last executing test programs:

5.492017153s ago: executing program 2 (id=240):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00'], 0x30}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20280, 0x0)
ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000080)=0x14)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
semtimedop(0x0, &(0x7f00000003c0), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f00000002c0), 0x6, 0x20a800)
r2 = mq_open(0x0, 0x42, 0x1f0, 0x0)
syz_open_dev$usbfs(&(0x7f00000004c0), 0x8000000000000001, 0x80)
timerfd_create(0x8, 0x0)
r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain)
keyctl$restrict_keyring(0x1d, r3, 0x0, 0x0)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r3)
mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0}}, 0x10)
sendmsg$nl_route_sched(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=@newtclass={0x5c, 0x28, 0x4, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x3, 0x2}, {0xffe1, 0x6}, {0x7, 0xc}}, [@TCA_RATE={0x6, 0x5, {0xfe, 0x8}}, @tclass_kind_options=@c_tbf={0x8}, @TCA_RATE={0x6, 0x5, {0x8, 0x2c}}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x8, 0x3}}, @TCA_RATE={0x6, 0x5, {0x8, 0x5}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200040c0}, 0x4000004)
r6 = socket(0x10, 0x3, 0x9)
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x7fffffffffffffff)

4.42523916s ago: executing program 2 (id=251):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x8, 0x1}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
r4 = inotify_init1(0x0)
inotify_add_watch(r4, &(0x7f00000000c0)='.\x00', 0xa4000061)
read(r4, &(0x7f0000000140)=""/68, 0x44)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r6 = socket$phonet_pipe(0x23, 0x5, 0x2)
splice(r1, 0x0, r5, 0x0, 0x9, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r7, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
shutdown(r7, 0x0)
setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8)
sendto$inet6(r7, &(0x7f0000000100)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0x1}, 0x1c)
close(r7)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x7d, 0x4)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r6, 0x8982, &(0x7f0000000000))
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def", 0xe8}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf81ec1e", 0xe8}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a65901b", 0x39}, {0x0}], 0x5}}], 0x1, 0xc0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r1, &(0x7f0000000580)="17", 0x1, 0x10008095, 0x0, 0x0)

4.328362381s ago: executing program 2 (id=253):
perf_event_open(&(0x7f0000000140)={0x2, 0xffffffffffffff8e, 0x37, 0x1, 0x0, 0x0, 0x0, 0x807, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x4c58, 0x200, 0x0, 0x2, 0x6, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x20000000000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='name', &(0x7f00000000c0)='\x00\x1f\"\f\x00\x00\"\x00\x04\x00\x00', 0x0)
readv(r0, 0x0, 0x0)
write$nci(0xffffffffffffffff, &(0x7f0000001680)=ANY=[@ANYBLOB], 0x95)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000530464"], 0x14}, 0x1, 0x0, 0x0, 0x24000841}, 0x4008840)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b165"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0xa)
unlinkat(0xffffffffffffffff, 0x0, 0x200)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='kmem_cache_free\x00', r2, 0x0, 0x3}, 0x18)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000001740))
ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000200))
socket$can_bcm(0x1d, 0x2, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080))
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0)
ioctl$EVIOCGABS20(r6, 0x40044591, 0x0)
setsockopt(0xffffffffffffffff, 0x8, 0x7, &(0x7f00000002c0)="5275cafea1bc4766be70c16be9db7e81893147de103dbce29527c258a137a367e61e1a65f45a4e424b0c3a496ba1d16cec4d4137992e51d856e176782fe2b90039ed13900ba36ce4b8cce9f0d7cb276951dff28fe1b9a47b0d59cd3bbea1cea19d65d0263db3836a4b6f4a694a5fd82a4c706b79014aceedd42ff5f02aa1f36a2af0a5aeb8dd7bd38ceb57052f34644e4210027be6d141c65b5cb3bf6f730fd4b89b228103c3f8dc7fbd2eeb31", 0xad)
sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000004)

4.011180257s ago: executing program 2 (id=256):
syz_io_uring_setup(0x2cdb, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r0=>0x0, 0x0)
syz_io_uring_submit(r0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x1a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1})
mount$9p_unix(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000280), 0x808008, &(0x7f00000004c0)=ANY=[@ANYBLOB='trqyans=unix'])
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000680)=0x2)
ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d)
clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe)
r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14)
fcntl$setsig(r6, 0xa, 0x13)
fcntl$setlease(r6, 0x400, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, &(0x7f00000002c0)=""/121, 0x0, 0x79, 0x0, 0x20000}, 0x28)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="500100001000130428bd700000000000e0000001000000000000000000000000ac1e0101000000000000000000000000000000004e2400000200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x150}}, 0x804)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)

3.071971921s ago: executing program 2 (id=265):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000c00)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1, @ANYRESOCT=r1], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@keyring={'key_or_keyring:', r3})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xf1, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r5}, 0x10)
keyctl$KEYCTL_MOVE(0x1e, r2, 0xffffffffffffffff, r3, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r6=>0x0}, 0x0)
socket$packet(0x11, 0x2, 0x300)
r7 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r7, &(0x7f0000000100)={0x11, 0x4}, 0x14)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
chown(&(0x7f0000000100)='./file0\x00', 0x0, r6)
statx(0xffffffffffffffff, 0x0, 0x1000, 0x80, &(0x7f0000000600))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = getpid()
r9 = syz_pidfd_open(r8, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
setns(r9, 0x24020000)

2.893802354s ago: executing program 2 (id=268):
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r3)
syz_usb_connect(0x4, 0x24, &(0x7f0000000480)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r3, 0x40095505, 0x0)
io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0)
pause()
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x2e, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0x4, 0x4}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xb, 0xf, 0x3, 0x2, 0x7ae, 0x9, 0xb11, 0x65, [{0x7fff, 0x401, 0x5, 0x6}, {0x0, 0xe1, 0x7, 0xfffffffd}, {0x3ff, 0xa, 0x76800, 0xd}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0x3}}]}}]}, 0x7c}}, 0x20040054)
unshare(0x20000400)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r9, r7, 0x4, r8}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
socket$nl_generic(0x10, 0x3, 0x10)

2.749727717s ago: executing program 1 (id=270):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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")
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000a00)=<r2=>0x0)
r3 = getpgid(0xffffffffffffffff)
r4 = getpid()
syz_clone3(&(0x7f0000000a80)={0x200, &(0x7f0000000100), &(0x7f0000000440), &(0x7f0000000480), {0x3}, &(0x7f0000000940)=""/32, 0x20, &(0x7f0000000980)=""/19, &(0x7f0000000a40)=[0x0, r2, 0x0, r3, r4, 0x0], 0x6, {r1}}, 0x58)
unlinkat(r1, &(0x7f0000000280)='./file0\x00', 0x200)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f0000000140)=0xa84, 0x4)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@test_dummy_encryption_v1}, {@resgid}]}, 0x1, 0x44b, &(0x7f00000004c0)="$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")
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000008"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10)
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
chdir(&(0x7f0000000000)='./file0\x00')
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000b40)='./file0/file0\x00', 0x0, &(0x7f0000001540)={[{@errors_remount}, {@errors_continue}, {@dioread_nolock}, {@user_xattr}, {@errors_continue}, {@minixdf}, {@dioread_nolock}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@euid_eq}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@fowner_lt}]}, 0x1, 0x573, &(0x7f0000000ec0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffffff, &(0x7f00000005c0)='./file3\x00', 0x4)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8442, 0x5c)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a0500000000000000000002000000"], 0x64}, 0x1, 0x0, 0x0, 0x20048801}, 0x10)

2.320038613s ago: executing program 1 (id=275):
socket$inet6(0xa, 0x80002, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0xc010)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400251}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r2, 0x0, 0x0, 0x0, 0x2})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
bpf$MAP_CREATE(0x0, 0x0, 0x48)
io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x1d)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc000000000000", @ANYRES32=0x0], 0x48)

2.263034284s ago: executing program 1 (id=277):
r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18)
io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r2})
r3 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18)
close(r3)
mq_timedsend(r0, 0x0, 0x0, 0xab, 0x0)
r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x9204}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r7, 0x0, 0x8}, 0x18)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
setresuid(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280))
mq_timedreceive(r0, &(0x7f0000000880)=""/202, 0x8f, 0x200000000004, 0x0)

1.91000332s ago: executing program 4 (id=281):
socket$caif_stream(0x25, 0x1, 0x5)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e0000008500000050"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]})
keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r1, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01')
r2 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
pipe(&(0x7f00000008c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r4, 0x0, 0xa, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$P9_RWRITE(r4, &(0x7f0000000040)={0xb, 0x77, 0x87}, 0x10c00)

1.563019325s ago: executing program 0 (id=288):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000280), &(0x7f0000000080)=r1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r2, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
accept(r2, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100", @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa2000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000003, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0x12, 0x60d, 0x1d8, 0x202, 0x2d0, 0x2e8, 0x2e8, 0x2d0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @mcast1, [0x0, 0x0, 0xc0], [0x0, 0xff000000], 'veth1_to_batadv\x00', 'macsec0\x00'}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {'Yv'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400)
socket$can_bcm(0x1d, 0x2, 0x2)

1.403634498s ago: executing program 1 (id=291):
socket$packet(0x11, 0x3, 0x300)
socket$netlink(0x10, 0x3, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {0x0}], 0x2, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xad, 0xde}, 0x12100, 0x2b, 0xf, 0x9, 0x31, 0x9, 0xfffe, 0x0, 0x2, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0xd)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000e40)='net/raw6\x00')
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x40000000000004)
r4 = gettid()
timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
readv(r5, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/40, 0x54}], 0x1)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18)
r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendto$llc(r6, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x9, 0x1, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x200000000000000)

1.381135768s ago: executing program 3 (id=292):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000c00)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1, @ANYRESOCT=r1], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@keyring={'key_or_keyring:', r2})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xf1, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, r2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r5=>0x0}, 0x0)
socket$packet(0x11, 0x2, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r6, &(0x7f0000000100)={0x11, 0x4}, 0x14)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
chown(&(0x7f0000000100)='./file0\x00', 0x0, r5)
statx(0xffffffffffffffff, 0x0, 0x1000, 0x80, &(0x7f0000000600))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = getpid()
r8 = syz_pidfd_open(r7, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
setns(r8, 0x24020000)

1.28682549s ago: executing program 3 (id=293):
perf_event_open(&(0x7f0000000140)={0x2, 0xffffffffffffff8e, 0x37, 0x1, 0x0, 0x0, 0x0, 0x807, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x4c58, 0x200, 0x0, 0x2, 0x6, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x20000000000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='name', &(0x7f00000000c0)='\x00\x1f\"\f\x00\x00\"\x00\x04\x00\x00', 0x0)
readv(r0, 0x0, 0x0)
write$nci(0xffffffffffffffff, &(0x7f0000001680)=ANY=[@ANYBLOB], 0x95)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000530464"], 0x14}, 0x1, 0x0, 0x0, 0x24000841}, 0x4008840)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b165"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0xa)
unlinkat(0xffffffffffffffff, 0x0, 0x200)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='kmem_cache_free\x00', r2, 0x0, 0x3}, 0x18)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000001740))
ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000200))
socket$can_bcm(0x1d, 0x2, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080))
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0)
ioctl$EVIOCGABS20(r6, 0x40044591, 0x0)
setsockopt(0xffffffffffffffff, 0x8, 0x7, &(0x7f00000002c0)="5275cafea1bc4766be70c16be9db7e81893147de103dbce29527c258a137a367e61e1a65f45a4e424b0c3a496ba1d16cec4d4137992e51d856e176782fe2b90039ed13900ba36ce4b8cce9f0d7cb276951dff28fe1b9a47b0d59cd3bbea1cea19d65d0263db3836a4b6f4a694a5fd82a4c706b79014aceedd42ff5f02aa1f36a2af0a5aeb8dd7bd38ceb57052f34644e4210027be6d141c65b5cb3bf6f730fd4b89b228103c3f8dc7fbd2eeb31", 0xad)
sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000004)

1.24039497s ago: executing program 1 (id=294):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44041}, 0x40040)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x202, 0x30000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10003, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0xfff}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x3ff)
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)

1.144703702s ago: executing program 3 (id=295):
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a000000020000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0x5, &(0x7f0000000440)=ANY=[], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000040)='%pI4   \x00'}, 0x2a)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000180)=[{0x2, 0x1, 0x6, 0xa}]})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r4}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r5 = socket(0x10, 0x3, 0x6)
r6 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040))
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20000000)

1.071845843s ago: executing program 3 (id=296):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @link_local}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r3, 0x0, 0xffffffffffffffff}, 0x18)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newtaction={0x88c, 0x30, 0xffff, 0x3, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x54, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x22, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x27ffdbfc, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xeeb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x100000]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x20000000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x5, 0x2, 0x0, 0x8000, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x800, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb52, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xf9, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x100]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x0, 0x0, 0xfffffffe, {0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x3}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x88c}}, 0x0)
sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="800000001300024228bd7000fbdbdf25150301004e244e240004000004000000ff000000ff01000024780000010000000100000002000000", @ANYRES32=r1, @ANYBLOB="0500000008000000100000000000000033000100cbbb282a2c5308df2b7b73a0e834c71b1c6d10ce246cdceb5f64bea4d88daf128dbea53814de3ae92126d05be827b800"], 0x80}, 0x1, 0x0, 0x0, 0x200080c0}, 0x40014)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000c3000040000000009500"], 0x0, 0x5, 0xd2, &(0x7f0000000080)=""/210}, 0x94)
r5 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000080), &(0x7f0000000180)=0x4)
r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
r7 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r7, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
r8 = syz_io_uring_setup(0x497, &(0x7f0000000a40)={0x0, 0x4661, 0x800, 0x3, 0x20e}, &(0x7f0000000540)=<r9=>0x0, &(0x7f0000000680)=<r10=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
socket$inet6(0xa, 0x4, 0x8)
syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r7, 0x0, 0x0})
io_uring_enter(r8, 0x40f9, 0x217, 0xa5, 0x0, 0x0)
close_range(r6, r7, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e00000005000000bfef00000180e50000000100", @ANYRES32, @ANYBLOB="8100"/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="0000000002000000000000000500"/28], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r11, <r12=>0xffffffffffffffff}, 0x4)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r12, 0x0, 0x0}, 0x20)
r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
fadvise64(r13, 0x0, 0x100000001, 0x3)
r14 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r14, 0x1, 0x1, &(0x7f0000000080)=0x4, 0x4)
setsockopt$IPT_SO_SET_REPLACE(r14, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x318, 0x178, 0x178, 0x318, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x410)

