last executing test programs:

2.486210749s ago: executing program 1 (id=89):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070080000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000780)='mm_page_free\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@jqfmt_vfsold}, {@minixdf}, {@jqfmt_vfsold}, {@bsdgroups}, {@resuid}, {@dioread_nolock}, {@usrjquota}, {@discard}, {@jqfmt_vfsv1}]}, 0x1, 0x564, &(0x7f0000002bc0)="$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")
r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = open(&(0x7f0000000180)='./bus\x00', 0x4047e, 0x0)
syz_open_procfs(0x0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r3, 0x0)
ftruncate(r1, 0x1f)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x30}}, 0x24000000)
write$cgroup_type(r2, &(0x7f0000000200), 0x175d9003)

1.880029806s ago: executing program 1 (id=94):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$inet(0x2, 0x3, 0x6)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000042c0)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000002000000ac1e010100"/200], 0x190)
prlimit64(0x0, 0xe, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M")
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0)
unlink(&(0x7f0000000040)='./file0\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
quotactl_fd$Q_SETINFO(r2, 0xffffffff80000600, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5})
write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x99, 0xb}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000001b703000000000000850000000600000018110000a174377bc5c22bb7dd707b2631449310409a11e1f3fe30838673ba7f9e753708b061405bb9a51e54c3b27b2d7d673ba6f76cb8c769ed4e0bbce2f1ca895a03f223e0b6e50fd322c4a1d8d9b4a5464648eca886b09cc241a3f311f0e9af6f4139239697c1c3dc4b47a6581091838b603c9606954fd320de870ee0b411cc6ab4b94ccb39ad1adf8c45863c246b979fffca05cf9a55835926a40c409e1b", @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffd82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r4 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x2, @empty, 'team_slave_1\x00'}}, 0x1e)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x6000000, [{0xc, 0x40000000}, {0x43}, {}]}]}}, &(0x7f0000000f40)=""/4096, 0x3e, 0x1000, 0x9}, 0x20)
r5 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r5, &(0x7f00000004c0)={0x18, 0x0, {0x2, @local, 'veth1_to_batadv\x00'}}, 0x1e)
socket$pppoe(0x18, 0x1, 0x0)
request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f0000000180)='\x00\xfdD\x86\xb4\x82\n\xbb\x8f\x13$\x82\xc83C\x16\xa2\x11%F\xe52+b\xd3\xe7U\xa4^\xc0|ih\xfa\xba\xd7\xe1\x94\xf7\xda\xfdC\xb5\xa4o\xad\x89\xb1', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0)
r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
ioctl$SG_NEXT_CMD_LEN(r7, 0xc0481273, 0x0)

1.792072042s ago: executing program 2 (id=96):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = memfd_secret(0x0)
io_setup(0x4, &(0x7f0000002c40)=<r2=>0x0)
r3 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8)
io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000000040)={0xfffffffffffffdef, 0x0, 0x0, 0x5, 0x0, r3, 0x0}])
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/87, 0x57}, {&(0x7f0000000440)=""/185, 0xb9}], 0x2, 0x8000, 0x0)
r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setsig(r5, 0xa, 0x13)
fcntl$setlease(r5, 0x400, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)
fcntl$setlease(r5, 0x400, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x2, r4}, 0x90)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18030000fffffffb000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200000d000000b7020000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000001200)='signal_generate\x00', r7}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000540)='rxrpc_rx_icmp\x00', r1}, 0x3)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000000000000000009040000000000000000000001050000a74a1bd6d1"], 0x0, 0x5a}, 0x20)
r8 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$selinux_load(r8, 0x0, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)

