee523028
[   47.207970][ T3800]  </TASK>
[   47.227074][ T3802] netlink: 'syz.0.102': attribute type 6 has an invalid length.
[   47.296039][ T3804] netlink: 20 bytes leftover after parsing attributes in process `syz.2.104'.
[   47.302096][ T3805] xt_connbytes: Forcing CT accounting to be enabled
[   47.441837][ T3810] netlink: 20 bytes leftover after parsing attributes in process `syz.3.105'.
[   47.451337][ T3810] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   47.463318][ T3805] Cannot find set identified by id 0 to match
[   47.561386][ T3818] siw: device registration error -23
[   47.586623][ T3822] loop0: detected capacity change from 0 to 512
[   47.603074][ T3822] EXT4-fs (loop0): external journal device major/minor numbers have changed
[   47.614216][ T3822] EXT4-fs (loop0): failed to open journal device unknown-block(8,0) -16
[   47.776803][ T3832] netlink: 40 bytes leftover after parsing attributes in process `syz.4.113'.
[   48.018683][ T3844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3844 comm=syz.4.115
[   48.031266][ T3844] sch_fq: defrate 6 ignored.
[   48.046866][ T3844] lo speed is unknown, defaulting to 1000
[   48.099547][ T3846] FAULT_INJECTION: forcing a failure.
[   48.099547][ T3846] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   48.112889][ T3846] CPU: 1 UID: 0 PID: 3846 Comm: syz.0.117 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   48.112996][ T3846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   48.113008][ T3846] Call Trace:
[   48.113015][ T3846]  <TASK>
[   48.113022][ T3846]  __dump_stack+0x1d/0x30
[   48.113043][ T3846]  dump_stack_lvl+0xe8/0x140
[   48.113080][ T3846]  dump_stack+0x15/0x1b
[   48.113103][ T3846]  should_fail_ex+0x265/0x280
[   48.113129][ T3846]  should_fail+0xb/0x20
[   48.113146][ T3846]  should_fail_usercopy+0x1a/0x20
[   48.113174][ T3846]  _copy_from_iter+0xd2/0xe80
[   48.113224][ T3846]  ? __build_skb_around+0x1ab/0x200
[   48.113273][ T3846]  ? __alloc_skb+0x223/0x320
[   48.113303][ T3846]  netlink_sendmsg+0x471/0x6b0
[   48.113326][ T3846]  ? __pfx_netlink_sendmsg+0x10/0x10
[   48.113346][ T3846]  __sock_sendmsg+0x145/0x180
[   48.113440][ T3846]  ____sys_sendmsg+0x31e/0x4e0
[   48.113471][ T3846]  ___sys_sendmsg+0x17b/0x1d0
[   48.113512][ T3846]  __x64_sys_sendmsg+0xd4/0x160
[   48.113567][ T3846]  x64_sys_call+0x17ba/0x3000
[   48.113657][ T3846]  do_syscall_64+0xd2/0x200
[   48.113737][ T3846]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   48.113762][ T3846]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   48.113781][ T3846] RIP: 0033:0x7f50177ef749
[   48.113795][ T3846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   48.113860][ T3846] RSP: 002b:00007f5016257038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   48.113876][ T3846] RAX: ffffffffffffffda RBX: 00007f5017a45fa0 RCX: 00007f50177ef749
[   48.113887][ T3846] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000b
[   48.113897][ T3846] RBP: 00007f5016257090 R08: 0000000000000000 R09: 0000000000000000
[   48.113908][ T3846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   48.113918][ T3846] R13: 00007f5017a46038 R14: 00007f5017a45fa0 R15: 00007ffd6fae7a38
[   48.113958][ T3846]  </TASK>
[   48.338406][ T3848] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[   48.355501][ T3848] process '+}[@' launched './file0' with NULL argv: empty string added
[   48.432099][ T3854] siw: device registration error -23
[   48.507787][ T3864] netlink: 20 bytes leftover after parsing attributes in process `syz.2.124'.
[   48.517036][ T3864] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   48.571326][ T3866] netlink: 40 bytes leftover after parsing attributes in process `syz.0.125'.
[   48.771279][ T3873] loop0: detected capacity change from 0 to 512
[   48.790656][ T3873] EXT4-fs (loop0): external journal device major/minor numbers have changed
[   48.806869][ T3873] EXT4-fs (loop0): failed to open journal device unknown-block(8,0) -16
[   49.089601][ T3904] netlink: 40 bytes leftover after parsing attributes in process `syz.4.137'.