942.738945ms ago: executing program 4 (id=297):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xa8}, 0x18)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0)
pwritev(r2, 0x0, 0x0, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4da8812553089be9923000"/70], 0x4c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000380)={[{@nogrpid}, {@resuid={'resuid', 0x3d, 0xee01}}, {@resgid}, {@nomblk_io_submit}, {@nombcache}, {@resgid={'resgid', 0x3d, 0xee00}}]}, 0x1, 0x42f, &(0x7f0000000940)="$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")
r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0xfffffe8d)
setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000000000)=0x6, 0x4)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb030018"], &(0x7f0000000240)=""/194, 0x40, 0xc2, 0xa}, 0x28)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5)
sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000180)="04", 0x1}, {0x0}], 0x2, 0x6)
sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1b}, 0x94)
r8 = syz_io_uring_setup(0x543, &(0x7f0000000440)={0x0, 0x807734, 0x400, 0xfffffff8, 0xfe}, &(0x7f00000000c0)=<r9=>0x0, &(0x7f00000002c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
io_uring_enter(r8, 0x47bc, 0x0, 0x0, 0x0, 0x0)
ftruncate(r4, 0x2007ffc)

920.597446ms ago: executing program 3 (id=298):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
shmget$private(0x0, 0x0, 0x0, &(0x7f0000b39000/0x3000)=nil)
r4 = syz_open_procfs(0x0, 0x0)
preadv(r4, 0x0, 0x0, 0x141, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
mount_setattr(0xffffffffffffffff, 0x0, 0x8000, &(0x7f00000000c0)={0x1, 0x89}, 0x20)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000000)={0x6, 'gretap0\x00', {0xee5a}, 0x7})
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'gre0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xffff8001}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0)
fcntl$setlease(r0, 0x400, 0x0)

738.948499ms ago: executing program 4 (id=299):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000c00)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1, @ANYRESOCT=r1], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@keyring={'key_or_keyring:', r2})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xf1, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, r2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r5=>0x0}, 0x0)
socket$packet(0x11, 0x2, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r6, &(0x7f0000000100)={0x11, 0x4}, 0x14)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
chown(&(0x7f0000000100)='./file0\x00', 0x0, r5)
statx(0xffffffffffffffff, 0x0, 0x1000, 0x80, &(0x7f0000000600))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = getpid()
r8 = syz_pidfd_open(r7, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
setns(r8, 0x24020000)

672.93453ms ago: executing program 0 (id=300):
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0)
unlinkat(0xffffffffffffffff, 0x0, 0x200)
bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
msgctl$IPC_SET(0x0, 0x1, &(0x7f00000003c0)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x400000000000})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_setup(0x239f, &(0x7f0000000380)=<r4=>0x0)
eventfd2(0x5, 0x1)
io_submit(r4, 0x2, &(0x7f00000000c0)=[0x0, 0x0])
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r8, {0xfff1, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0xc43}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x12032}]}}]}, 0x4c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0x7, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYRES8=r3], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

622.01543ms ago: executing program 0 (id=301):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20000, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$igmp(0x2, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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")
r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000005c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)='V', 0x1}], 0x1, 0x0, 0x0, 0x8010}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x28, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r4, &(0x7f0000000300), 0x0}, 0x20)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f00000000c0)=0x2, 0x4)
ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x159d0682f53ea167, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r5, 0x0, 0x6}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000001480)=ANY=[@ANYBLOB="1800000002200000000000000000080071107e000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="000202"], 0x18)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b000100", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r7, <r8=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10)
pipe2$9p(&(0x7f00000001c0), 0x0)
socket(0x10, 0x3, 0x0)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x617eceaf6a27851)

596.369601ms ago: executing program 4 (id=302):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000c00)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1, @ANYRESOCT=r1], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@keyring={'key_or_keyring:', r3})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
keyctl$KEYCTL_MOVE(0x1e, r2, 0xffffffffffffffff, r3, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r5=>0x0}, 0x0)
socket$packet(0x11, 0x2, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r6, &(0x7f0000000100)={0x11, 0x4}, 0x14)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
chown(&(0x7f0000000100)='./file0\x00', 0x0, r5)
statx(0xffffffffffffffff, 0x0, 0x1000, 0x80, &(0x7f0000000600))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = getpid()
r8 = syz_pidfd_open(r7, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
setns(r8, 0x24020000)

471.061732ms ago: executing program 4 (id=303):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000c00)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1, @ANYRESOCT=r1], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@keyring={'key_or_keyring:', r2})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xf1, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, r2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r5=>0x0}, 0x0)
socket$packet(0x11, 0x2, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r6, &(0x7f0000000100)={0x11, 0x4}, 0x14)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
chown(&(0x7f0000000100)='./file0\x00', 0x0, r5)
statx(0xffffffffffffffff, 0x0, 0x1000, 0x80, &(0x7f0000000600))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = getpid()
r8 = syz_pidfd_open(r7, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
setns(r8, 0x24020000)

469.845893ms ago: executing program 0 (id=304):
unshare(0x66000080)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
unshare(0x20000600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0)
r6 = socket$inet(0x2, 0x5, 0x0)
setsockopt$inet_opts(r6, 0x0, 0x4, 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r7, 0x402, 0x4)
openat(r7, 0x0, 0x40000, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="1f", 0x1, 0xfecc)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
write$sndseq(r8, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00'}, 0x18)
syz_clone3(&(0x7f0000000600)={0x4040680, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0x0], 0x1}, 0x58)

352.203384ms ago: executing program 1 (id=305):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
r2 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000100)=0x5, 0x4)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380)={<r3=>0xffffffffffffffff}, 0x2, 0x5}}, 0x20)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000)
mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xf000, 0x3, &(0x7f0000009000/0xf000)=nil)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000680)=ANY=[@ANYBLOB="400000001000030500000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15460100ef0000001800128008000100677470000c00028008000200", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="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"], 0x40}}, 0x0)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x0)
mlock2(&(0x7f0000009000/0x4000)=nil, 0x4000, 0x0)
syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0)
write$P9_RREADDIR(r10, &(0x7f0000000640)={0xb, 0x29, 0x2, {0xf}}, 0xfffffc95)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000"], 0x48)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @loopback, 0xfffffffc}, r3, 0x400}}, 0x48)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000d40)={0x16, 0x98, 0xfa00, {0x0, 0x2, r3, 0x30, 0x1, @ib={0x1b, 0x8000, 0xfff, {"3f8c0d6cf777eaa6ace6d3ec00ed4771"}, 0x500e, 0x0, 0x5}}}, 0xa0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)

351.271254ms ago: executing program 4 (id=306):
prctl$PR_SET_NAME(0xf, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x10, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x8, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f0000001600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@quota}, {@resuid}, {@lazytime}, {@noblock_validity}, {@usrquota}]}, 0x1, 0x443, &(0x7f0000001040)="$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")
shmget$private(0x0, 0x2000, 0xc0, &(0x7f0000ffc000/0x2000)=nil)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x521, &(0x7f0000000e00)="$eJzs3c9vI1cdAPDvTOJNdjfFKSBUKlEqWpStYO2koW2EEJQLnCoB5R5C4kRR7DiKnbKJKpqKvwCEBBInTlyQ+AOQUA/8AahSJbggDggQCMEWDkhAB409hl3HTkKbtbPx5yO9+L359X1vLD/PjF9mAphYT0bEixExFRHPRES5mJ4WaTUvHHeXe/vuq+t5SiLLXv5LEkkxrbetvDwdETe7q8RsRHzlixFfT07GbR0e7azV67X9olxtN/aqrcOj29uNta3aVm13eXnp+ZUXVp5bWcwK76md873Mj77w2Z998hu/Xf3TrW/m1frMh6IUfe24SN2mlzr7oiffR/sPItgYTBXtKY27IgAAnEt+jP/+iPhY5/i/HFOdo7k+U+OoGQAAAHBRss/Nxb+SiAwAAAC4stKImIskrRRjAeYiTa8V1wY+GDfSerPV/sRm82B3I58XMR+ldHO7XlssxgrPRynJy0vFGNte+dm+8nJEPBoR3y1f75Qr6836xpivfQAAAMCkuNl3/v/3cpqm51pzwP8JAAAAAJfX/NACAAAAcFU45QcAAICrr//83/3+AQAA4Er50ksv5SnrPf9645XDg53mK7c3aq2dSuNgvbLe3N+rbDWbW5179jXO2l692dz7VOwe3Km2a612tXV4tNpoHuy2V7fvewQ2AAAAMEKPfvSNXyURcfzp650UxX0AAe7z+3FXALhIhvrB5HIXb5hcpXFXABi75Iz5Bu8AAMDDb+HDJ3//7z3/37UBuNqM9QGAyeP3f5hcJSMAYWJNF9cA3tctzgxbbujv/784b6Qsi3izfO8U1xcBAGC05jopSSvFecBcpGmlEvFIRDofpWRzu15bLM4PflkuzeTlpc6ayZljhgEAAAAAAAAAAAAAAAAAAAAAAACArixLIgMAAACutIj0j0nnbv4RC+Wn5/qvD1xL/lGOPxSFH7z8vTtr7fb+Uj79r51neV2LiPb3i+nPDn18GAAAAHDRkuOhs7rn6cXr0khrBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAEePvuq+u9NMq4f/58RMwPij8ds53X2ShFxI2/JTF9z3pJRExdQPzj1yPisUHxk3gny16LohaD4l9/wPHnO7tmcPw0Im5eQHyYZG/k/c+Lgz5/aTzZeR38+Zsu0ns1vP9Li8iPdfq5Qf3PIye21hgY4/G3flLt5kon478e8fj04P6n1/8mQ+I/dWJr/8yy7GT8r3316GhY+7MfRiwM/P5J7otVbTf2qq3Do9vbjbWt2lZtd3l56fmVF1aeW1msbm7Xa8XfgTG+85GfvjMsft7+GwPi/+bX3f73tPY/PWyjff791p27H+hmT7wBefxbTw38/p2NIfHT4rvv40U+n7/Qyx938/d64sdvPnFa+zeG7P+z3v9b52z/M1/+1u/OuSgAMAKtw6OdtXq9tn9KZvYcyzyMmZ/PXopq/J+Z7LXuO3dZ6vNuM/nR6rf/24peqy5BxdbqM71MNpKgM53j+fOudW1EO2Gs3RIAAPAA/O+gf9w1AQAAAAAAAAAAAAAAAAAAgMk1inuq9cc8Hk9TAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABO9Z8AAAD//xNp24c=")
quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000006c0)={0x5, 0x2, 0x1, 0x4})
r2 = fspick(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r7}, &(0x7f0000000240), &(0x7f0000000300)=r8}, 0x20)
write$cgroup_int(r6, &(0x7f0000000000)=0xfe8e, 0x12)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)

271.643985ms ago: executing program 0 (id=307):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000029530f49befe20dd7397f7333b13a0a5afc0197aa26a9d0680004dc0f03824f432ab6e765c4a4b3c1402285e50c4af9932f8918ddceec845a76fedbf333a30bb6165e31cfcfe2bc7815e13dac8f94411a0980a5f097598c9713549407682efa8f05ef2f088b00f4910a0becdeb9e438ede2883a10ad0648ee262f8eaf09d71fb229d686181337506913ff4d672cf19", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
socket$packet(0x11, 0x3, 0x300)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f0000000080))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
socket$rxrpc(0x21, 0x2, 0xa)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {0xffe0}, {0x0, 0xfff3}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00'}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="1ba0", 0x2, 0x0, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
sendfile(r5, r6, 0x0, 0x1000004)

45.946509ms ago: executing program 0 (id=308):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000c00)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES32=r0, @ANYRESOCT=r0], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@keyring={'key_or_keyring:', r2})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xf1, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, r2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r5=>0x0}, 0x0)
socket$packet(0x11, 0x2, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r6, &(0x7f0000000100)={0x11, 0x4}, 0x14)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
chown(&(0x7f0000000100)='./file0\x00', 0x0, r5)
statx(0xffffffffffffffff, 0x0, 0x1000, 0x80, &(0x7f0000000600))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = getpid()
r8 = syz_pidfd_open(r7, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
setns(r8, 0x24020000)