1.787366413s ago: executing program 3 (id=97):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x404, &(0x7f00000002c0)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYRES8], 0x1, 0x122e, &(0x7f0000002580)="$eJzs3MFrHFUcB/BftqlZU5tErdX2oA+9eBqaHDwJEiQFyYJSG6EVhCmZ6JJxN2SWwIoYe/Lq0b9BPHpTxH8gV/8Cb7mIpxzEEXZSk60NmlqyRT+fy/zIb76Z99hl4S3v7f7rX368uVFlG/kgWlNT0dqKSAcpUrTinhdXm+ut26vLnc7KjZSuL99cfC2lNPfSD+9/+s3LPw4uvPft3Hczsbfwwf4vSz/vXd67sv/7zY+6VepWqdcfpDzd6fcH+Z2ySOvdajNL6Z2yyKsidXtVsT3W3yj7W1vDlPfWL85ubRdVlfLeMG0WwzTop8H2MOUf5t1eyrIsXZwNTnT+729Z+/qgrr+PqOvz8UTUdV0/GbMxFU/FxZiLzyPi6Xgmno1L8Vxcjufjhbgyuusshg8AAAAAAAAAAAAAAAAAAAD/Hwej0/zj5/8vHJ7/n48F5/8BAAAAAAAAAAAAAAAAAADgDLx76/bqcqezciOldkT5xc7azlpzbfrLG9GNMoq4FvPxW4xO/zea+vpbnZVraeRcROwe5nd31s6N5xdHPydwmJ8e9e7lF5t8irvlsfxMzDb5dkQUsRTzcenY89tH+aUH5tvx6ivHnp/FfL0b0Y8y1kfPPsp/tpjSm2937stfHd0HAAAA/wVZ+tPC+Pq3Wb9n2Un9Jn+K7wfuW19Px9Xpyc6diGr4yWZelsX2eNH+y18mVsw8HsM4TdH6N/GZOLHVGmt99VPEpGf6WBTtw/fyo/iHU5OfzkMUdx/J3MeLCX8wcSaOXvRJjwQAAAAAAAAAAIDT+Cf7AX+Nh95FOB0P2Fn2xmSmCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MEOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAoQIAAP//uXHE5A==")
syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x1)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x401070cd, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000140)=ANY=[], 0xfe6f)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700)
openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f00000000c0), 0xfea7)
write$cgroup_subtree(r4, 0x0, 0x200600)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r2})
mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="74722de12b18ff3bde3ebd8e077e2b38032b205d72660240000053ca380f8f1227b8fec9bdfb3529903fa7f66a782dde703b1eb20914d5139447c856bac978c57acde0866a6ab4822e619e2e6570862656c9c7edd671e52fe340a86e5cabe773ee8400a0a046c2a8a122b72afc1439160b761a07abfa98b963085594d082025cf57f1ba2eabda6d31fc62b7c4aeda4b3fdac25084072fa2149", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

1.595951457s ago: executing program 1 (id=99):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x50, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0)
mq_timedsend(r3, &(0x7f0000000380), 0x2000, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a103010000000000000002000020d3"])

1.591091528s ago: executing program 2 (id=100):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x80000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000f6498b20a3e100000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703360000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x200000000006, 0x0, 0x2, 0x7ffc0802}]})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0x4, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f00000005c0))
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
brk(0x20ffc004)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
syncfs(r6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$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")
unlink(&(0x7f0000000080)='./file0\x00')
shmget$private(0x0, 0x400000, 0x20, &(0x7f000000e000/0x400000)=nil)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10)
openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="9c0000002acd571deb485829c2c7161f2966080e5d940861893e8c00000000000000de651a5124c8b442e84ff3691abe0cd835b888140931829723f92ef006ca1b905bdcc6ac3338103e1c7fcee71425394f15ea35ad69745afcf27edc5076", @ANYRES16=r9, @ANYBLOB="01002cbd7000ffdbdf251500000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000800)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r11 = fcntl$dupfd(r7, 0x0, r7)
setsockopt$IPT_SO_SET_REPLACE(r11, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x1e8, 0xc, 0x5002004a, 0xb, 0x310, 0xea02, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x248)

1.510461044s ago: executing program 1 (id=103):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000600)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000006c0)=""/207, 0xcf, 0x0, &(0x7f00000007c0)=""/173, 0xad}, &(0x7f0000001140)=0x40)
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x80a003, &(0x7f0000002440)={[{@test_dummy_encryption}, {@commit={'commit', 0x3d, 0x7f}}, {@norecovery}, {@nojournal_checksum}, {@noload}, {@norecovery}]}, 0x1, 0x4e9, &(0x7f00000000c0)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4)
r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, r1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
io_submit(0x0, 0x0, 0x0)
ustat(0x2, &(0x7f0000000040))
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x120d, &(0x7f00000024c0)="$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")
r4 = open(&(0x7f00000002c0)='./file0\x00', 0x14927e, 0x0)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
pwritev(r5, &(0x7f00000001c0)=[{&(0x7f00000000c0)="95", 0x1}], 0x1, 0x4010005, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r5)
pipe2(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
r6 = getpid()
sched_setscheduler(r6, 0x1, &(0x7f0000000100)=0x5)
pipe(&(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0xc7)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, r9, 0x0, 0x1000, 0x0)
splice(r7, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x0)
write$binfmt_aout(r8, &(0x7f00000000c0)=ANY=[], 0x20)
fallocate(r4, 0x0, 0x0, 0x1000f4)