[   49.189888][ T3912] lo speed is unknown, defaulting to 1000
[   49.243455][ T3912] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   49.346675][ T3921] loop2: detected capacity change from 0 to 512
[   49.383332][ T3921] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   49.392138][ T3921] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   49.413034][   T29] kauditd_printk_skb: 4181 callbacks suppressed
[   49.413051][   T29] audit: type=1326 audit(1764656773.755:7577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3908 comm="syz.3.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29a45f749 code=0x7ffc0000
[   49.448891][   T29] audit: type=1326 audit(1764656773.775:7578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3908 comm="syz.3.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29a45f749 code=0x7ffc0000
[   49.472402][   T29] audit: type=1326 audit(1764656773.785:7579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3908 comm="syz.3.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29a45f749 code=0x7ffc0000
[   49.495794][   T29] audit: type=1326 audit(1764656773.795:7580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3908 comm="syz.3.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa29a492005 code=0x7ffc0000
[   49.519365][   T29] audit: type=1326 audit(1764656773.795:7581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3908 comm="syz.3.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29a45f749 code=0x7ffc0000
[   49.542913][   T29] audit: type=1326 audit(1764656773.795:7582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3908 comm="syz.3.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa29a492005 code=0x7ffc0000
[   49.578922][   T29] audit: type=1326 audit(1764656773.805:7583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3908 comm="syz.3.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29a45f749 code=0x7ffc0000
[   49.602379][   T29] audit: type=1326 audit(1764656773.815:7584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3908 comm="syz.3.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29a45f749 code=0x7ffc0000
[   49.626021][   T29] audit: type=1326 audit(1764656773.825:7585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3908 comm="syz.3.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29a45f749 code=0x7ffc0000
[   49.649503][   T29] audit: type=1326 audit(1764656773.835:7586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3908 comm="syz.3.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29a45f749 code=0x7ffc0000
[   49.726238][ T3921] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.140: Allocating blocks 41-42 which overlap fs metadata
[   49.740702][ T3921] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.140: Allocating blocks 41-42 which overlap fs metadata
[   49.773018][ T3921] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.140: Failed to acquire dquot type 1
[   49.800417][ T3921] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[   49.835335][ T3921] EXT4-fs error (device loop2): ext4_do_update_inode:5628: inode #12: comm syz.2.140: corrupted inode contents
[   49.848962][ T3945] 9pnet_fd: Insufficient options for proto=fd
[   49.868071][ T3921] EXT4-fs error (device loop2): ext4_dirty_inode:6513: inode #12: comm syz.2.140: mark_inode_dirty error
[   49.888983][ T3921] EXT4-fs error (device loop2): ext4_do_update_inode:5628: inode #12: comm syz.2.140: corrupted inode contents
[   49.906128][ T3921] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.140: mark_inode_dirty error
[   49.923307][ T3921] EXT4-fs error (device loop2): ext4_do_update_inode:5628: inode #12: comm syz.2.140: corrupted inode contents
[   49.942009][ T3921] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem
[   49.951012][ T3921] EXT4-fs error (device loop2): ext4_do_update_inode:5628: inode #12: comm syz.2.140: corrupted inode contents
[   49.963370][ T3921] EXT4-fs error (device loop2): ext4_truncate:4633: inode #12: comm syz.2.140: mark_inode_dirty error
[   49.996814][ T3921] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem
[   50.018099][ T3921] EXT4-fs (loop2): 1 truncate cleaned up
[   50.020565][ T3950] netlink: 40 bytes leftover after parsing attributes in process `syz.3.152'.
[   50.024800][ T3921] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.160947][ T3954] loop3: detected capacity change from 0 to 512
[   50.168497][ T3954] EXT4-fs (loop3): external journal device major/minor numbers have changed
[   50.181625][ T3954] EXT4-fs (loop3): failed to open journal device unknown-block(8,0) -16
[   50.414901][ T3970] siw: device registration error -23
[   50.476686][ T3976] siw: device registration error -23
[   50.557614][ T3989] loop0: detected capacity change from 0 to 512
[   50.565031][ T3989] EXT4-fs (loop0): external journal device major/minor numbers have changed
[   50.574477][ T3989] EXT4-fs (loop0): failed to open journal device unknown-block(8,0) -16
[   50.794644][ T4012] siw: device registration error -23
[   50.913741][ T4020] loop3: detected capacity change from 0 to 512
[   50.921468][ T4020] EXT4-fs (loop3): external journal device major/minor numbers have changed
[   50.932106][ T4014] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4014 comm=syz.1.175
[   50.945145][ T4014] sch_fq: defrate 6 ignored.