0s ago: executing program 3 (id=309):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382)
r1 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0xfffffffd, 0x10100, 0x200, 0x152}, &(0x7f0000000100)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27})
io_uring_enter(r1, 0x567, 0x1000a387, 0x0, 0x0, 0x0)
r4 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
add_key$keyring(&(0x7f0000000180), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
bind$inet(r4, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
recvmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)}, 0x8}], 0x1, 0x60010000, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0)
creat(&(0x7f00000001c0)='./file1\x00', 0x2)
acct(&(0x7f0000000080)='./file1\x00')
acct(0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0005}]})
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0x20)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r5 = gettid()
r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0)
read$ptp(r6, 0x0, 0x0)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=<r7=>0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10)
renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_settime(r7, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.79' (ED25519) to the list of known hosts.
[   33.686351][   T29] audit: type=1400 audit(1752972841.832:62): avc:  denied  { mounton } for  pid=3296 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   33.687496][ T3296] cgroup: Unknown subsys name 'net'
[   33.709106][   T29] audit: type=1400 audit(1752972841.832:63): avc:  denied  { mount } for  pid=3296 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   33.736527][   T29] audit: type=1400 audit(1752972841.862:64): avc:  denied  { unmount } for  pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   33.901819][ T3296] cgroup: Unknown subsys name 'cpuset'
[   33.908079][ T3296] cgroup: Unknown subsys name 'rlimit'
[   34.039772][   T29] audit: type=1400 audit(1752972842.182:65): avc:  denied  { setattr } for  pid=3296 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   34.063049][   T29] audit: type=1400 audit(1752972842.182:66): avc:  denied  { create } for  pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   34.083519][   T29] audit: type=1400 audit(1752972842.182:67): avc:  denied  { write } for  pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   34.103951][   T29] audit: type=1400 audit(1752972842.192:68): avc:  denied  { read } for  pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   34.117215][ T3300] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   34.124209][   T29] audit: type=1400 audit(1752972842.202:69): avc:  denied  { mounton } for  pid=3296 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   34.157552][   T29] audit: type=1400 audit(1752972842.202:70): avc:  denied  { mount } for  pid=3296 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   34.180798][   T29] audit: type=1400 audit(1752972842.282:71): avc:  denied  { relabelto } for  pid=3300 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   34.184967][ T3296] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   36.050772][ T3308] chnl_net:caif_netlink_parms(): no params data found
[   36.085961][ T3311] chnl_net:caif_netlink_parms(): no params data found
[   36.106583][ T3306] chnl_net:caif_netlink_parms(): no params data found
[   36.154008][ T3307] chnl_net:caif_netlink_parms(): no params data found
[   36.178344][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.185501][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.192689][ T3308] bridge_slave_0: entered allmulticast mode
[   36.199064][ T3308] bridge_slave_0: entered promiscuous mode
[   36.223517][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.230623][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.237823][ T3308] bridge_slave_1: entered allmulticast mode
[   36.244171][ T3308] bridge_slave_1: entered promiscuous mode
[   36.262105][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.269177][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.276296][ T3311] bridge_slave_0: entered allmulticast mode
[   36.282751][ T3311] bridge_slave_0: entered promiscuous mode
[   36.305257][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.312546][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.319654][ T3311] bridge_slave_1: entered allmulticast mode
[   36.326140][ T3311] bridge_slave_1: entered promiscuous mode
[   36.340579][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.349993][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.357177][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.364372][ T3306] bridge_slave_0: entered allmulticast mode
[   36.370808][ T3306] bridge_slave_0: entered promiscuous mode
[   36.389742][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.406693][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.415823][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.423016][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.430229][ T3306] bridge_slave_1: entered allmulticast mode
[   36.436692][ T3306] bridge_slave_1: entered promiscuous mode
[   36.452454][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.459513][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.466814][ T3307] bridge_slave_0: entered allmulticast mode
[   36.473365][ T3307] bridge_slave_0: entered promiscuous mode
[   36.484139][ T3314] chnl_net:caif_netlink_parms(): no params data found
[   36.493756][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.512325][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.519384][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.526544][ T3307] bridge_slave_1: entered allmulticast mode
[   36.533091][ T3307] bridge_slave_1: entered promiscuous mode
[   36.552256][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.562144][ T3311] team0: Port device team_slave_0 added
[   36.573163][ T3308] team0: Port device team_slave_0 added
[   36.587535][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.597501][ T3311] team0: Port device team_slave_1 added
[   36.613281][ T3308] team0: Port device team_slave_1 added
[   36.620444][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.648084][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.670018][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.677098][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.703097][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.725477][ T3306] team0: Port device team_slave_0 added
[   36.731364][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.738317][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.764267][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.775273][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.782253][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.808301][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.819507][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.826505][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.852488][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.863837][ T3307] team0: Port device team_slave_0 added
[   36.879822][ T3306] team0: Port device team_slave_1 added
[   36.892075][ T3307] team0: Port device team_slave_1 added
[   36.898735][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.905835][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.913011][ T3314] bridge_slave_0: entered allmulticast mode
[   36.919556][ T3314] bridge_slave_0: entered promiscuous mode
[   36.946708][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.953854][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.961021][ T3314] bridge_slave_1: entered allmulticast mode
[   36.967464][ T3314] bridge_slave_1: entered promiscuous mode
[   36.983597][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.990597][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.016576][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.033957][ T3308] hsr_slave_0: entered promiscuous mode
[   37.039828][ T3308] hsr_slave_1: entered promiscuous mode
[   37.057581][ T3311] hsr_slave_0: entered promiscuous mode
[   37.063624][ T3311] hsr_slave_1: entered promiscuous mode
[   37.069431][ T3311] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   37.077028][ T3311] Cannot create hsr debugfs directory
[   37.082763][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.089715][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.115797][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.126741][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.133756][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.159762][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.170961][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.177995][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.203911][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.243762][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   37.254319][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   37.301825][ T3307] hsr_slave_0: entered promiscuous mode
[   37.307745][ T3307] hsr_slave_1: entered promiscuous mode
[   37.313642][ T3307] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   37.321287][ T3307] Cannot create hsr debugfs directory
[   37.333101][ T3306] hsr_slave_0: entered promiscuous mode
[   37.339077][ T3306] hsr_slave_1: entered promiscuous mode
[   37.345077][ T3306] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   37.352659][ T3306] Cannot create hsr debugfs directory
[   37.373235][ T3314] team0: Port device team_slave_0 added
[   37.382394][ T3314] team0: Port device team_slave_1 added
[   37.432232][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.439208][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.465271][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.495509][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.502564][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.528560][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.616593][ T3314] hsr_slave_0: entered promiscuous mode
[   37.622746][ T3314] hsr_slave_1: entered promiscuous mode
[   37.628647][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   37.636296][ T3314] Cannot create hsr debugfs directory
[   37.650917][ T3308] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   37.660795][ T3308] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   37.677055][ T3308] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   37.690381][ T3308] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   37.717705][ T3311] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   37.736089][ T3311] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   37.744534][ T3311] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   37.755441][ T3311] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   37.781729][ T3307] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   37.790720][ T3307] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   37.808350][ T3307] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   37.820702][ T3307] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   37.856015][ T3306] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   37.865244][ T3306] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   37.873861][ T3306] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   37.887693][ T3306] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   37.906398][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.929230][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.951869][ T3308] 8021q: adding VLAN 0 to HW filter on device team0
[   37.959431][ T3311] 8021q: adding VLAN 0 to HW filter on device team0
[   37.968058][ T3314] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   37.976715][ T3314] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   37.985859][ T3314] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   37.994648][ T3314] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   38.010564][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.017648][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.026730][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.033833][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.051917][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.059002][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.084012][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.091185][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.132642][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.162368][ T3307] 8021q: adding VLAN 0 to HW filter on device team0
[   38.171621][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.184434][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.191597][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.200605][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.207660][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.222892][ T3306] 8021q: adding VLAN 0 to HW filter on device team0
[   38.240311][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.247526][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.264574][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.271698][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.295759][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.322565][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.337716][ T3314] 8021q: adding VLAN 0 to HW filter on device team0
[   38.349077][ T3306] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   38.359497][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   38.382975][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.393368][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.400442][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.410071][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.417268][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.471481][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.549501][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.576479][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.588064][ T3311] veth0_vlan: entered promiscuous mode
[   38.607975][ T3311] veth1_vlan: entered promiscuous mode
[   38.633145][ T3311] veth0_macvtap: entered promiscuous mode
[   38.652326][ T3311] veth1_macvtap: entered promiscuous mode
[   38.690403][ T3308] veth0_vlan: entered promiscuous mode
[   38.716863][ T3306] veth0_vlan: entered promiscuous mode
[   38.734986][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.742780][ T3307] veth0_vlan: entered promiscuous mode
[   38.749137][ T3308] veth1_vlan: entered promiscuous mode
[   38.759340][ T3306] veth1_vlan: entered promiscuous mode
[   38.769775][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.783681][ T3307] veth1_vlan: entered promiscuous mode
[   38.790680][ T3311] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.799465][ T3311] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.808212][ T3311] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.816990][ T3311] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.836744][ T3314] veth0_vlan: entered promiscuous mode
[   38.850311][ T3306] veth0_macvtap: entered promiscuous mode
[   38.860401][ T3306] veth1_macvtap: entered promiscuous mode
[   38.868453][ T3314] veth1_vlan: entered promiscuous mode
[   38.878045][   T29] kauditd_printk_skb: 9 callbacks suppressed
[   38.878058][   T29] audit: type=1400 audit(1752972847.022:81): avc:  denied  { mounton } for  pid=3311 comm="syz-executor" path="/root/syzkaller.ecQtWJ/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   38.882229][ T3308] veth0_macvtap: entered promiscuous mode
[   38.885965][   T29] audit: type=1400 audit(1752972847.032:82): avc:  denied  { mount } for  pid=3311 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   38.914790][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.949094][ T3314] veth0_macvtap: entered promiscuous mode
[   38.955311][   T29] audit: type=1400 audit(1752972847.092:83): avc:  denied  { mounton } for  pid=3311 comm="syz-executor" path="/root/syzkaller.ecQtWJ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   38.957366][ T3314] veth1_macvtap: entered promiscuous mode
[   38.980524][   T29] audit: type=1400 audit(1752972847.092:84): avc:  denied  { mount } for  pid=3311 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   38.992735][ T3307] veth0_macvtap: entered promiscuous mode
[   39.007952][   T29] audit: type=1400 audit(1752972847.092:85): avc:  denied  { mounton } for  pid=3311 comm="syz-executor" path="/root/syzkaller.ecQtWJ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   39.040364][   T29] audit: type=1400 audit(1752972847.092:86): avc:  denied  { mounton } for  pid=3311 comm="syz-executor" path="/root/syzkaller.ecQtWJ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4018 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   39.046550][ T3307] veth1_macvtap: entered promiscuous mode
[   39.067853][   T29] audit: type=1400 audit(1752972847.092:87): avc:  denied  { unmount } for  pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   39.082344][ T3308] veth1_macvtap: entered promiscuous mode