1.510021344s ago: executing program 4 (id=104):
socket$rxrpc(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil)
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private}}, 0x1e)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'erspan0\x00', &(0x7f0000000700)={'tunl0\x00', <r1=>0x0, 0x7800, 0x1, 0x4, 0x2b, {{0x37, 0x4, 0x2, 0x30, 0xdc, 0x68, 0x0, 0x7, 0x4, 0x0, @local, @empty, {[@cipso={0x86, 0x56, 0x3, [{0x5, 0x7, "d58a97d330"}, {0x6, 0xd, "1c052fc7c22f69eef4fdfe"}, {0x2, 0x5, "d04470"}, {0x1, 0x5, "8f3c02"}, {0x7, 0xd, "4aaf30f09ca705a8716e55"}, {0x6, 0x9, "7c69eff9361461"}, {0x6, 0x11, "1353f20c105cbbdc31c9ed3a086f0e"}, {0x2, 0x8, "28bf5edbfbde"}, {0x1, 0x3, "8c"}]}, @timestamp_addr={0x44, 0x34, 0x40, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x2d}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x10000}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x1}, {@broadcast, 0x8}, {@multicast2, 0xab200000}]}, @timestamp_prespec={0x44, 0x14, 0x91, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0xd}, 0x5}, {@private=0xa010100, 0x401}]}, @noop, @lsrr={0x83, 0xf, 0x68, [@loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x18}]}, @timestamp={0x44, 0x18, 0x82, 0x0, 0x8, [0xe, 0x10001, 0x6, 0x8, 0xfff]}]}}}}})
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=0xffffffffffffffff, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1d, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000480)={0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r4}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x5, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000c600010000000100950000000000000095"], &(0x7f0000000100)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x90)
r7 = socket$pptp(0x18, 0x1, 0x2)
pipe2$9p(&(0x7f0000000000)={<r8=>0xffffffffffffffff}, 0x0)
r9 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
ioctl$sock_SIOCGPGRP(r9, 0x8904, &(0x7f0000000800)=<r10=>0x0)
ptrace(0x10, r10)
splice(r8, 0x0, r9, 0x0, 0x16, 0x0)
ioctl$KDSKBENT(r9, 0x4b47, &(0x7f00000002c0)={0xd5, 0x1, 0xd})
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r9, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x94, r11, 0x200, 0x70bd2d, 0x9fe2, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd5}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x90000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_CON={0x4}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40800}, 0x4000800)
bind$pptp(r7, &(0x7f00000006c0)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r7, &(0x7f0000000900)={0x18, 0x2, {0x0, @loopback}}, 0x1e)
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
brk(0x20ffc004)
mmap$qrtrtun(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x8, 0x69923e9f0c852c10, 0xffffffffffffffff, 0x1)

1.400747412s ago: executing program 2 (id=106):
r0 = syz_io_uring_setup(0xe42, 0x0, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000200)=<r2=>0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r4}, 0x10)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x18})
io_uring_enter(r0, 0x769b, 0x0, 0x1, 0x0, 0x0)

1.344108737s ago: executing program 2 (id=107):
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040", 0xa2}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

1.311356119s ago: executing program 2 (id=108):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000140), 0x10)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000a9de", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0)
read(r0, &(0x7f0000001480)=""/4096, 0x38)

1.060970948s ago: executing program 3 (id=110):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
statx(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0) (fail_nth: 11)

703.889705ms ago: executing program 1 (id=111):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

703.676425ms ago: executing program 3 (id=112):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x0, 0x3}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x0, 0x3}, 0x10)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

588.075475ms ago: executing program 4 (id=113):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10)
utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x20d302, 0x0}, 0x0)
r2 = dup3(r0, r1, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, 0x0, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88)

548.768937ms ago: executing program 3 (id=114):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399eb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24}, 0x90)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x2, 0x80805, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000100))
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100"], 0x64}}, 0x0)