[   50.947180][ T4020] EXT4-fs (loop3): failed to open journal device unknown-block(8,0) -16
[   50.968781][ T4014] lo speed is unknown, defaulting to 1000
[   50.999808][ T4023] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   51.168647][ T4032] loop3: detected capacity change from 0 to 512
[   51.179590][ T4032] EXT4-fs (loop3): external journal device major/minor numbers have changed
[   51.189155][ T4032] EXT4-fs (loop3): failed to open journal device unknown-block(8,0) -16
[   51.263987][ T4036] __nla_validate_parse: 5 callbacks suppressed
[   51.264003][ T4036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.183'.
[   51.435580][ T4045] FAULT_INJECTION: forcing a failure.
[   51.435580][ T4045] name failslab, interval 1, probability 0, space 0, times 0
[   51.448424][ T4045] CPU: 0 UID: 0 PID: 4045 Comm: syz.4.186 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   51.448465][ T4045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   51.448476][ T4045] Call Trace:
[   51.448482][ T4045]  <TASK>
[   51.448489][ T4045]  __dump_stack+0x1d/0x30
[   51.448509][ T4045]  dump_stack_lvl+0xe8/0x140
[   51.448599][ T4045]  dump_stack+0x15/0x1b
[   51.448614][ T4045]  should_fail_ex+0x265/0x280
[   51.448633][ T4045]  should_failslab+0x8c/0xb0
[   51.448706][ T4045]  __kmalloc_cache_node_noprof+0x54/0x4a0
[   51.448736][ T4045]  ? __get_vm_area_node+0x106/0x1d0
[   51.448764][ T4045]  __get_vm_area_node+0x106/0x1d0
[   51.448846][ T4045]  __vmalloc_node_range_noprof+0x28c/0xed0
[   51.448864][ T4045]  ? bpf_prog_alloc_no_stats+0x47/0x3b0
[   51.448962][ T4045]  ? cred_has_capability+0x210/0x280
[   51.448993][ T4045]  ? bpf_prog_alloc_no_stats+0x47/0x3b0
[   51.449011][ T4045]  __vmalloc_noprof+0x83/0xc0
[   51.449026][ T4045]  ? bpf_prog_alloc_no_stats+0x47/0x3b0
[   51.449047][ T4045]  bpf_prog_alloc_no_stats+0x47/0x3b0
[   51.449090][ T4045]  ? bpf_prog_alloc+0x2a/0x150
[   51.449116][ T4045]  bpf_prog_alloc+0x3c/0x150
[   51.449134][ T4045]  bpf_prog_load+0x506/0x1100
[   51.449162][ T4045]  ? security_bpf+0x2b/0x90
[   51.449209][ T4045]  __sys_bpf+0x469/0x7c0
[   51.449235][ T4045]  __x64_sys_bpf+0x41/0x50
[   51.449250][ T4045]  x64_sys_call+0x28e1/0x3000
[   51.449270][ T4045]  do_syscall_64+0xd2/0x200
[   51.449352][ T4045]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   51.449380][ T4045]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   51.449464][ T4045]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   51.449483][ T4045] RIP: 0033:0x7fa3573af749
[   51.449496][ T4045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   51.449511][ T4045] RSP: 002b:00007fa355e17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   51.449528][ T4045] RAX: ffffffffffffffda RBX: 00007fa357605fa0 RCX: 00007fa3573af749
[   51.449539][ T4045] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005
[   51.449621][ T4045] RBP: 00007fa355e17090 R08: 0000000000000000 R09: 0000000000000000
[   51.449631][ T4045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   51.449642][ T4045] R13: 00007fa357606038 R14: 00007fa357605fa0 R15: 00007ffe629d1e48
[   51.449658][ T4045]  </TASK>
[   51.449666][ T4045] syz.4.186: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null)
[   51.611098][ T4048] loop0: detected capacity change from 0 to 1024
[   51.612926][ T4045] ,cpuset=
[   51.654975][ T4048] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.662855][ T4045] /,mems_allowed=0
[   51.729167][ T4045] CPU: 0 UID: 0 PID: 4045 Comm: syz.4.186 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   51.729275][ T4045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   51.729312][ T4045] Call Trace:
[   51.729319][ T4045]  <TASK>
[   51.729327][ T4045]  __dump_stack+0x1d/0x30
[   51.729355][ T4045]  dump_stack_lvl+0xe8/0x140
[   51.729375][ T4045]  dump_stack+0x15/0x1b
[   51.729392][ T4045]  warn_alloc+0x12b/0x1a0
[   51.729469][ T4045]  __vmalloc_node_range_noprof+0x2b1/0xed0
[   51.729502][ T4045]  ? cred_has_capability+0x210/0x280
[   51.729544][ T4045]  ? bpf_prog_alloc_no_stats+0x47/0x3b0
[   51.729606][ T4045]  __vmalloc_noprof+0x83/0xc0
[   51.729628][ T4045]  ? bpf_prog_alloc_no_stats+0x47/0x3b0
[   51.729655][ T4045]  bpf_prog_alloc_no_stats+0x47/0x3b0