[   39.093062][   T29] audit: type=1400 audit(1752972847.092:88): avc:  denied  { mounton } for  pid=3311 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   39.093085][   T29] audit: type=1400 audit(1752972847.092:89): avc:  denied  { mount } for  pid=3311 comm="syz-executor" name="/" dev="gadgetfs" ino=4019 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   39.106515][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.154302][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.164627][ T3306] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.173384][ T3306] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.182195][ T3306] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.190881][ T3306] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.192367][ T3311] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   39.210162][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.229695][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.240206][ T3307] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.249078][ T3307] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.257913][ T3307] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.266653][ T3307] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.283302][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.298816][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.314164][   T29] audit: type=1400 audit(1752972847.442:90): avc:  denied  { read write } for  pid=3311 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   39.317982][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.348857][ T3308] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.357650][ T3308] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.363339][ T3478] IPv6: Can't replace route, no match found
[   39.366467][ T3308] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.381012][ T3308] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.390204][ T3478] loop1: detected capacity change from 0 to 1024
[   39.422736][ T3314] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.422763][ T3314] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.422825][ T3314] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.422851][ T3314] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.439119][ T3478] EXT4-fs: Ignoring removed bh option
[   39.466364][ T3478] EXT4-fs: inline encryption not supported
[   39.466463][ T3478] ext4: Unknown parameter 'smackfsroot'
[   39.508178][ T3478] rdma_op ffff8881191df180 conn xmit_rdma 0000000000000000
[   39.550054][ T3478] loop1: detected capacity change from 0 to 2048
[   39.585694][ T3486] loop0: detected capacity change from 0 to 512
[   39.598695][ T3478] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.610958][ T3491] process 'syz.4.5' launched './file0' with NULL argv: empty string added
[   39.613921][ T3486] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.641300][ T3490] loop2: detected capacity change from 0 to 512
[   39.647846][ T3490] =======================================================
[   39.647846][ T3490] WARNING: The mand mount option has been deprecated and
[   39.647846][ T3490]          and is ignored by this kernel. Remove the mand
[   39.647846][ T3490]          option from the mount to silence this warning.
[   39.647846][ T3490] =======================================================
[   39.683677][ T3490] EXT4-fs: Ignoring removed oldalloc option
[   39.756491][ T3486] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.768039][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.777842][ T3490] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.3: Parent and EA inode have the same ino 15
[   39.791816][ T3490] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   39.811704][ T3490] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.3: Parent and EA inode have the same ino 15
[   40.013345][ T3501] netlink: 'syz.3.4': attribute type 10 has an invalid length.
[   40.020955][ T3501] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4'.
[   40.076376][ T3501] team0: Port device geneve1 added
[   40.107335][ T3490] EXT4-fs (loop2): 1 orphan inode deleted
[   40.169740][ T3490] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.263187][ T3490] EXT4-fs warning (device loop2): __ext4_unlink:3274: inode #15: comm syz.2.3: Deleting file 'file1' with no links
[   40.317507][ T3509] loop4: detected capacity change from 0 to 512
[   40.330390][ T3505] xt_CT: No such helper "pptp"
[   40.347488][ T3509] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.7: Failed to acquire dquot type 1
[   40.359130][ T3510] loop1: detected capacity change from 0 to 1024
[   40.359946][ T3509] EXT4-fs (loop4): 1 truncate cleaned up
[   40.373396][ T3510] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   40.384395][ T3510] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   40.395899][ T3509] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.401511][ T3510] JBD2: no valid journal superblock found
[   40.409773][ T3509] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   40.414182][ T3510] EXT4-fs (loop1): Could not load journal inode
[   40.469057][ T3509] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.7: deleted inode referenced: 12
[   40.486487][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.516284][ T3509] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.7: deleted inode referenced: 12
[   40.529141][ T3505] Zero length message leads to an empty skb
[   40.529991][ T3501] syz.3.4 (3501) used greatest stack depth: 10504 bytes left
[   40.605003][ T3505] SELinux: syz.1.6 (3505) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   40.626693][ T3518] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   40.635335][ T3518] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   40.699837][ T3523] loop2: detected capacity change from 0 to 512
[   40.726989][ T3523] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   40.736227][ T3523] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[   40.745808][ T3523] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended
[   40.760423][ T3523] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[   40.769267][ T3523] System zones: 0-2, 18-18, 34-34
[   40.774972][ T3523] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.11: iget: bad i_size value: 360287970189639680
[   40.791130][ T3523] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.11: couldn't read orphan inode 15 (err -117)
[   40.804082][ T3523] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.901619][ T3523] pimreg: entered allmulticast mode
[   41.167775][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   41.175350][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   41.183006][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   41.190505][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   41.198002][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   41.205532][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   41.213041][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   41.220502][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   41.227931][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   41.235381][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   41.242851][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   41.250249][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   41.256797][ T3529] infiniband syz!: set active
[   41.258011][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   41.262419][ T3529] infiniband syz!: added team_slave_0
[   41.269889][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   41.282670][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   41.290065][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   41.290969][ T3529] RDS/IB: syz!: added
[   41.297488][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   41.297514][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   41.309797][ T3529] smc: adding ib device syz! with port count 1
[   41.316478][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   41.322827][ T3529] smc:    ib device syz! port 1 has pnetid 
[   41.329865][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   41.343312][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   41.350834][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   41.358277][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   41.365696][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   41.373142][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   41.380595][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   41.388015][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   41.395439][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   41.402838][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   41.410232][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   41.417776][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   41.425197][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   41.432621][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   41.440081][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   41.447526][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   41.454958][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   41.462404][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   41.469815][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   41.477263][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   41.484679][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   41.492101][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   41.496939][ T3535] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   41.499493][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   41.518404][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   41.552053][ T3535] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   41.592078][ T3533] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   41.635023][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.651532][ T1038] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v8.00 Device [syz1] on syz0
[   41.689901][ T3533] tmpfs: Bad value for 'mpol'
[   41.762317][ T3542] fido_id[3542]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   41.802855][ T3546] Cannot find del_set index 0 as target
[   41.921824][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.943196][ T3550] loop0: detected capacity change from 0 to 164
[   41.967130][ T3516] syz.3.10 (3516) used greatest stack depth: 9672 bytes left
[   41.983019][ T3550] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   41.998351][ T3553] loop2: detected capacity change from 0 to 512
[   42.009897][ T3553] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   42.028104][ T3557] Cannot find set identified by id 65534 to match
[   42.038478][ T3557] loop4: detected capacity change from 0 to 128
[   42.057704][ T3557] netlink: 'syz.4.18': attribute type 6 has an invalid length.
[   42.067996][ T3553] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.068119][ T3553] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   42.086304][ T3553] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   42.145354][ T3562] sch_tbf: burst 480 is lower than device lo mtu (65550) !
[   42.146740][ T3562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19'.
[   42.148714][ T3562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19'.
[   42.475860][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.545859][ T3564] tipc: Started in network mode
[   42.545920][ T3564] tipc: Node identity 6a4d7d1f1361, cluster identity 4711
[   42.545991][ T3564] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   42.674272][ T3564] tipc: Disabling bearer <eth:syzkaller0>
[   42.902478][ T3577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21'.
[   42.931386][ T3577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21'.
[   42.950731][ T3577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21'.
[   42.963755][ T3577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21'.
[   43.136465][ T3577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21'.
[   43.186506][ T3577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21'.
[   43.198946][ T3591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25'.
[   43.202574][ T1038] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   43.203193][ T1038] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   43.223973][ T3593] loop3: detected capacity change from 0 to 1024
[   43.278023][ T3593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.290763][ T3603] fido_id[3603]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   43.352041][ T3577] vhci_hcd: invalid port number 96
[   43.352054][ T3577] vhci_hcd: default hub control req: 0000 vfffc i0060 l0
[   43.507766][ T3611] loop1: detected capacity change from 0 to 2048
[   43.508133][ T3611] EXT4-fs: Ignoring removed mblk_io_submit option
[   43.537506][ T3611] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.605346][ T3616] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.26: bg 0: block 234: padding at end of block bitmap is not set
[   43.605576][ T3616] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 472 with error 28
[   43.605668][ T3616] EXT4-fs (loop1): This should not happen!! Data will be lost
[   43.605668][ T3616] 
[   43.605694][ T3616] EXT4-fs (loop1): Total free blocks count 0
[   43.605708][ T3616] EXT4-fs (loop1): Free/Dirty block details
[   43.605720][ T3616] EXT4-fs (loop1): free_blocks=0
[   43.605732][ T3616] EXT4-fs (loop1): dirty_blocks=480
[   43.605787][ T3616] EXT4-fs (loop1): Block reservation details
[   43.605799][ T3616] EXT4-fs (loop1): i_reserved_data_blocks=30
[   43.631808][  T415] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 471 with max blocks 1 with error 28
[   43.803100][ T3619] loop4: detected capacity change from 0 to 2048
[   43.862347][ T3593] 9pnet_fd: Insufficient options for proto=fd
[   43.871293][ T3593] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   43.889875][ T3593] EXT4-fs (loop3): Remounting filesystem read-only
[   43.903284][ T3297] Alternate GPT is invalid, using primary GPT.
[   43.909672][ T3297]  loop4: p2 p3 p7
[   43.922112][ T3593] EXT4-fs (loop3): error restoring inline_data for inode -- potential data loss! (inode 15, error -30)
[   43.935631][ T3619] Alternate GPT is invalid, using primary GPT.
[   43.942510][ T3619]  loop4: p2 p3 p7
[   43.943112][   T29] kauditd_printk_skb: 312 callbacks suppressed
[   43.943125][   T29] audit: type=1400 audit(1752972852.092:401): avc:  denied  { read } for  pid=2978 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   43.974502][   T29] audit: type=1400 audit(1752972852.092:402): avc:  denied  { search } for  pid=2978 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   43.996117][   T29] audit: type=1400 audit(1752972852.092:403): avc:  denied  { search } for  pid=2978 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   44.017624][   T29] audit: type=1400 audit(1752972852.092:404): avc:  denied  { add_name } for  pid=2978 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   44.038844][ T3619] loop9: detected capacity change from 0 to 7
[   44.039281][ T3619] Buffer I/O error on dev loop9, logical block 0, async page read
[   44.045366][   T29] audit: type=1400 audit(1752972852.092:405): avc:  denied  { create } for  pid=2978 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   44.059019][ T3619] Buffer I/O error on dev loop9, logical block 0, async page read
[   44.073771][   T29] audit: type=1400 audit(1752972852.092:406): avc:  denied  { append open } for  pid=2978 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   44.081659][ T3619]  loop9: unable to read partition table
[   44.110970][   T29] audit: type=1400 audit(1752972852.092:407): avc:  denied  { getattr } for  pid=2978 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   44.135603][ T3619] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[   44.135603][ T3619] 
) failed (rc=-5)
[   44.136743][ T3299] Buffer I/O error on dev loop9, logical block 0, async page read
[   44.168613][ T3623] loop1: detected capacity change from 0 to 1024
[   44.176941][ T3621] xt_CT: No such helper "pptp"
[   44.177163][ T3299] Buffer I/O error on dev loop9, logical block 0, async page read
[   44.194339][ T3623] EXT4-fs: Ignoring removed nobh option
[   44.200036][ T3623] EXT4-fs: Ignoring removed bh option
[   44.205645][ T3299] Buffer I/O error on dev loop9, logical block 0, async page read
[   44.214889][ T3299] Buffer I/O error on dev loop9, logical block 0, async page read
[   44.217371][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.223734][ T3299] Buffer I/O error on dev loop9, logical block 0, async page read
[   44.252114][ T3623] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.264877][   T29] audit: type=1400 audit(1752972852.132:408): avc:  denied  { read write } for  pid=3618 comm="syz.4.27" name="loop4p3" dev="devtmpfs" ino=612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   44.264991][   T29] audit: type=1400 audit(1752972852.132:409): avc:  denied  { open } for  pid=3618 comm="syz.4.27" path="/dev/loop4p3" dev="devtmpfs" ino=612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   44.265020][   T29] audit: type=1326 audit(1752972852.182:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3618 comm="syz.4.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2131d0e9a9 code=0x7ffc0000
[   44.419091][ T3628] loop3: detected capacity change from 0 to 512
[   44.451959][ T3628] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   44.482231][ T3631] random: crng reseeded on system resumption
[   44.490488][ T3628] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.29: invalid indirect mapped block 4294967295 (level 1)
[   44.506382][ T3633] netlink: 'syz.4.30': attribute type 1 has an invalid length.
[   44.533802][ T3628] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.29: invalid indirect mapped block 4294967295 (level 1)
[   44.578308][ T3628] EXT4-fs (loop3): 2 truncates cleaned up