437.625716ms ago: executing program 4 (id=115):
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000002030500000000000000000000000000090002000016"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1a}, 0x1c)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x952c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0x5a8}], 0x1, 0x0, 0x6000, 0x2c}, 0x4)

385.19352ms ago: executing program 3 (id=116):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x80000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000f6498b20a3e100000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703360000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x200000000006, 0x0, 0x2, 0x7ffc0802}]})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0x4, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f00000005c0))
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
brk(0x20ffc004)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
syncfs(r6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$eJzs3U9rY1UUAPDz0jR9OosUcaMIPtCFqzJ166ZRRhC7UiKoCw3ODEgSBqYQmArGruYTuPR7+BHcuPEbDLgV3E0XlSfvX/7ga402VXR+v9Xh3nfuPXm3TbLJeZ+/Mh3ffZDE2dMnkaZJdI7iKM6T2I9ONL6JbgAA/x/neR6/5mWY5JUNM7udGy0MALgx1ef/X/rgBwD+4z78+JP3B8fHdz7IsjRe6j+eDZOImD6eDav5wf34MiZxL25HPy4i8oUqfve94zvRzQr78fp0PhsWmdPPfqzXH/wSUeYfRj/22/MPs8pK/nw23I3nI4vB/d2m1H682J7/Zkt+DHvxxmsr9R9EP376Ih7EJO5GkbvM//owy97Jv3361afFNkV+0onhXnldKfcFCQAAAAAAAAAAAAAAAAAAAACA7TrIsqRq31P27ymG6v47Oxfl/EHW2F/vz1PlJ81CVX+gvOmWM8/ju6a/zu0sy/L6wmV+N17uerAAAAAAAAAAAAAAAAAAAAAAFE4ePbk1mkzuPTx5dDq+dtB0A2h+1v931zlaGXk1TsejncsX3Nt8r9VuA0WtV14c3W5s6ba0B2eLkeeKera+xV4sRj6KKmgOZqt7vfB2tejpeJTVU81NHo+SP9srbQ7u+9WpXly3sLz8k7jI1880XZS6ntXb0t3o3Wqd+i3P883Weevn6ozqkaRssbHZ7rt10PoCiyAtziJd/OMXUz9cvuClbxk7137TAQAAAAAAAAAAAAAAAAAAWi1/9NsyeXZlaufGigIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf9jy+f9NkEbE+sgfgnmdfNU1ddCLhyf/8ksEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgGfB7AAAA//8rlFqg")
unlink(&(0x7f0000000080)='./file0\x00')
shmget$private(0x0, 0x400000, 0x20, &(0x7f000000e000/0x400000)=nil)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10)
openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="9c0000002acd571deb485829c2c7161f2966080e5d940861893e8c00000000000000de651a5124c8b442e84ff3691abe0cd835b888140931829723f92ef006ca1b905bdcc6ac3338103e1c7fcee71425394f15ea35ad69745afcf27edc5076", @ANYRES16=r9, @ANYBLOB="01002cbd7000ffdbdf251500000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000800)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r11 = fcntl$dupfd(r7, 0x0, r7)
setsockopt$IPT_SO_SET_REPLACE(r11, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x1e8, 0xc, 0x5002004a, 0xb, 0x310, 0xea02, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x248)