[   51.729745][ T4045]  ? bpf_prog_alloc+0x2a/0x150
[   51.729771][ T4045]  bpf_prog_alloc+0x3c/0x150
[   51.729796][ T4045]  bpf_prog_load+0x506/0x1100
[   51.729828][ T4045]  ? security_bpf+0x2b/0x90
[   51.729944][ T4045]  __sys_bpf+0x469/0x7c0
[   51.729982][ T4045]  __x64_sys_bpf+0x41/0x50
[   51.730078][ T4045]  x64_sys_call+0x28e1/0x3000
[   51.730190][ T4045]  do_syscall_64+0xd2/0x200
[   51.730216][ T4045]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   51.730288][ T4045]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   51.730309][ T4045]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   51.730352][ T4045] RIP: 0033:0x7fa3573af749
[   51.730372][ T4045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   51.730394][ T4045] RSP: 002b:00007fa355e17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   51.730413][ T4045] RAX: ffffffffffffffda RBX: 00007fa357605fa0 RCX: 00007fa3573af749
[   51.730425][ T4045] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005
[   51.730437][ T4045] RBP: 00007fa355e17090 R08: 0000000000000000 R09: 0000000000000000
[   51.730451][ T4045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   51.730501][ T4045] R13: 00007fa357606038 R14: 00007fa357605fa0 R15: 00007ffe629d1e48
[   51.730525][ T4045]  </TASK>
[   51.730718][ T4045] Mem-Info:
[   51.946581][ T4045] active_anon:13094 inactive_anon:0 isolated_anon:0
[   51.946581][ T4045]  active_file:8899 inactive_file:2250 isolated_file:0
[   51.946581][ T4045]  unevictable:0 dirty:1528 writeback:0
[   51.946581][ T4045]  slab_reclaimable:3157 slab_unreclaimable:14688
[   51.946581][ T4045]  mapped:32205 shmem:3260 pagetables:1612
[   51.946581][ T4045]  sec_pagetables:0 bounce:0
[   51.946581][ T4045]  kernel_misc_reclaimable:0
[   51.946581][ T4045]  free:1865911 free_pcp:12211 free_cma:0
[   51.991989][ T4045] Node 0 active_anon:52376kB inactive_anon:0kB active_file:35596kB inactive_file:9000kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:128820kB dirty:6112kB writeback:0kB shmem:13040kB kernel_stack:3712kB pagetables:6448kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   52.019447][ T4045] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   52.049154][ T4045] lowmem_reserve[]: 0 2881 7859 7859
[   52.054598][ T4045] Node 0 DMA32 free:2946596kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950228kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:104kB free_cma:0kB
[   52.065234][ T4053] loop3: detected capacity change from 0 to 512
[   52.085970][ T4045] lowmem_reserve[]: 0 0 4978 4978
[   52.095854][ T4053] EXT4-fs (loop3): external journal device major/minor numbers have changed
[   52.097300][ T4045] Node 0 Normal free:4501456kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44256kB inactive_anon:0kB active_file:35596kB inactive_file:9000kB unevictable:0kB writepending:6112kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:53292kB local_pcp:25324kB free_cma:0kB
[   52.124335][ T4053] EXT4-fs (loop3): failed to open journal device unknown-block(8,0) -16
[   52.139098][ T4045] lowmem_reserve[]: 0 0 0 0
[   52.152095][ T4045] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   52.164812][ T4045] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 2*16kB (M) 1*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946596kB
[   52.181074][ T4045] Node 0 Normal: 1*4kB (M) 10*8kB (UME) 23*16kB (UM) 1*32kB (M) 1*64kB (U) 5*128kB (U) 5*256kB (U) 3*512kB (UE) 4*1024kB (U) 4*2048kB (UME) 1095*4096kB (UM) = 4501412kB
[   52.198288][ T4045] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[   52.207652][ T4045] 14492 total pagecache pages
[   52.212346][ T4045] 0 pages in swap cache
[   52.217712][ T4045] Free swap  = 124996kB
[   52.221883][ T4045] Total swap = 124996kB
[   52.226620][ T4045] 2097051 pages RAM
[   52.230433][ T4045] 0 pages HighMem/MovableOnly
[   52.235149][ T4045] 81094 pages reserved
[   52.244448][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.294559][ T3921] syz.2.140 (3921) used greatest stack depth: 9952 bytes left
[   52.348090][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.363761][ T4058] netlink: 40 bytes leftover after parsing attributes in process `syz.1.191'.