[   44.585300][ T3628] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.633290][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.795900][ T3649] loop3: detected capacity change from 0 to 2048
[   44.833912][ T3649] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.861802][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.883733][ T3649] netlink: 'syz.3.34': attribute type 27 has an invalid length.
[   44.922331][ T3649] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.929611][ T3649] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.072482][ T3667] __nla_validate_parse: 2 callbacks suppressed
[   45.072501][ T3667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34'.
[   45.087551][ T3667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34'.
[   45.099179][ T3668] mmap: syz.1.35 (3668) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   45.103256][ T3649] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   45.122301][ T3649] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   45.129909][ T3667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34'.
[   45.141778][ T3669] Driver unsupported XDP return value 0 on prog  (id 28) dev N/A, expect packet loss!
[   45.208229][ T3667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34'.
[   45.217029][ T3667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34'.
[   45.264099][ T3588] syz.0.22 (3588) used greatest stack depth: 6712 bytes left
[   45.284711][ T3649] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   45.293669][ T3649] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   45.303021][ T3649] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   45.311935][ T3649] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   45.323124][ T3667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34'.
[   45.385152][ T3667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34'.
[   45.394044][ T3667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34'.
[   45.428942][ T3662] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.436824][ T3662] 8021q: adding VLAN 0 to HW filter on device team0
[   45.443643][ T3667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34'.
[   45.463025][ T3662] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   45.488549][ T3677] SELinux:  Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped).
[   45.506078][ T3668] bond_slave_0: entered promiscuous mode
[   45.511864][ T3668] bond_slave_1: entered promiscuous mode
[   45.541271][ T3668] macsec1: entered allmulticast mode
[   45.546726][ T3668] bond0: entered allmulticast mode
[   45.551952][ T3668] bond_slave_0: entered allmulticast mode
[   45.557744][ T3668] bond_slave_1: entered allmulticast mode
[   45.570745][ T3682] loop0: detected capacity change from 0 to 512
[   45.587466][ T3668] bond0: left allmulticast mode
[   45.592395][ T3668] bond_slave_0: left allmulticast mode
[   45.597905][ T3668] bond_slave_1: left allmulticast mode
[   45.603546][ T3668] bond_slave_0: left promiscuous mode
[   45.609024][ T3668] bond_slave_1: left promiscuous mode
[   45.627759][ T3682] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.655603][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.664900][ T3682] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   45.710520][ T3688] netlink: 'syz.3.40': attribute type 64 has an invalid length.
[   45.783995][ T3690] loop2: detected capacity change from 0 to 512
[   45.792216][ T3690] EXT4-fs: Ignoring removed nomblk_io_submit option
[   45.868138][ T3690] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.896187][ T3694] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[   45.914177][ T3690] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   45.934437][ T3682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   45.943987][ T3682] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   46.013168][ T3703] loop1: detected capacity change from 0 to 512
[   46.042961][ T3703] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.057783][ T3703] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   46.081793][ T3703] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz.1.43: iget: bad i_size value: 2533274857506816
[   46.153204][    C0] hrtimer: interrupt took 51873 ns
[   46.204718][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.356790][ T3829] loop4: detected capacity change from 0 to 512
[   47.365279][ T3829] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   47.377957][ T3829] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=884ee02c, mo2=0102]
[   47.386125][ T3829] EXT4-fs (loop4): orphan cleanup on readonly fs
[   47.393810][ T3829] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 33619980: comm syz.4.47: invalid block
[   47.408436][ T3829] EXT4-fs (loop4): Remounting filesystem read-only
[   47.415862][ T3829] EXT4-fs (loop4): 1 truncate cleaned up
[   47.422837][ T3829] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback.
[   47.562302][ T3832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.49'.
[   47.933504][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.972372][ T3869] tipc: Started in network mode
[   47.977313][ T3869] tipc: Node identity 4, cluster identity 4711
[   47.983495][ T3869] tipc: Node number set to 4
[   48.019271][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[   48.098140][ T3884] loop2: detected capacity change from 0 to 512
[   48.105143][ T3884] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   48.133997][ T3884] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.146690][ T3884] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   48.153635][ T3876] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26368 sclass=netlink_route_socket pid=3876 comm=syz.4.52
[   48.170057][ T3884] kernel profiling enabled (shift: 17)
[   48.176928][ T3884] capability: warning: `syz.2.53' uses deprecated v2 capabilities in a way that may be insecure
[   48.189373][ T3884] capability: warning: `syz.2.53' uses 32-bit capabilities (legacy support in use)
[   48.209818][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.240139][ T3890] xt_CT: You must specify a L4 protocol and not use inversions on it
[   48.256866][ T3892] loop4: detected capacity change from 0 to 512
[   48.273442][ T3892] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.55: Failed to acquire dquot type 1
[   48.291442][ T3892] EXT4-fs (loop4): 1 truncate cleaned up
[   48.300593][ T3892] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.318369][ T3892] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   48.318931][ T3898] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   48.344548][ T3892] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.55: Failed to acquire dquot type 1
[   48.353946][ T3898] syzkaller1: tun_chr_ioctl cmd 2147767506
[   48.364934][ T3892] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.55: Failed to acquire dquot type 1
[   48.437299][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.482665][ T3903] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0
[   48.491719][ T3903] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0
[   48.500578][ T3903] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0
[   48.509536][ T3903] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0
[   48.549267][ T3903] loop3: detected capacity change from 0 to 512
[   48.563661][ T3903] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   48.576896][ T3903] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   48.608869][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.620652][ T3903] EXT4-fs (loop3): 1 truncate cleaned up
[   48.657441][ T3903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.903299][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.431207][   T29] kauditd_printk_skb: 410 callbacks suppressed
[   49.431225][   T29] audit: type=1400 audit(1752972858.575:815): avc:  denied  { bind } for  pid=3918 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   49.485054][   T29] audit: type=1326 audit(1752972858.605:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3918 comm="syz.1.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1ea2ce9a9 code=0x7ffc0000
[   49.508406][   T29] audit: type=1326 audit(1752972858.605:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3918 comm="syz.1.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fc1ea2ce9a9 code=0x7ffc0000
[   49.543331][ T3919] netlink: 'syz.1.61': attribute type 10 has an invalid length.
[   49.557041][ T3919] team0: Port device dummy0 added
[   49.583193][ T3925] loop3: detected capacity change from 0 to 512
[   49.590087][   T29] audit: type=1400 audit(1752972858.695:818): avc:  denied  { setopt } for  pid=3918 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   49.610408][   T29] audit: type=1326 audit(1752972858.695:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3923 comm="syz.1.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc1ea301265 code=0x7ffc0000
[   49.633775][   T29] audit: type=1326 audit(1752972858.695:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3918 comm="syz.1.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1ea2ce9a9 code=0x7ffc0000
[   49.657035][   T29] audit: type=1326 audit(1752972858.695:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3918 comm="syz.1.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1ea2ce9a9 code=0x7ffc0000
[   49.657800][ T3925] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[   49.706733][   T29] audit: type=1326 audit(1752972858.855:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3923 comm="syz.1.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fc1ea2ce9a9 code=0x7ffc0000
[   49.712088][ T3925] EXT4-fs (loop3): orphan cleanup on readonly fs
[   49.754877][ T3930] loop2: detected capacity change from 0 to 128
[   49.765627][ T3925] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.60: Block bitmap for bg 0 marked uninitialized
[   49.779301][ T3925] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem
[   49.788500][ T3925] EXT4-fs (loop3): 1 orphan inode deleted
[   49.798183][ T3925] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   49.847934][   T29] audit: type=1400 audit(1752972858.995:823): avc:  denied  { remount } for  pid=3924 comm="syz.3.60" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   49.852977][ T3930] syz.2.63: attempt to access beyond end of device
[   49.852977][ T3930] loop2: rw=0, sector=121, nr_sectors = 920 limit=128
[   49.867794][ T3925] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[   49.893198][ T3925] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[   49.916077][   T29] audit: type=1400 audit(1752972859.065:824): avc:  denied  { mounton } for  pid=3929 comm="syz.2.63" path="/14/file0" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1
[   49.953602][ T3925] lo speed is unknown, defaulting to 1000
[   49.959606][ T3925] lo speed is unknown, defaulting to 1000
[   49.965738][ T3925] lo speed is unknown, defaulting to 1000
[   49.972749][ T3925] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   49.986538][ T3925] lo speed is unknown, defaulting to 1000
[   49.993066][ T3925] lo speed is unknown, defaulting to 1000
[   49.999142][ T3925] lo speed is unknown, defaulting to 1000
[   50.006159][ T3925] lo speed is unknown, defaulting to 1000
[   50.012260][ T3925] lo speed is unknown, defaulting to 1000
[   50.057389][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.092644][ T3941] loop2: detected capacity change from 0 to 1024
[   50.111075][ T3941] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.148065][ T3948] __nla_validate_parse: 1 callbacks suppressed
[   50.148143][ T3948] netlink: 176 bytes leftover after parsing attributes in process `syz.0.67'.
[   50.175340][ T3948] loop0: detected capacity change from 0 to 128
[   50.197501][ T3941] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   50.248499][ T3948] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3948 comm=+}[@
[   50.260603][ T3948] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3948 comm=+}[@
[   50.307558][ T3941] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #15: block 1: comm syz.2.66: lblock 1 mapped to illegal pblock 1 (length 15)
[   50.345913][ T3941] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117
[   50.358556][ T3941] EXT4-fs (loop2): This should not happen!! Data will be lost
[   50.358556][ T3941] 
[   50.369879][ T3953] netlink: 'syz.2.66': attribute type 21 has an invalid length.
[   50.377657][ T3953] netlink: 'syz.2.66': attribute type 1 has an invalid length.
[   50.385280][ T3953] netlink: 144 bytes leftover after parsing attributes in process `syz.2.66'.
[   50.407218][ T3941] pim6reg: entered allmulticast mode
[   50.417291][ T3941] pim6reg: left allmulticast mode
[   50.532688][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.555286][ T3951] bond0: (slave veth0_to_hsr): Enslaving as an active interface with an up link
[   50.580415][ T3961] loop2: detected capacity change from 0 to 512
[   50.619254][ T3961] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.641369][ T3961] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   50.654603][ T3961] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.70: corrupted inode contents
[   50.669215][ T3961] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.70: mark_inode_dirty error
[   50.698072][ T3961] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.70: corrupted inode contents
[   50.753998][ T3954] bond_slave_0: entered promiscuous mode
[   50.759702][ T3954] bond_slave_1: entered promiscuous mode
[   50.765659][ T3954] macsec1: entered allmulticast mode
[   50.770981][ T3954] bond0: entered allmulticast mode
[   50.776184][ T3954] bond_slave_0: entered allmulticast mode
[   50.782019][ T3954] bond_slave_1: entered allmulticast mode
[   50.790510][ T3954] bond0: left allmulticast mode
[   50.795471][ T3954] bond_slave_0: left allmulticast mode
[   50.799676][ T3961] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.70: corrupted inode contents
[   50.800961][ T3954] bond_slave_1: left allmulticast mode
[   50.814138][ T3961] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.70: mark_inode_dirty error
[   50.817995][ T3954] bond_slave_0: left promiscuous mode
[   50.831265][ T3961] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.70: corrupted inode contents
[   50.834413][ T3954] bond_slave_1: left promiscuous mode
[   50.852838][ T3961] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.70: mark_inode_dirty error
[   50.864841][ T3961] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.70: corrupted inode contents
[   50.883176][ T3961] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.70: mark_inode_dirty error
[   50.896040][ T3967] team0: Port device dummy0 removed
[   50.906371][ T3967] bridge_slave_0: left allmulticast mode
[   50.912047][ T3967] bridge_slave_0: left promiscuous mode
[   50.917757][ T3967] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.937879][ T3967] bridge_slave_1: left allmulticast mode
[   50.943654][ T3967] bridge_slave_1: left promiscuous mode
[   50.949367][ T3967] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.965239][ T3967] bond0: (slave bond_slave_0): Releasing backup interface
[   50.977402][ T3967] bond0: (slave bond_slave_1): Releasing backup interface
[   50.996374][ T3967] team0: Port device team_slave_0 removed
[   50.996613][ T3961] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.70: corrupted inode contents
[   51.015651][ T3967] team0: Port device team_slave_1 removed
[   51.022764][ T3967] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   51.030259][ T3967] batman_adv: batadv0: Removing interface: batadv_slave_0
[   51.038787][ T3967] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   51.046362][ T3967] batman_adv: batadv0: Removing interface: batadv_slave_1
[   51.074130][   T10] syz!: Port: 1 Link DOWN
[   51.121945][ T3973] sd 0:0:1:0: device reset
[   51.195442][ T3978] veth1_to_bond: entered allmulticast mode
[   51.225490][ T3978] veth1_to_bond: left allmulticast mode
[   51.281951][ T3981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.75'.
[   51.290750][ T3981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.75'.
[   51.300028][ T3981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.75'.
[   51.312066][ T3981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.75'.
[   51.320816][ T3981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.75'.
[   51.330027][ T3981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.75'.
[   51.345236][ T3981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.75'.
[   51.354148][ T3981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.75'.
[   51.435458][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.478662][ T3991] loop3: detected capacity change from 0 to 164
[   51.577362][ T3996] 9pnet_fd: Insufficient options for proto=fd
[   51.662044][ T4003] loop2: detected capacity change from 0 to 2048
[   51.698863][ T4004] loop4: detected capacity change from 0 to 512
[   51.787841][ T4006] lo speed is unknown, defaulting to 1000
[   51.916715][ T4006] loop0: detected capacity change from 0 to 512
[   51.923698][ T4006] EXT4-fs: Ignoring removed bh option
[   52.166337][ T4006] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   52.193394][ T4006] EXT4-fs (loop0): 1 truncate cleaned up
[   52.199680][ T4006] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.303148][ T4004] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   52.329416][ T4004] EXT4-fs (loop4): orphan cleanup on readonly fs