374.735591ms ago: executing program 2 (id=117):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000600)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000006c0)=""/207, 0xcf, 0x0, &(0x7f00000007c0)=""/173, 0xad}, &(0x7f0000001140)=0x40)
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x80a003, &(0x7f0000002440)={[{@test_dummy_encryption}, {@commit={'commit', 0x3d, 0x7f}}, {@norecovery}, {@nojournal_checksum}, {@noload}, {@norecovery}]}, 0x1, 0x4e9, &(0x7f00000000c0)="$eJzs3d9rW9cdAPDvla3MTpzZ2faQBZaYsZGELZIdL4nZQ5LB2J4C27J3z7NlYyxbxpKT2IThsOcxGGMb28v61JdC/4BCyZ9QCoH2PZTSEtokfehDWxVJV4nrSnZCJCuxPx84vuf+0P1+j4SOdO691g3gwBqNiKsR0RcRZyNiOF2eSUtsNkptu0cPb8/UShLV6vVPkkjSZc19Jen0SPqwgYj4w28j/pwkjQVblNc3FqeLxcJqOp+vLK3ky+sb5xaWpucL84XliYnxi5OXJi9MjnWsrZd//eG//v76by6//fOb96c+PvOXWr5D6bqt7eikxnOSrT8XTf0RsdqNYD3Ql7Yn+ywbJ93PBwCAndW+438vIn4cEY//2+tsAAAAgG6oXhmKL5KIKgAAALBvZerXwCaZXHotwFBkMrlc4xreH8SVKJbKlZ/NldaWZxvXyo5ENjO3UCyMpdcKj0Q2qc2P1+tP589vm5+IiGMR8c/hwfp8bqZUnO31wQ8AAAA4IGrj/KFMo16bfDbcGP8DAAAA+8xIrxMAAAAAus74HwAAAPa/b4//RxuTpH/vkwEAAAA67XfXrtVKtXn/69kb62uLpRvnZgvlxdzS2kxuprS6kpsvlebrv9m3tNv+iqXSyi9iee1WvlIoV/Ll9Y2ppdLacmWqfl/vqcIz3ScaAAAA6Khjp+6+n0TE5i8H66XmULrOWB32t8zzbZ50Kw9g7/X1OgGgZ1zgCweXMT6w28B+YI/yAAAAuuf0D5+c/x+MLef/j953bAD2u+c8/w/sI87/w8G17fz//3uVB7D3jPGB3Y4DtD3//07ncwEAALpjqF6STC4dAwxFJpPLRRyt3xYgm8wtFAtjEfHdiHhvOPud2vx4r5MGAAAAAAAAAAAAAAAAAAAAAAAAgFdMtZpEFQAAANjXIjIfJRGRxEDE8E+Gth8fOJR8PlyfRsTN/13/963pSmV1vLb80yfLK/9Jl5/vxREMAAAAYLvmOL05jgcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACATnr08PZMs+xl3Ae/ioiRVvH7Y6A+HYhsRBx+nET/lsclEdHXgfibdyLieKv4SS2tGEmz2B4/ExGDPY5/pAPx4SC7W+t/rrZ6/2VitD5t/f7rT8uLejDarv/LPOn/+tr0f0d32fehdHri3pv5tvHvRJzob93/NOMnL9j//umPGxvt1lVfizjd8vMn+UasfGVpJV9e3zi3sDQ9X5gvLE9MjF+cvDR5YXIsP7dQLKR/W8b4x4/e+mqn9h9uE3+kXfuTRk7Vaut9nto2/+W9Ww+/32rDJOLB39J6i9f/eLv46XP/0/RzoLb+dLO+2ahvdfKNd0/u1P7ZNu3f7fU/026n25z9/V8/aNSyz/gIAKCbyusbi9PFYmH1Va/UGvMSpNHByujLkYbKwaz0umcCAAA67emX/l5nAgAAAAAAAAAAAAAAAAAAAAdX8///m7/l3I2fE9sab6BZSZI9bysAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwE6+DgAA///TSdFe")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4)
r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, r1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
io_submit(0x0, 0x0, 0x0)
ustat(0x2, &(0x7f0000000040))
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x120d, &(0x7f00000024c0)="$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")
r4 = open(&(0x7f00000002c0)='./file0\x00', 0x14927e, 0x0)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
pwritev(r5, &(0x7f00000001c0)=[{&(0x7f00000000c0)="95", 0x1}], 0x1, 0x4010005, 0x0)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r5)
pipe2(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
r7 = getpid()
sched_setscheduler(r7, 0x1, &(0x7f0000000100)=0x5)
pipe(&(0x7f0000000000)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0xc7)
pipe(&(0x7f0000000080)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
splice(r11, 0x0, r10, 0x0, 0x1000, 0x0)
splice(r8, 0x0, r12, 0x0, 0x80, 0x0)
write$binfmt_aout(r9, 0x0, 0x20)
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f00000009c0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="040025bd7000ffdbdf25000000000500050000000000091175847d7b61bcca173e1356cdbbd55e11e78c6592d00580828f275efc903695b13f584cff9e94abc2cc"], 0x3}, 0x1, 0x0, 0x0, 0x1}, 0x0)
fallocate(r4, 0x0, 0x0, 0x1000f4)

323.650965ms ago: executing program 0 (id=118):
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040", 0xa2}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