[   52.492072][ T4077] netlink: 20 bytes leftover after parsing attributes in process `syz.2.195'.
[   52.501396][ T4077] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   52.573592][ T4082] lo speed is unknown, defaulting to 1000
[   52.720082][ T4085] FAULT_INJECTION: forcing a failure.
[   52.720082][ T4085] name failslab, interval 1, probability 0, space 0, times 0
[   52.733141][ T4085] CPU: 1 UID: 0 PID: 4085 Comm: syz.1.196 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   52.733170][ T4085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   52.733185][ T4085] Call Trace:
[   52.733191][ T4085]  <TASK>
[   52.733199][ T4085]  __dump_stack+0x1d/0x30
[   52.733228][ T4085]  dump_stack_lvl+0xe8/0x140
[   52.733266][ T4085]  dump_stack+0x15/0x1b
[   52.733320][ T4085]  should_fail_ex+0x265/0x280
[   52.733346][ T4085]  should_failslab+0x8c/0xb0
[   52.733385][ T4085]  __kmalloc_noprof+0xa5/0x570
[   52.733458][ T4085]  ? genl_family_rcv_msg_attrs_parse+0x75/0x190
[   52.733533][ T4085]  genl_family_rcv_msg_attrs_parse+0x75/0x190
[   52.733634][ T4085]  genl_family_rcv_msg_doit+0x48/0x1b0
[   52.733692][ T4085]  ? selinux_capable+0x31/0x40
[   52.733722][ T4085]  ? security_capable+0x83/0x90
[   52.733751][ T4085]  ? ns_capable+0x7d/0xb0
[   52.733786][ T4085]  genl_rcv_msg+0x422/0x460
[   52.733841][ T4085]  ? __pfx_ethnl_set_features+0x10/0x10
[   52.733892][ T4085]  netlink_rcv_skb+0x123/0x220
[   52.733917][ T4085]  ? __pfx_genl_rcv_msg+0x10/0x10
[   52.734045][ T4085]  genl_rcv+0x28/0x40
[   52.734092][ T4085]  netlink_unicast+0x5c0/0x690
[   52.734127][ T4085]  netlink_sendmsg+0x58b/0x6b0
[   52.734150][ T4085]  ? __pfx_netlink_sendmsg+0x10/0x10
[   52.734250][ T4085]  __sock_sendmsg+0x145/0x180
[   52.734279][ T4085]  ____sys_sendmsg+0x31e/0x4e0
[   52.734303][ T4085]  ___sys_sendmsg+0x17b/0x1d0
[   52.734349][ T4085]  __x64_sys_sendmsg+0xd4/0x160
[   52.734380][ T4085]  x64_sys_call+0x17ba/0x3000
[   52.734420][ T4085]  do_syscall_64+0xd2/0x200
[   52.734450][ T4085]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   52.734529][ T4085]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   52.734554][ T4085]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   52.734578][ T4085] RIP: 0033:0x7f822acdf749
[   52.734593][ T4085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   52.734610][ T4085] RSP: 002b:00007f822973f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   52.734689][ T4085] RAX: ffffffffffffffda RBX: 00007f822af35fa0 RCX: 00007f822acdf749
[   52.734703][ T4085] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[   52.734719][ T4085] RBP: 00007f822973f090 R08: 0000000000000000 R09: 0000000000000000
[   52.734734][ T4085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   52.734808][ T4085] R13: 00007f822af36038 R14: 00007f822af35fa0 R15: 00007ffd11a7f7e8
[   52.734827][ T4085]  </TASK>
[   53.214466][ T4104] loop0: detected capacity change from 0 to 512
[   53.221840][ T4104] EXT4-fs (loop0): external journal device major/minor numbers have changed
[   53.232009][ T4104] EXT4-fs (loop0): failed to open journal device unknown-block(8,0) -16
[   53.278146][ T4106] FAULT_INJECTION: forcing a failure.