[   52.424070][ T4004] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   52.451723][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.473394][ T4004] EXT4-fs (loop4): Cannot turn on quotas: error -117
[   52.493966][ T4032] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[   52.531259][ T4038] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[   52.532830][ T4004] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.81: bg 0: block 40: padding at end of block bitmap is not set
[   52.537794][ T4038] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   52.559374][ T4038] vhci_hcd vhci_hcd.0: Device attached
[   52.630793][ T4004] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem
[   52.641146][ T4004] EXT4-fs (loop4): 1 truncate cleaned up
[   52.648739][ T4004] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   52.785465][ T4004] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   52.809806][ T4044] loop2: detected capacity change from 0 to 512
[   52.839819][ T4044] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   52.867362][ T4060] netlink: 'syz.1.86': attribute type 1 has an invalid length.
[   53.199484][ T4044] EXT4-fs (loop2): 1 truncate cleaned up
[   53.207468][ T4039] vhci_hcd: connection closed
[   53.207825][   T57] vhci_hcd: stop threads
[   53.216957][   T57] vhci_hcd: release socket
[   53.221507][   T57] vhci_hcd: disconnect device
[   53.235919][ T4044] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.313701][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.362259][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.401644][ T4068] netlink: 'syz.4.87': attribute type 27 has an invalid length.
[   53.437011][ T4068] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.444379][ T4068] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.549304][ T4068] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   53.559369][ T4068] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   53.581360][ T4074] tmpfs: Unknown parameter 'n�'
[   53.614653][ T4068] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   53.623928][ T4068] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   53.632932][ T4068] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   53.641887][ T4068] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   53.657022][ T4078] netlink: 'syz.1.89': attribute type 1 has an invalid length.
[   53.671439][ T4078] vhci_hcd: invalid port number 65
[   53.676745][ T4078] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub
[   53.714255][ T4080] tipc: Started in network mode
[   53.719170][ T4080] tipc: Node identity 4, cluster identity 4711
[   53.725483][ T4080] tipc: Node number set to 4
[   53.727213][ T4076] 9pnet_fd: Insufficient options for proto=fd
[   53.783649][ T4084] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[   53.813505][ T4089] loop0: detected capacity change from 0 to 128
[   53.835793][ T4091] loop3: detected capacity change from 0 to 164
[   53.849100][ T4094] sd 0:0:1:0: device reset
[   53.870580][ T4091] iso9660: Unknown parameter '����'
[   53.955953][ T4094] lo speed is unknown, defaulting to 1000
[   53.980997][ T4102] loop1: detected capacity change from 0 to 512
[   53.987836][ T4102] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[   54.016329][ T4102] EXT4-fs (loop1): orphan cleanup on readonly fs
[   54.051679][ T4102] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.97: Block bitmap for bg 0 marked uninitialized
[   54.072513][ T4102] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem
[   54.106492][ T4102] EXT4-fs (loop1): 1 orphan inode deleted
[   54.113023][ T4102] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   54.476928][   T29] kauditd_printk_skb: 196 callbacks suppressed
[   54.476942][   T29] audit: type=1326 audit(1752972863.625:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm="syz.4.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2131d0e9a9 code=0x7ffc0000
[   54.506763][   T29] audit: type=1326 audit(1752972863.655:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm="syz.4.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f2131d0e9a9 code=0x7ffc0000
[   54.530195][   T29] audit: type=1326 audit(1752972863.655:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm="syz.4.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2131d0e9a9 code=0x7ffc0000
[   54.553593][   T29] audit: type=1326 audit(1752972863.655:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm="syz.4.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2131d0e9a9 code=0x7ffc0000
[   54.568183][ T4108] syz.2.99 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[   54.578799][   T29] audit: type=1400 audit(1752972863.705:1024): avc:  denied  { wake_alarm } for  pid=4113 comm="syz.4.100" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   54.587804][ T4108] CPU: 1 UID: 0 PID: 4108 Comm: syz.2.99 Not tainted 6.16.0-rc6-syzkaller-00279-gbf61759db409 #0 PREEMPT(voluntary) 
[   54.587894][ T4108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   54.587910][ T4108] Call Trace:
[   54.587916][ T4108]  <TASK>
[   54.587925][ T4108]  __dump_stack+0x1d/0x30
[   54.587952][ T4108]  dump_stack_lvl+0xe8/0x140
[   54.587974][ T4108]  dump_stack+0x15/0x1b
[   54.587994][ T4108]  dump_header+0x81/0x220
[   54.588066][ T4108]  oom_kill_process+0x334/0x3f0
[   54.588101][ T4108]  out_of_memory+0x979/0xb80
[   54.588137][ T4108]  try_charge_memcg+0x5e6/0x9e0
[   54.588233][ T4108]  charge_memcg+0x51/0xc0
[   54.588344][ T4108]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[   54.588384][ T4108]  __read_swap_cache_async+0x1df/0x350
[   54.588423][ T4108]  swap_cluster_readahead+0x277/0x3e0
[   54.588484][ T4108]  swapin_readahead+0xde/0x6f0
[   54.588518][ T4108]  ? __filemap_get_folio+0x4f7/0x6b0
[   54.588584][ T4108]  ? swap_cache_get_folio+0x77/0x200
[   54.588618][ T4108]  do_swap_page+0x301/0x2430
[   54.588641][ T4108]  ? css_rstat_updated+0xcd/0x5b0
[   54.588679][ T4108]  ? __pfx_default_wake_function+0x10/0x10
[   54.588710][ T4108]  handle_mm_fault+0x9a5/0x2be0
[   54.588836][ T4108]  ? mas_walk+0xf2/0x120
[   54.588974][ T4108]  do_user_addr_fault+0x636/0x1090
[   54.589025][ T4108]  exc_page_fault+0x62/0xa0
[   54.589064][ T4108]  asm_exc_page_fault+0x26/0x30
[   54.589157][ T4108] RIP: 0033:0x7f08919f53d8
[   54.589184][ T4108] Code: 48 f7 f1 48 01 d8 49 39 c4 4c 0f 42 e0 83 3d ea 27 35 00 00 0f 8e 09 fe ff ff e8 a3 9f fe ff 49 39 c4 72 66 66 0f 1f 44 00 00 <69> 3d b6 02 e8 00 e8 03 00 00 48 8d 1d b7 0b 35 00 e8 12 95 12 00
[   54.589207][ T4108] RSP: 002b:00007ffe4b5c7860 EFLAGS: 00010206
[   54.589234][ T4108] RAX: 000000000000d4c0 RBX: 00007f0891d47ba0 RCX: 000000000000d2f0
[   54.589252][ T4108] RDX: 00000000000001d0 RSI: 00007ffe4b5c7840 RDI: 0000000000000001
[   54.589326][ T4108] RBP: 00007f0891d47ba0 R08: 000000001bb2cdd0 R09: 7fffffffffffffff
[   54.589388][ T4108] R10: 3fffffffffffffff R11: 0000000000000293 R12: 000000000000d6a7
[   54.589410][ T4108] R13: 00007f0891d46160 R14: ffffffffffffffff R15: 00007ffe4b5c7970
[   54.589511][ T4108]  </TASK>
[   54.589520][ T4108] memory: usage 307200kB, limit 307200kB, failcnt 451
[   54.608866][   T29] audit: type=1326 audit(1752972863.725:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm="syz.4.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2131d0d310 code=0x7ffc0000
[   54.621095][ T4108] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0
[   54.621109][ T4108] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0
[   54.621120][ T4108] Memory cgroup stats for /syz2
[   54.631289][   T29] audit: type=1326 audit(1752972863.725:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm="syz.4.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2131d0e9a9 code=0x7ffc0000
[   54.634580][ T4108] :
[   54.637468][   T29] audit: type=1326 audit(1752972863.725:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm="syz.4.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2131d0e9a9 code=0x7ffc0000
[   54.645304][ T4108] cache 0
[   54.921023][ T4108] rss 0
[   54.923859][ T4108] shmem 0
[   54.926866][ T4108] mapped_file 0
[   54.930332][ T4108] dirty 0
[   54.933313][ T4108] writeback 4096
[   54.936910][ T4108] workingset_refault_anon 29
[   54.941544][ T4108] workingset_refault_file 32
[   54.946205][ T4108] swap 208896
[   54.949545][ T4108] swapcached 12288
[   54.953323][ T4108] pgpgin 14612
[   54.956709][ T4108] pgpgout 14608
[   54.960199][ T4108] pgfault 20523
[   54.963695][ T4108] pgmajfault 15
[   54.967188][ T4108] inactive_anon 4096
[   54.971098][ T4108] active_anon 0
[   54.974826][ T4108] inactive_file 4096
[   54.978736][ T4108] active_file 0
[   54.982247][ T4108] unevictable 0
[   54.985829][ T4108] hierarchical_memory_limit 314572800
[   54.991235][ T4108] hierarchical_memsw_limit 9223372036854771712
[   54.997529][ T4108] total_cache 0
[   55.000993][ T4108] total_rss 0
[   55.004315][ T4108] total_shmem 0
[   55.007790][ T4108] total_mapped_file 0
[   55.011811][ T4108] total_dirty 0
[   55.015283][ T4108] total_writeback 4096
[   55.019395][ T4108] total_workingset_refault_anon 29
[   55.024544][ T4108] total_workingset_refault_file 32
[   55.029668][ T4108] total_swap 208896
[   55.033649][ T4108] total_swapcached 12288
[   55.037900][ T4108] total_pgpgin 14612
[   55.041836][ T4108] total_pgpgout 14608
[   55.045859][ T4108] total_pgfault 20539
[   55.049902][ T4108] total_pgmajfault 15
[   55.054061][ T4108] total_inactive_anon 4096
[   55.058493][ T4108] total_active_anon 0
[   55.062513][ T4108] total_inactive_file 4096
[   55.066957][ T4108] total_active_file 0
[   55.070941][ T4108] total_unevictable 0
[   55.074969][ T4108] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.99,pid=4108,uid=0
[   55.089456][ T4108] Memory cgroup out of memory: Killed process 4108 (syz.2.99) total-vm:95940kB, anon-rss:1072kB, file-rss:22344kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[   55.163245][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.196909][   T29] audit: type=1400 audit(1752972864.345:1028): avc:  denied  { write } for  pid=4118 comm="syz.0.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   55.216464][   T29] audit: type=1400 audit(1752972864.345:1029): avc:  denied  { create } for  pid=4118 comm="syz.0.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[   55.252810][ T4117] loop3: detected capacity change from 0 to 1024
[   55.278067][ T4117] EXT4-fs: Ignoring removed orlov option
[   55.293864][ T4117] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   55.302536][ T4121] wireguard0: entered promiscuous mode
[   55.308054][ T4121] wireguard0: entered allmulticast mode
[   55.323708][ T4117] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   55.340914][ T4126] __nla_validate_parse: 4 callbacks suppressed
[   55.340929][ T4126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.105'.
[   55.362494][ T4117] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e018, mo2=0000]
[   55.372539][ T4117] System zones: 0-1, 3-12
[   55.391398][ T4117] EXT4-fs (loop3): orphan cleanup on readonly fs
[   55.411820][ T4117] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #3: block 1: comm syz.3.101: lblock 1 mapped to illegal pblock 1 (length 1)
[   55.443160][ T4117] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.101: Failed to acquire dquot type 0
[   55.484863][ T4117] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.101: Freeing blocks not in datazone - block = 0, count = 4096
[   55.498400][ T4117] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.101: Invalid inode bitmap blk 0 in block_group 0
[   55.511176][ T3450] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1)
[   55.534271][ T4117] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem
[   55.542874][ T3450] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0
[   55.554455][ T4127] Falling back ldisc for ttyS3.
[   55.557508][ T4117] EXT4-fs (loop3): 1 orphan inode deleted
[   55.566331][ T4117] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   55.673692][ T4142] lo speed is unknown, defaulting to 1000
[   55.864371][ T4117] EXT4-fs error (device loop3): ext4_search_dir:1474: inode #2: block 16: comm syz.3.101: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[   55.928503][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.008709][ T4148] pimreg: entered allmulticast mode
[   56.019772][ T4148] pimreg: left allmulticast mode
[   56.052264][ T4151] loop3: detected capacity change from 0 to 512
[   56.079300][ T4157] loop1: detected capacity change from 0 to 512
[   56.088420][ T4151] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   56.110692][ T4151] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.108: invalid indirect mapped block 4294967295 (level 1)
[   56.138468][ T4148] netlink: 'syz.1.109': attribute type 10 has an invalid length.
[   56.147958][ T4148] team0: Port device dummy0 added
[   56.156712][ T4151] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.108: invalid indirect mapped block 4294967295 (level 1)
[   56.172735][ T4148] netlink: 'syz.1.109': attribute type 10 has an invalid length.
[   56.203372][ T4151] EXT4-fs (loop3): 2 truncates cleaned up
[   56.209650][ T4151] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   56.224106][ T4148] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   56.251681][ T4157] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   56.284878][ T4157] loop1: detected capacity change from 0 to 256
[   56.293578][ T4157] FAT-fs (loop1): bogus number of FAT sectors
[   56.299737][ T4157] FAT-fs (loop1): Can't find a valid FAT filesystem
[   56.340986][ T4148] team0: Failed to send options change via netlink (err -105)
[   56.381631][ T4148] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   56.390580][ T4148] team0: Port device dummy0 removed
[   56.398894][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.623561][ T4192] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[   56.836463][ T4192] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[   56.891657][ T4202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   56.930403][ T4194] lo speed is unknown, defaulting to 1000
[   57.003630][ T4202] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   57.041896][ T4192] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[   57.269159][ T4206] netlink: 'syz.1.114': attribute type 1 has an invalid length.
[   57.330098][ T4206] 8021q: adding VLAN 0 to HW filter on device bond1
[   57.349744][ T4209] bond1: (slave veth3): Enslaving as an active interface with a down link
[   57.401540][ T4206] bond1: (slave dummy0): making interface the new active one
[   57.410448][ T4206] dummy0: entered promiscuous mode
[   57.415823][ T4206] bond1: (slave dummy0): Enslaving as an active interface with an up link
[   57.528064][ T4192] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[   57.541213][ T4198] xt_CT: No such helper "pptp"
[   57.676414][ T4192] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[   57.698470][ T4192] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[   57.755821][ T4192] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[   57.781590][ T4192] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[   57.891766][ T4222] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.920817][ T4219] lo speed is unknown, defaulting to 1000
[   57.927159][ T4223] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.117'.
[   57.938680][ T4221] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.117'.
[   57.963226][ T4222] netlink: 'syz.1.116': attribute type 10 has an invalid length.
[   57.971002][ T4222] ipvlan0: entered allmulticast mode
[   57.976381][ T4222] veth0_vlan: entered allmulticast mode
[   57.984430][ T4222] team0: Device ipvlan0 failed to register rx_handler
[   57.994297][ T4221] netlink: 'syz.2.117': attribute type 27 has an invalid length.
[   58.032631][ T4221] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.039892][ T4221] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.225772][ T4221] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   58.237434][ T4221] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   58.302837][ T4221] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.312183][ T4221] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.321092][ T4221] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.330256][ T4221] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.413521][ T3541] syz1: Port: 1 Link DOWN
[   58.597024][ T4232] sock: sock_timestamping_bind_phc: sock not bind to device
[   58.763093][ T4240] netlink: 'syz.2.122': attribute type 64 has an invalid length.
[   58.922818][ T4248] loop2: detected capacity change from 0 to 8192
[   58.933180][ T4248] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   59.015182][ T4245] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up
[   59.068607][ T4254] netlink: 'syz.2.126': attribute type 64 has an invalid length.
[   59.173175][ T4258] netlink: 'syz.4.128': attribute type 13 has an invalid length.
[   59.414209][ T4265] netlink: 12 bytes leftover after parsing attributes in process `syz.4.129'.
[   59.423312][ T4265] netlink: 28 bytes leftover after parsing attributes in process `syz.4.129'.
[   59.432244][ T4265] netlink: 12 bytes leftover after parsing attributes in process `syz.4.129'.
[   59.464914][ T4265] netlink: 28 bytes leftover after parsing attributes in process `syz.4.129'.
[   59.473818][ T4265] netlink: 'syz.4.129': attribute type 6 has an invalid length.
[   59.497150][ T4267] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[   59.505016][ T4267] vhci_hcd: default hub control req: 0200 v0000 i0000 l31125
[   59.525262][ T4270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.129'.
[   59.537945][ T4272] netlink: 'syz.1.131': attribute type 13 has an invalid length.
[   59.765528][   T29] kauditd_printk_skb: 167 callbacks suppressed
[   59.765541][   T29] audit: type=1326 audit(1752972868.915:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4255 comm="syz.2.127" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0891b1e9a9 code=0x0
[   59.830774][ T4272] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.839781][ T4272] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.848741][ T4272] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.857742][ T4272] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.961850][ T4265] lo speed is unknown, defaulting to 1000
[   60.328303][ T4279] netlink: 'syz.0.142': attribute type 13 has an invalid length.
[   60.398697][ T4283] sock: sock_timestamping_bind_phc: sock not bind to device
[   60.442603][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.449822][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.563276][ T4281] xt_CT: No such helper "pptp"
[   60.591270][ T4281] loop3: detected capacity change from 0 to 1024
[   60.611476][ T4281] EXT4-fs: Ignoring removed nobh option
[   60.617068][ T4281] EXT4-fs: Ignoring removed bh option
[   60.637659][ T4279] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   60.650736][ T4279] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   60.686184][ T4281] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   60.783958][ T4279] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.793228][ T4279] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.802331][ T4279] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.811448][ T4279] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.894298][ T4307] sd 0:0:1:0: device reset
[   60.958156][ T4278] lo speed is unknown, defaulting to 1000
[   60.984673][ T4312] netlink: 'syz.4.138': attribute type 64 has an invalid length.
[   61.079854][ T4316] netlink: 'syz.4.139': attribute type 13 has an invalid length.
[   61.399415][ T4330] tipc: Enabled bearer <udp:syz2>, priority 10
[   61.408335][   T29] audit: type=1400 audit(1752972870.555:1195): avc:  denied  { name_connect } for  pid=4328 comm="syz.1.144" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[   61.464832][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.476657][ T4330] tipc: Enabled bearer <eth:team0>, priority 0
[   61.503945][   T29] audit: type=1326 audit(1752972870.655:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4336 comm="syz.3.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63484e9a9 code=0x7ffc0000
[   61.651244][   T29] audit: type=1326 audit(1752972870.675:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4336 comm="syz.3.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb63484e9a9 code=0x7ffc0000
[   61.674707][   T29] audit: type=1326 audit(1752972870.675:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4336 comm="syz.3.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63484e9a9 code=0x7ffc0000
[   61.698148][   T29] audit: type=1326 audit(1752972870.675:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4336 comm="syz.3.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63484e9a9 code=0x7ffc0000
[   61.721512][   T29] audit: type=1326 audit(1752972870.685:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4336 comm="syz.3.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb63484e9a9 code=0x7ffc0000
[   61.744825][   T29] audit: type=1326 audit(1752972870.685:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4336 comm="syz.3.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63484e9a9 code=0x7ffc0000
[   61.768224][   T29] audit: type=1326 audit(1752972870.685:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4336 comm="syz.3.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63484e9a9 code=0x7ffc0000
[   61.791663][   T29] audit: type=1326 audit(1752972870.685:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4336 comm="syz.3.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb63484e9a9 code=0x7ffc0000
[   61.810373][ T4339] lo speed is unknown, defaulting to 1000
[   61.826055][ T4338] loop3: detected capacity change from 0 to 1024
[   61.832799][ T4338] EXT4-fs: Ignoring removed nobh option
[   61.842728][ T4338] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   61.853799][ T4338] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   61.886646][ T4338] JBD2: no valid journal superblock found
[   61.892447][ T4338] EXT4-fs (loop3): Could not load journal inode
[   62.200466][ T4344] pimreg3: entered allmulticast mode
[   62.207716][ T4343] pimreg3: left allmulticast mode
[   62.337913][ T4322] macsec1: entered allmulticast mode
[   62.343389][ T4322] bond0: entered allmulticast mode
[   62.348532][ T4322] bond_slave_0: entered allmulticast mode
[   62.354288][ T4322] bond_slave_1: entered allmulticast mode
[   62.390369][ T4322] bond0: left allmulticast mode
[   62.395402][ T4322] bond_slave_0: left allmulticast mode
[   62.401017][ T4322] bond_slave_1: left allmulticast mode
[   62.431571][ T4350] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   62.463669][ T4354] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.150'.
[   62.473703][ T4353] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.150'.
[   62.524254][ T4353] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20001 - 0
[   62.532825][ T4353] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20001 - 0
[   62.541411][ T4353] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20001 - 0
[   62.549908][ T4353] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20001 - 0
[   62.581798][   T36] lo speed is unknown, defaulting to 1000
[   62.587583][   T36] syz0: Port: 1 Link DOWN
[   62.722422][ T4367] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[   62.729937][ T4367] vhci_hcd: default hub control req: 0200 v0000 i0000 l31125
[   62.739655][ T4357] lo speed is unknown, defaulting to 1000
[   62.798204][ T4372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.156'.
[   62.968839][ T4381] loop2: detected capacity change from 0 to 512
[   63.002000][ T4381] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   63.010238][ T4381] EXT4-fs (loop2): orphan cleanup on readonly fs
[   63.017920][ T4381] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   63.032824][ T4381] EXT4-fs (loop2): Cannot turn on quotas: error -117
[   63.049889][ T4381] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.159: bg 0: block 40: padding at end of block bitmap is not set
[   63.068034][ T4381] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem
[   63.078611][ T4390] sock: sock_timestamping_bind_phc: sock not bind to device
[   63.086270][ T4381] EXT4-fs (loop2): 1 truncate cleaned up
[   63.093449][ T4381] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   63.115829][ T4381] pimreg3: entered allmulticast mode
[   63.135185][ T4380] pimreg3: left allmulticast mode
[   63.140659][ T4392] IPVS: set_ctl: invalid protocol: 60 172.30.1.1:20001
[   63.149274][   T36] IPVS: starting estimator thread 0...
[   63.193030][ T4395] random: crng reseeded on system resumption
[   63.213378][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.241297][ T4393] IPVS: using max 2592 ests per chain, 129600 per kthread
[   63.257400][ T4401] validate_nla: 4 callbacks suppressed
[   63.257413][ T4401] netlink: 'syz.0.166': attribute type 64 has an invalid length.
[   63.274455][ T4395] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[   63.298434][ T4402] loop3: detected capacity change from 0 to 512
[   63.324359][ T4399] netlink: 'syz.2.165': attribute type 13 has an invalid length.
[   63.325525][ T4402] EXT4-fs (loop3): 1 orphan inode deleted
[   63.332175][ T4399] netlink: 'syz.2.165': attribute type 27 has an invalid length.
[   63.332914][ T4399] x_tables: ip6_tables: mh match: only valid for protocol 135
[   63.341075][ T4407] Restarting kernel threads ...
[   63.347718][ T4402] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   63.370826][ T2189] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1
[   63.371028][ T4407] Done restarting kernel threads.
[   63.385354][ T4402] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   63.770560][ T4418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.169'.
[   63.779567][ T4418] netlink: 28 bytes leftover after parsing attributes in process `syz.1.169'.
[   63.788539][ T4418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.169'.
[   63.799432][ T4418] netlink: 28 bytes leftover after parsing attributes in process `syz.1.169'.
[   63.808421][ T4418] netlink: 'syz.1.169': attribute type 6 has an invalid length.
[   63.838607][ T4418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.169'.
[   63.890637][ T4418] lo speed is unknown, defaulting to 1000
[   64.084487][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.187696][ T4431] sock: sock_timestamping_bind_phc: sock not bind to device
[   64.198855][ T4429] loop3: detected capacity change from 0 to 8192
[   64.229686][ T4429] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 2068)
[   64.237938][ T4429] FAT-fs (loop3): Filesystem has been set read-only
[   64.369673][ T4437] loop2: detected capacity change from 0 to 512
[   64.386292][ T4437] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   64.405033][ T4435] wireguard0: entered promiscuous mode
[   64.410547][ T4435] wireguard0: entered allmulticast mode
[   64.430725][ T4437] EXT4-fs (loop2): 1 truncate cleaned up
[   64.464727][ T4437] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   64.492729][ T4440] netlink: 'syz.0.178': attribute type 13 has an invalid length.
[   64.500502][ T4440] netlink: 'syz.0.178': attribute type 27 has an invalid length.
[   64.511262][ T4443] Falling back ldisc for ttyS3.
[   64.524833][ T4440] x_tables: ip6_tables: mh match: only valid for protocol 135
[   64.659410][ T4458] loop3: detected capacity change from 0 to 2048
[   64.728258][ T4458] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   64.741941][ T4479] x_tables: ip6_tables: mh match: only valid for protocol 135
[   64.813338][   T29] kauditd_printk_skb: 222 callbacks suppressed
[   64.813354][   T29] audit: type=1326 audit(1752972873.965:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.4.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2131d0e9a9 code=0x7ffc0000
[   64.859737][   T29] audit: type=1326 audit(1752972873.995:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.4.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2131d0e9a9 code=0x7ffc0000
[   64.921493][   T29] audit: type=1326 audit(1752972874.075:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.4.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2131d0e9a9 code=0x7ffc0000
[   64.944874][   T29] audit: type=1326 audit(1752972874.075:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.4.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2131d0e9a9 code=0x7ffc0000
[   64.972466][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.985192][   T29] audit: type=1326 audit(1752972874.075:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.4.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2131d0e9a9 code=0x7ffc0000
[   65.008651][   T29] audit: type=1326 audit(1752972874.075:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.4.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f2131d0e9a9 code=0x7ffc0000
[   65.032097][   T29] audit: type=1326 audit(1752972874.075:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.4.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2131d0e9a9 code=0x7ffc0000
[   65.055500][   T29] audit: type=1326 audit(1752972874.075:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.4.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2131d0e9a9 code=0x7ffc0000
[   65.078829][   T29] audit: type=1326 audit(1752972874.115:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.4.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2131d0e9a9 code=0x7ffc0000
[   65.102230][   T29] audit: type=1326 audit(1752972874.115:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.4.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2131d0e9a9 code=0x7ffc0000
[   65.167310][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.202326][ T4490] netlink: 12 bytes leftover after parsing attributes in process `syz.3.183'.
[   65.213228][ T4490] netlink: 'syz.3.183': attribute type 6 has an invalid length.
[   65.221376][ T4486] netlink: 'syz.1.193': attribute type 13 has an invalid length.
[   65.363007][ T4487] loop2: detected capacity change from 0 to 1024
[   65.370628][ T4487] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   65.380159][ T4487] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[   65.390042][ T4487] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[   65.406154][ T4487] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   65.411210][ T4490] lo speed is unknown, defaulting to 1000
[   65.416357][ T4487] EXT4-fs error (device loop2): ext4_get_journal_inode:5796: inode #5: comm syz.2.182: unexpected bad inode w/o EXT4_IGET_BAD
[   65.435609][ T4487] EXT4-fs (loop2): no journal found
[   65.440850][ T4487] EXT4-fs (loop2): can't get journal size
[   65.454648][ T4487] EXT4-fs error (device loop2): __ext4_fill_super:5500: inode #2: comm syz.2.182: iget: special inode unallocated
[   65.492897][ T4487] EXT4-fs (loop2): get root inode failed
[   65.498658][ T4487] EXT4-fs (loop2): mount failed
[   65.543354][ T4498] bridge_slave_0: left allmulticast mode
[   65.549150][ T4498] bridge_slave_0: left promiscuous mode
[   65.554910][ T4498] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.571476][ T4498] bridge_slave_1: left allmulticast mode
[   65.577227][ T4498] bridge_slave_1: left promiscuous mode
[   65.583016][ T4498] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.593133][ T4507] IPv6: NLM_F_CREATE should be specified when creating new route
[   65.665018][ T2959] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   65.673161][ T2959] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   65.690698][ T4498] bond0: (slave bond_slave_0): Releasing backup interface
[   65.700533][ T4498] bond0: (slave bond_slave_1): Releasing backup interface
[   65.736151][ T4498] team0: Port device team_slave_0 removed
[   65.801651][ T4498] team0: Port device team_slave_1 removed
[   65.807920][ T4498] batman_adv: batadv0: Removing interface: batadv_slave_0
[   65.819474][ T4498] batman_adv: batadv0: Removing interface: batadv_slave_1
[   65.838153][ T4516] netlink: 'syz.2.190': attribute type 13 has an invalid length.
[   65.902911][ T4518] loop3: detected capacity change from 0 to 512
[   65.920591][ T4518] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   65.947099][ T4521] loop4: detected capacity change from 0 to 1024
[   65.964343][ T4518] EXT4-fs (loop3): 1 truncate cleaned up
[   66.019392][   T51] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 15)
[   66.041976][   T51] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117
[   66.054465][   T51] EXT4-fs (loop4): This should not happen!! Data will be lost
[   66.054465][   T51] 
[   66.094823][ T4529] netlink: 'syz.4.194': attribute type 13 has an invalid length.
[   66.295227][ T4537] loop2: detected capacity change from 0 to 512
[   66.304717][ T4537] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   66.321414][ T4537] EXT4-fs (loop2): 1 truncate cleaned up
[   66.420001][ T4543] loop1: detected capacity change from 0 to 256
[   66.546174][ T4550] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4550 comm=syz.2.201
[   66.621277][ T4552] lo speed is unknown, defaulting to 1000
[   66.742417][ T4556] loop1: detected capacity change from 0 to 8192
[   66.767840][ T4556] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 2068)
[   66.776098][ T4556] FAT-fs (loop1): Filesystem has been set read-only
[   67.065891][ T4558] team0: Port device dummy0 added
[   67.087739][ T4569] lo speed is unknown, defaulting to 1000
[   67.093619][ T4570] loop1: detected capacity change from 0 to 512
[   67.113451][ T4558] team0: Port device dummy0 removed
[   67.120581][ T4558] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   67.138318][ T4570] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   67.175860][ T4570] EXT4-fs (loop1): 1 truncate cleaned up
[   67.804656][ T4589] loop4: detected capacity change from 0 to 512
[   67.871375][ T4589] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   67.893175][ T4589] EXT4-fs (loop4): 1 truncate cleaned up
[   67.947595][ T4599] __nla_validate_parse: 4 callbacks suppressed
[   67.947622][ T4599] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.216'.
[   67.972549][ T4599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.216'.
[   68.249784][ T4619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1542 sclass=netlink_route_socket pid=4619 comm=syz.3.220
[   68.250994][ T4618] pim6reg: entered allmulticast mode
[   68.256419][ T4619] loop3: detected capacity change from 0 to 512
[   68.281893][ T4622] validate_nla: 15 callbacks suppressed
[   68.281910][ T4622] netlink: 'syz.2.224': attribute type 13 has an invalid length.
[   68.297630][ T4623] pim6reg: left allmulticast mode
[   68.600950][ T4631] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4631 comm=syz.0.226
[   68.639994][ T4626] xt_CT: No such helper "pptp"
[   68.645792][ T4626] loop2: detected capacity change from 0 to 1024
[   68.646228][ T4626] EXT4-fs: Ignoring removed nobh option
[   68.646252][ T4626] EXT4-fs: Ignoring removed bh option