[   53.278146][ T4106] name failslab, interval 1, probability 0, space 0, times 0
[   53.291197][ T4106] CPU: 0 UID: 0 PID: 4106 Comm: syz.4.201 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   53.291230][ T4106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   53.291246][ T4106] Call Trace:
[   53.291254][ T4106]  <TASK>
[   53.291264][ T4106]  __dump_stack+0x1d/0x30
[   53.291292][ T4106]  dump_stack_lvl+0xe8/0x140
[   53.291319][ T4106]  dump_stack+0x15/0x1b
[   53.291407][ T4106]  should_fail_ex+0x265/0x280
[   53.291513][ T4106]  should_failslab+0x8c/0xb0
[   53.291552][ T4106]  kmem_cache_alloc_node_noprof+0x57/0x4a0
[   53.291590][ T4106]  ? __alloc_skb+0x101/0x320
[   53.291627][ T4106]  __alloc_skb+0x101/0x320
[   53.291682][ T4106]  alloc_skb_with_frags+0x7d/0x470
[   53.291799][ T4106]  ? should_fail_ex+0xdb/0x280
[   53.291902][ T4106]  sock_alloc_send_pskb+0x430/0x4e0
[   53.291938][ T4106]  queue_oob+0x69/0x520
[   53.291963][ T4106]  unix_stream_sendmsg+0xa78/0xb90
[   53.292102][ T4106]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[   53.292147][ T4106]  __sock_sendmsg+0x145/0x180
[   53.292182][ T4106]  ____sys_sendmsg+0x31e/0x4e0
[   53.292212][ T4106]  ___sys_sendmsg+0x17b/0x1d0
[   53.292256][ T4106]  __x64_sys_sendmsg+0xd4/0x160
[   53.292354][ T4106]  x64_sys_call+0x17ba/0x3000
[   53.292382][ T4106]  do_syscall_64+0xd2/0x200
[   53.292411][ T4106]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   53.292447][ T4106]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   53.292503][ T4106]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   53.292528][ T4106] RIP: 0033:0x7fa3573af749
[   53.292546][ T4106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   53.292569][ T4106] RSP: 002b:00007fa355e17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   53.292623][ T4106] RAX: ffffffffffffffda RBX: 00007fa357605fa0 RCX: 00007fa3573af749
[   53.292639][ T4106] RDX: 0000000000020001 RSI: 0000200000000d40 RDI: 0000000000000003
[   53.292654][ T4106] RBP: 00007fa355e17090 R08: 0000000000000000 R09: 0000000000000000
[   53.292669][ T4106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   53.292685][ T4106] R13: 00007fa357606038 R14: 00007fa357605fa0 R15: 00007ffe629d1e48
[   53.292709][ T4106]  </TASK>
[   53.539067][ T4111] loop4: detected capacity change from 0 to 512
[   53.546773][ T4111] EXT4-fs (loop4): external journal device major/minor numbers have changed
[   53.556099][ T4111] EXT4-fs (loop4): failed to open journal device unknown-block(8,0) -16
[   53.664226][ T4112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4112 comm=syz.3.202
[   53.677068][ T4112] sch_fq: defrate 6 ignored.
[   53.691840][ T4112] lo speed is unknown, defaulting to 1000
[   53.743960][ T4120] netlink: 40 bytes leftover after parsing attributes in process `syz.0.206'.
[   53.909362][ T4141] syzkaller0: entered promiscuous mode
[   53.914914][ T4141] syzkaller0: entered allmulticast mode
[   53.980737][ T4149] netlink: 20 bytes leftover after parsing attributes in process `syz.0.216'.
[   54.005243][ T4150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.213'.
[   54.023446][ T4149] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   54.032569][ T4144] netlink: 20 bytes leftover after parsing attributes in process `syz.4.207'.
[   54.193829][ T4157] loop3: detected capacity change from 0 to 512
[   54.201503][ T4157] EXT4-fs (loop3): external journal device major/minor numbers have changed
[   54.216520][ T4157] EXT4-fs (loop3): failed to open journal device unknown-block(8,0) -16
[   54.423144][   T29] kauditd_printk_skb: 1992 callbacks suppressed
[   54.423158][   T29] audit: type=1326 audit(1764656778.775:9575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4152 comm="syz.1.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f822ad12005 code=0x7ffc0000
[   54.453095][   T29] audit: type=1326 audit(1764656778.775:9576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4152 comm="syz.1.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f822acdf749 code=0x7ffc0000
[   54.476537][   T29] audit: type=1326 audit(1764656778.775:9577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4161 comm="syz.4.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa3573e2005 code=0x7ffc0000
[   54.500099][   T29] audit: type=1326 audit(1764656778.775:9578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4161 comm="syz.4.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa3573e2005 code=0x7ffc0000
[   54.523502][   T29] audit: type=1326 audit(1764656778.775:9579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4161 comm="syz.4.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa3573e2005 code=0x7ffc0000
[   54.546979][   T29] audit: type=1326 audit(1764656778.775:9580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4161 comm="syz.4.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa3573e2005 code=0x7ffc0000
[   54.570392][   T29] audit: type=1326 audit(1764656778.775:9581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4161 comm="syz.4.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa3573e2005 code=0x7ffc0000
[   54.593882][   T29] audit: type=1326 audit(1764656778.785:9582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4161 comm="syz.4.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fa3573af749 code=0x7ffc0000
[   54.617269][   T29] audit: type=1326 audit(1764656778.785:9583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4161 comm="syz.4.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa3573e2005 code=0x7ffc0000
[   54.640659][   T29] audit: type=1326 audit(1764656778.785:9584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4161 comm="syz.4.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa3573e2005 code=0x7ffc0000
[   54.781914][ T4175] netlink: 40 bytes leftover after parsing attributes in process `syz.0.224'.
[   54.795330][ T4173] loop3: detected capacity change from 0 to 512
[   54.813178][ T4173] EXT4-fs: Ignoring removed i_version option
[   54.819260][ T4173] EXT4-fs: Ignoring removed bh option
[   54.838092][ T4173] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.854946][ T4173] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   54.888216][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.957102][ T4190] loop2: detected capacity change from 0 to 512
[   54.966966][ T4190] EXT4-fs (loop2): external journal device major/minor numbers have changed
[   54.976759][ T4190] EXT4-fs (loop2): failed to open journal device unknown-block(8,0) -16
[   55.056371][ T4199] netlink: 20 bytes leftover after parsing attributes in process `syz.3.231'.
[   55.067363][ T4199] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   55.120140][ T4192] netlink: 24 bytes leftover after parsing attributes in process `syz.1.229'.
[   55.129075][ T4204] loop0: detected capacity change from 0 to 512
[   55.142006][ T4204] EXT4-fs (loop0): external journal device major/minor numbers have changed
[   55.155990][ T4204] EXT4-fs (loop0): failed to open journal device unknown-block(8,0) -16
[   55.205890][ T4205] lo speed is unknown, defaulting to 1000
[   55.478845][ T4235] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   55.488075][ T4237] FAULT_INJECTION: forcing a failure.