[   68.677875][ T4635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.226'.
[   68.791081][ T4636] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4636 comm=syz.0.226
[   69.042550][ T4614] 9pnet_fd: p9_fd_create_tcp (4614): problem connecting socket to 127.0.0.1
[   69.069705][ T4639] netlink: 'syz.3.227': attribute type 13 has an invalid length.
[   69.222643][ T4641] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   69.245305][ T4646] loop2: detected capacity change from 0 to 512
[   69.263677][ T4646] /dev/loop2: Can't open blockdev
[   69.281251][ T4643] loop1: detected capacity change from 0 to 512
[   69.284592][ T4649] netlink: 'syz.4.232': attribute type 13 has an invalid length.
[   69.288318][ T4643] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   69.325905][ T4643] EXT4-fs (loop1): 1 truncate cleaned up
[   69.389714][ T4655] netlink: 'syz.0.233': attribute type 13 has an invalid length.
[   69.464866][ T4661] netlink: 'syz.4.235': attribute type 13 has an invalid length.
[   69.483817][ T4658] netlink: 'syz.1.234': attribute type 13 has an invalid length.
[   69.491679][ T4658] netlink: 'syz.1.234': attribute type 27 has an invalid length.
[   69.504690][ T4658] x_tables: ip6_tables: mh match: only valid for protocol 135
[   69.565698][ T4665] netlink: 'syz.4.238': attribute type 13 has an invalid length.
[   69.658250][ T4671] netlink: 'syz.4.239': attribute type 13 has an invalid length.
[   70.277697][ T4677] netlink: 132 bytes leftover after parsing attributes in process `syz.3.250'.
[   70.323065][   T29] kauditd_printk_skb: 425 callbacks suppressed
[   70.323113][   T29] audit: type=1400 audit(70.224:1859): avc:  denied  { read write } for  pid=4676 comm="syz.2.240" name="mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   70.352081][   T29] audit: type=1400 audit(70.224:1860): avc:  denied  { open } for  pid=4676 comm="syz.2.240" path="/dev/mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   70.374847][   T29] audit: type=1400 audit(70.234:1861): avc:  denied  { ioctl } for  pid=4676 comm="syz.2.240" path="/dev/mISDNtimer" dev="devtmpfs" ino=250 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   70.399081][   T29] audit: type=1326 audit(70.234:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4676 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0891b1e9a9 code=0x7ffc0000
[   70.421805][   T29] audit: type=1326 audit(70.234:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4676 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0891b1e9a9 code=0x7ffc0000
[   70.444490][   T29] audit: type=1326 audit(70.234:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4676 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f0891b1e9a9 code=0x7ffc0000
[   70.467184][   T29] audit: type=1326 audit(70.234:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4676 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0891b1e9a9 code=0x7ffc0000
[   70.489852][   T29] audit: type=1326 audit(70.234:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4676 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0891b1e9a9 code=0x7ffc0000
[   70.512476][   T29] audit: type=1326 audit(70.234:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4676 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0891b1d310 code=0x7ffc0000
[   70.535192][   T29] audit: type=1326 audit(70.234:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4676 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0891b1e9a9 code=0x7ffc0000
[   70.610192][ T4677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.250'.
[   70.701370][ T4684] netlink: 'syz.0.242': attribute type 13 has an invalid length.
[   70.834716][ T4693] loop1: detected capacity change from 0 to 1024
[   70.862122][ T4693] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   70.873196][ T4693] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   70.882852][ T4697] loop4: detected capacity change from 0 to 1024
[   70.883284][ T4697] EXT4-fs: Ignoring removed nobh option
[   70.895153][ T4697] EXT4-fs: Ignoring removed bh option
[   70.909131][ T4693] JBD2: no valid journal superblock found
[   70.914934][ T4693] EXT4-fs (loop1): Could not load journal inode
[   70.931211][ T4680] xt_CT: No such helper "pptp"
[   70.957910][ T4697] EXT4-fs mount: 14 callbacks suppressed
[   70.957928][ T4697] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.991542][ T4701] x_tables: ip6_tables: mh match: only valid for protocol 135
[   71.030820][ T4708] Cannot find del_set index 2 as target
[   71.041906][ T4708] SELinux: security_context_str_to_sid (��) failed with errno=-22
[   71.141522][ T4714] batman_adv: batadv0: Adding interface: team0
[   71.147726][ T4714] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.172952][ T4714] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[   71.207119][ T4714] loop1: detected capacity change from 0 to 1024
[   71.228304][ T4714] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   71.263726][ T4714] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm +}[@: Allocating blocks 449-513 which overlap fs metadata
[   71.283196][ T4713] EXT4-fs (loop1): pa ffff888106a44620: logic 48, phys. 177, len 21
[   71.291369][ T4713] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4
[   71.297413][ T4715] lo speed is unknown, defaulting to 1000
[   71.317826][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.386806][ T4724] loop1: detected capacity change from 0 to 512
[   71.409924][ T4724] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   71.423622][ T4724] EXT4-fs (loop1): 1 truncate cleaned up
[   71.444961][ T4724] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   71.463527][ T4726] lo speed is unknown, defaulting to 1000
[   71.590519][ T4728] SELinux: failed to load policy
[   71.620393][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.848090][ T4751] SELinux:  Context '8z@���
[   71.848090][ T4751]  is not valid (left unmapped).
[   71.858927][ T4751] SELinux:  Context �Y7��j
[   71.858927][ T4751] u/$2Sٟ�2'��k�s2-�	vj�d��	�#���,�N<
[   71.858927][ T4751] �:�E]Y��\?�ͼ�=�ً�1�KI�������k��{kL^���0�����}�4n�r��}���
pį����N�w
���yxiu?+������H~���F���1�W����jm	&8�UۂV�����N���2�)Gx�V�%�5��xeRM4r4c���J�s�HU&����'p��2EMM�k&��c�bU���,�,������f�@��8�������b��D��%$���f�=����8�@���k�I|����w �O��x&KCH;��x-��K��o�4�i!��Oi�%ڂ2��F"2�E,P] ��k�? is not valid (left unmapped).
[   71.903484][ T4751] SELinux:  Context *m�kX�I��$h�x4۫�K�M� is not valid (left unmapped).
[   71.917113][ T4751] SELinux:  Context ���KM*�,h�c��I�Ǿ�û��̋y���+�.�+y��0�[pr�;J�A9�����Iq�j�Ǽ=7)o
M{���nF��=����Xmnx��r�D�㑉��垳�4��TW
��}�t�����%ȖY��^s�lF����B�53��h�m���5�}��;J�����Xom%~"�~9mM��~alʺL�I8��i��<B�3
[   71.917113][ T4751] \�,:��gՀ^!�(D�.�0���� is not valid (left unmapped).
[   71.946937][ T4751] SELinux:  Context 5�}��M3�p�X:����]�Q?��֧�p����{��O)B��R���D��P_N�[��`�3�?"�Mp$�=J�9[Ճ�CZ<R is not valid (left unmapped).
[   71.961636][ T4757] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4757 comm=syz.0.258
[   71.975018][ T4755] dummy0 speed is unknown, defaulting to 1000
[   71.975021][ T4751] SELinux:  Context 77Q�����.�y��H.j��o���@���M����ɭ+�Š��~���o��)�ơ�s�#��{�2t������f���Л�����7�ZDt�ǩ)�X��.�9`�	\^�� is not valid (left unmapped).
[   71.981118][ T4755] dummy0 speed is unknown, defaulting to 1000
[   71.997693][ T4751] SELinux:  Context A��)��t�'����*'ĺ����k�����ش�L�&��z�
[   71.997693][ T4751] :_t� �0��H^����B��>&��Zw8	lX&�D;t�d�B�I�ݛ~���L
[   71.997693][ T4751] uSċ�kxI��R��I$4"�l��X�
7f9�٬��b���B��|72�*�
��k���NM������ is not valid (left unmapped).
[   72.005640][ T4755] dummy0 speed is unknown, defaulting to 1000
[   72.028562][ T4751] SELinux:  Context �W�X�E��][O�:Ѹ���o�߭O���bZD�fq	:�~�t6�uY�x���(��Q��8����NPZ��eo����Q[aS��I>$YiL�.([	P���%U.T8�}zK/7�o���g�W�f$���C%{}9��঴@y�o�P���'�b��9Z-��S��k�6��1E�A[T�<; is not valid (left unmapped).
[   72.037721][ T4755] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   72.086020][ T4755] dummy0 speed is unknown, defaulting to 1000
[   72.093404][ T4755] dummy0 speed is unknown, defaulting to 1000
[   72.111735][ T4755] dummy0 speed is unknown, defaulting to 1000
[   72.119179][ T4755] dummy0 speed is unknown, defaulting to 1000
[   72.126081][ T4755] dummy0 speed is unknown, defaulting to 1000
[   72.240019][ T4762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.263'.
[   72.256388][ T4762] 8021q: adding VLAN 0 to HW filter on device bond1
[   72.270399][ T4762] 8021q: adding VLAN 0 to HW filter on device bond1
[   72.277834][ T4762] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[   72.290629][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.290701][ T4762] bond1: (slave vcan1): Error -95 calling set_mac_address
[   72.461213][ T4766] 8021q: adding VLAN 0 to HW filter on device bond1
[   72.501935][ T4768] bond1: (slave veth3): Enslaving as an active interface with a down link
[   72.512901][ T4766] bond1: (slave dummy0): making interface the new active one
[   72.521763][ T4766] dummy0: entered promiscuous mode
[   72.527088][ T4766] bond1: (slave dummy0): Enslaving as an active interface with an up link
[   72.966913][ T4786] loop1: detected capacity change from 0 to 512
[   73.080712][ T4786] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.126968][ T4786] EXT4-fs error (device loop1): ext4_empty_dir:3075: inode #12: comm syz.1.270: invalid size
[   73.200538][ T4798] loop4: detected capacity change from 0 to 512
[   73.217759][ T4798] EXT4-fs (loop4): orphan cleanup on readonly fs
[   73.246963][ T4798] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.274: bg 0: block 248: padding at end of block bitmap is not set
[   73.281619][ T4786] netlink: 40 bytes leftover after parsing attributes in process `syz.1.270'.
[   73.292936][ T4793] siw: device registration error -23
[   73.328845][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.343629][ T4798] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.274: Failed to acquire dquot type 1
[   73.407472][ T4798] EXT4-fs (loop4): 1 truncate cleaned up
[   73.444220][ T4798] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   73.497852][ T4808] validate_nla: 7 callbacks suppressed
[   73.497864][ T4808] netlink: 'syz.0.278': attribute type 13 has an invalid length.
[   73.541509][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.674434][ T4811] lo speed is unknown, defaulting to 1000
[   73.680824][ T4811] dummy0 speed is unknown, defaulting to 1000
[   73.807827][ T4823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.282'.
[   73.883786][ T4828] netlink: 'syz.3.284': attribute type 13 has an invalid length.
[   73.959955][ T4830] sch_tbf: burst 128 is lower than device ip6tnl0 mtu (1452) !
[   73.991452][ T4830] xt_CT: You must specify a L4 protocol and not use inversions on it
[   74.020811][ T4835] netlink: 'syz.0.287': attribute type 13 has an invalid length.
[   74.107206][ T4833] netlink: 16 bytes leftover after parsing attributes in process `syz.3.286'.
[   74.160095][ T4841] netlink: 'syz.3.289': attribute type 13 has an invalid length.
[   74.209967][ T4842] x_tables: ip6_tables: mh match: only valid for protocol 135
[   74.237013][ T4844] netlink: 'syz.3.290': attribute type 13 has an invalid length.
[   74.304541][ T4846] bond2: entered promiscuous mode
[   74.309634][ T4846] bond2: entered allmulticast mode
[   74.316210][ T4846] 8021q: adding VLAN 0 to HW filter on device bond2
[   74.322030][ T4852] netlink: 'syz.3.292': attribute type 13 has an invalid length.
[   74.333100][ T4846] bond2 (unregistering): Released all slaves
[   74.457256][ T4855] lo speed is unknown, defaulting to 1000
[   74.464079][ T4855] dummy0 speed is unknown, defaulting to 1000
[   74.631303][ T4863] lo speed is unknown, defaulting to 1000
[   74.638419][ T4863] dummy0 speed is unknown, defaulting to 1000
[   74.688101][ T4869] xt_connbytes: Forcing CT accounting to be enabled
[   74.695317][ T4869] Cannot find set identified by id 0 to match
[   74.773034][ T4872] netlink: 20 bytes leftover after parsing attributes in process `syz.4.297'.
[   74.807579][ T4872] loop4: detected capacity change from 0 to 512
[   74.839965][ T4872] EXT4-fs: Ignoring removed nomblk_io_submit option
[   74.867979][ T4872] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   74.894784][ T4872] EXT4-fs (loop4): 1 truncate cleaned up
[   74.901457][ T4872] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.949789][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.977529][ T4878] xt_hashlimit: max too large, truncated to 1048576
[   74.994047][ T4880] netlink: 'syz.4.299': attribute type 13 has an invalid length.
[   75.101276][ T4889] netlink: 'syz.4.302': attribute type 13 has an invalid length.
[   75.218001][ T4892] netlink: 'syz.4.303': attribute type 13 has an invalid length.
[   75.289638][ T4894] lo speed is unknown, defaulting to 1000
[   75.314270][ T4894] dummy0 speed is unknown, defaulting to 1000
[   75.349214][   T29] kauditd_printk_skb: 638 callbacks suppressed
[   75.349231][   T29] audit: type=1400 audit(587.316:2505): avc:  denied  { read write } for  pid=4899 comm="syz.1.305" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   75.379167][   T29] audit: type=1400 audit(587.316:2506): avc:  denied  { open } for  pid=4899 comm="syz.1.305" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   75.409771][ T4898] loop4: detected capacity change from 0 to 512
[   75.420850][ T4898] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   75.438586][   T29] audit: type=1400 audit(587.406:2507): avc:  denied  { getopt } for  pid=4901 comm="syz.0.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   75.450751][ T4902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.307'.
[   75.457779][   T29] audit: type=1400 audit(587.406:2508): avc:  denied  { create } for  pid=4901 comm="syz.0.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   75.487046][ T4898] EXT4-fs (loop4): 1 truncate cleaned up
[   75.493394][ T4898] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.499074][ T4902] macvtap1: entered promiscuous mode
[   75.511375][ T4902] bond0: entered promiscuous mode
[   75.516427][ T4902] bond_slave_0: entered promiscuous mode
[   75.522272][ T4902] bond_slave_1: entered promiscuous mode
[   75.528455][ T4902] dummy0: entered promiscuous mode
[   75.534028][ T4902] macvtap1: entered allmulticast mode
[   75.539493][ T4902] bond0: entered allmulticast mode
[   75.544716][ T4902] bond_slave_0: entered allmulticast mode
[   75.550484][ T4902] bond_slave_1: entered allmulticast mode
[   75.556341][ T4902] dummy0: entered allmulticast mode
[   75.562132][ T4902] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   75.573169][ T4906] wireguard0: entered promiscuous mode
[   75.578769][ T4906] wireguard0: entered allmulticast mode
[   75.648497][ T2996] ==================================================================
[   75.656613][ T2996] BUG: KCSAN: data-race in __dentry_kill / step_into
[   75.663295][ T2996] 
[   75.665623][ T2996] read-write to 0xffff888106a50b40 of 4 bytes by task 3545 on cpu 0:
[   75.673692][ T2996]  __dentry_kill+0x230/0x4b0
[   75.678285][ T2996]  dput+0x5e/0xd0
[   75.681923][ T2996]  do_unlinkat+0x299/0x4c0
[   75.686362][ T2996]  __x64_sys_unlink+0x2e/0x40
[   75.691054][ T2996]  x64_sys_call+0x22a6/0x2fb0
[   75.695749][ T2996]  do_syscall_64+0xd2/0x200
[   75.700265][ T2996]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.706169][ T2996] 
[   75.708499][ T2996] read to 0xffff888106a50b40 of 4 bytes by task 2996 on cpu 1:
[   75.716050][ T2996]  step_into+0xe3/0x820
[   75.720220][ T2996]  walk_component+0x162/0x220
[   75.724904][ T2996]  path_lookupat+0xfe/0x2a0
[   75.729425][ T2996]  filename_lookup+0x147/0x340
[   75.734200][ T2996]  do_readlinkat+0x7d/0x320
[   75.738729][ T2996]  __x64_sys_readlink+0x47/0x60
[   75.743589][ T2996]  x64_sys_call+0x2cf3/0x2fb0
[   75.748267][ T2996]  do_syscall_64+0xd2/0x200
[   75.752771][ T2996]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.758666][ T2996] 
[   75.760984][ T2996] value changed: 0x00300008 -> 0x00004008
[   75.766697][ T2996] 
[   75.769026][ T2996] Reported by Kernel Concurrency Sanitizer on:
[   75.775179][ T2996] CPU: 1 UID: 0 PID: 2996 Comm: udevd Not tainted 6.16.0-rc6-syzkaller-00279-gbf61759db409 #0 PREEMPT(voluntary) 
[   75.787164][ T2996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   75.797222][ T2996] ==================================================================
[   75.845497][   T29] audit: type=1400 audit(587.816:2509): avc:  denied  { map } for  pid=4897 comm="syz.4.306" path="/60/bus/blkio.bfq.avg_queue_size" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   75.872970][   T29] audit: type=1400 audit(587.846:2510): avc:  denied  { read } for  pid=4913 comm="syz.3.309" path="socket:[8494]" dev="sockfs" ino=8494 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   75.896508][   T29] audit: type=1400 audit(587.846:2511): avc:  denied  { setopt } for  pid=4913 comm="syz.3.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   75.915329][   T29] audit: type=1400 audit(587.846:2512): avc:  denied  { read } for  pid=4913 comm="syz.3.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   75.957285][ T4292] Process accounting resumed
[   75.963710][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.976369][   T29] audit: type=1326 audit(587.946:2513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4913 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63484e9a9 code=0x7ffc0000
[   75.999197][   T29] audit: type=1326 audit(587.946:2514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4913 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63484e9a9 code=0x7ffc0000