[   55.488075][ T4237] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   55.501342][ T4237] CPU: 0 UID: 0 PID: 4237 Comm: syz.3.244 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   55.501433][ T4237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   55.501446][ T4237] Call Trace:
[   55.501453][ T4237]  <TASK>
[   55.501462][ T4237]  __dump_stack+0x1d/0x30
[   55.501491][ T4237]  dump_stack_lvl+0xe8/0x140
[   55.501518][ T4237]  dump_stack+0x15/0x1b
[   55.501539][ T4237]  should_fail_ex+0x265/0x280
[   55.501611][ T4237]  should_fail+0xb/0x20
[   55.501635][ T4237]  should_fail_usercopy+0x1a/0x20
[   55.501665][ T4237]  _copy_to_user+0x20/0xa0
[   55.501702][ T4237]  simple_read_from_buffer+0xb5/0x130
[   55.501772][ T4237]  proc_fail_nth_read+0x10e/0x150
[   55.501875][ T4237]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   55.502003][ T4237]  vfs_read+0x1a8/0x770
[   55.502034][ T4237]  ? __rcu_read_unlock+0x4f/0x70
[   55.502096][ T4237]  ? __fget_files+0x184/0x1c0
[   55.502138][ T4237]  ksys_read+0xda/0x1a0
[   55.502174][ T4237]  __x64_sys_read+0x40/0x50
[   55.502226][ T4237]  x64_sys_call+0x2889/0x3000
[   55.502254][ T4237]  do_syscall_64+0xd2/0x200
[   55.502276][ T4237]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   55.502311][ T4237]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   55.502395][ T4237]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   55.502431][ T4237] RIP: 0033:0x7fa29a45e15c
[   55.502451][ T4237] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   55.502470][ T4237] RSP: 002b:00007fa298ebf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   55.502540][ T4237] RAX: ffffffffffffffda RBX: 00007fa29a6b5fa0 RCX: 00007fa29a45e15c
[   55.502557][ T4237] RDX: 000000000000000f RSI: 00007fa298ebf0a0 RDI: 0000000000000007
[   55.502622][ T4237] RBP: 00007fa298ebf090 R08: 0000000000000000 R09: 0000000000000000
[   55.502634][ T4237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   55.502649][ T4237] R13: 00007fa29a6b6038 R14: 00007fa29a6b5fa0 R15: 00007fffd3186248
[   55.502674][ T4237]  </TASK>
[   55.773698][ T4247] loop0: detected capacity change from 0 to 512
[   55.781378][ T4247] EXT4-fs (loop0): external journal device major/minor numbers have changed
[   55.791038][ T4247] EXT4-fs (loop0): failed to open journal device unknown-block(8,0) -16
[   55.872868][ T4251] ==================================================================
[   55.881015][ T4251] BUG: KCSAN: data-race in fifo_open / wait_for_partner
[   55.888006][ T4251] 
[   55.890333][ T4251] read-write to 0xffff88812062b7ec of 4 bytes by task 4249 on cpu 1:
[   55.898482][ T4251]  fifo_open+0x59f/0x5d0
[   55.902842][ T4251]  do_dentry_open+0x530/0xa40
[   55.907518][ T4251]  vfs_open+0x37/0x1e0
[   55.911605][ T4251]  path_openat+0x1d76/0x2280
[   55.916202][ T4251]  do_file_open_root+0x1d0/0x400
[   55.921147][ T4251]  file_open_root+0xfd/0x130
[   55.925745][ T4251]  do_handle_open+0x65f/0x6f0
[   55.930460][ T4251]  __x64_sys_open_by_handle_at+0x44/0x50
[   55.936117][ T4251]  x64_sys_call+0x2b6a/0x3000
[   55.940823][ T4251]  do_syscall_64+0xd2/0x200
[   55.945340][ T4251]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   55.951250][ T4251] 
[   55.953572][ T4251] read to 0xffff88812062b7ec of 4 bytes by task 4251 on cpu 0:
[   55.961111][ T4251]  wait_for_partner+0xb5/0x1c0
[   55.965889][ T4251]  fifo_open+0x4b1/0x5d0
[   55.970146][ T4251]  do_dentry_open+0x530/0xa40
[   55.974847][ T4251]  vfs_open+0x37/0x1e0
[   55.978924][ T4251]  path_openat+0x1d76/0x2280
[   55.983524][ T4251]  do_filp_open+0x109/0x230
[   55.988126][ T4251]  do_sys_openat2+0xa6/0x110
[   55.992802][ T4251]  __x64_sys_creat+0x65/0x90
[   55.997415][ T4251]  x64_sys_call+0x2f1c/0x3000
[   56.002116][ T4251]  do_syscall_64+0xd2/0x200
[   56.006636][ T4251]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.012535][ T4251] 
[   56.014856][ T4251] value changed: 0x00000001 -> 0x00000002
[   56.020568][ T4251] 
[   56.022889][ T4251] Reported by Kernel Concurrency Sanitizer on:
[   56.029055][ T4251] CPU: 0 UID: 0 PID: 4251 Comm: syz.3.257 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   56.038703][ T4251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   56.048775][ T4251] ==================================================================