323.400385ms ago: executing program 4 (id=119):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@ifindex, 0x1d, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r3=>0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@map=r0, r0, 0x37, 0x28, 0x0, @link_fd=r1, r3}, 0x20)
acct(&(0x7f0000000100)='./file0\x00')
acct(0x0)

322.934385ms ago: executing program 1 (id=120):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000)=0x2, 0x4)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddb357f7adf97affffffff7d1800"})
r3 = syz_open_pts(r2, 0x0)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x0)
dup3(r2, r3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$TCSETA(r3, 0x5406, 0x0)
ioctl$TIOCGPTPEER(r2, 0x5441, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x408e, &(0x7f0000000240), 0x3, 0x43a, &(0x7f0000000340)="$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")
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r4, 0x800)
lseek(r4, 0x200, 0x0)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0)
sendfile(r4, r5, 0x0, 0xf800)
fsopen(0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20)

293.156857ms ago: executing program 0 (id=121):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

227.862362ms ago: executing program 4 (id=122):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
open(&(0x7f0000000580)='./file0\x00', 0x100000001a1540, 0x0)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f00000005c0)='./file0\x00', &(0x7f00000007c0), &(0x7f0000000040)=@v2, 0x14, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0)

227.265632ms ago: executing program 4 (id=123):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000600)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000006c0)=""/207, 0xcf, 0x0, &(0x7f00000007c0)=""/173, 0xad}, &(0x7f0000001140)=0x40)
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x80a003, &(0x7f0000002440)={[{@test_dummy_encryption}, {@commit={'commit', 0x3d, 0x7f}}, {@norecovery}, {@nojournal_checksum}, {@noload}, {@norecovery}]}, 0x1, 0x4e9, &(0x7f00000000c0)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4)
r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, r1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
io_submit(0x0, 0x0, 0x0)
ustat(0x2, &(0x7f0000000040))
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x120d, &(0x7f00000024c0)="$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")
r3 = open(&(0x7f00000002c0)='./file0\x00', 0x14927e, 0x0)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
pwritev(r4, 0x0, 0x0, 0x4010005, 0x0)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r4)
pipe2(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
r6 = getpid()
sched_setscheduler(r6, 0x1, &(0x7f0000000100)=0x5)
pipe(&(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0xc7)
pipe(&(0x7f0000000080)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
splice(r10, 0x0, r9, 0x0, 0x1000, 0x0)
splice(r7, 0x0, r11, 0x0, 0x80, 0x0)
write$binfmt_aout(r8, &(0x7f00000000c0)=ANY=[], 0x20)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000009c0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="040025bd7000ffdbdf25000000000500050000000000091175847d7b61bcca173e1356cdbbd55e11e78c6592d00580828f275efc903695b13f584cff9e94abc2cc"], 0x3}, 0x1, 0x0, 0x0, 0x1}, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f4)

199.439724ms ago: executing program 0 (id=124):
r0 = syz_io_uring_setup(0xe42, &(0x7f0000000140), &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000200)=<r2=>0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x18})
io_uring_enter(r0, 0x769b, 0x0, 0x1, 0x0, 0x0)

125.11782ms ago: executing program 3 (id=125):
syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x365, &(0x7f00000006c0)="$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")
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
io_setup(0x200, &(0x7f0000000140)=<r1=>0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, &(0x7f00000000c0)=""/220, 0x0, 0xdc}, 0x20)
io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0x30}])

124.75882ms ago: executing program 0 (id=126):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24}, 0x90)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x2, 0x80805, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000100))
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100"], 0x64}}, 0x0)

62.914924ms ago: executing program 0 (id=127):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000140), 0x10)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000a9de51", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0)
read(r0, 0x0, 0x0)

0s ago: executing program 0 (id=128):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x9, 0x4, 0x101, 0x70, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0xffffffff}, 0x48)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10)
mkdir(&(0x7f0000000580)='./file0\x00', 0x9)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100))
setxattr$security_selinux(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4000801}, 0x1000)

kernel console output (not intermixed with test programs):

[   22.313860][   T29] audit: type=1400 audit(1725465853.105:81): avc:  denied  { read } for  pid=2943 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
Warning: Permanently added '10.128.1.68' (ED25519) to the list of known hosts.
[   26.198648][   T29] audit: type=1400 audit(1725465856.985:82): avc:  denied  { mounton } for  pid=3245 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   26.200414][ T3245] cgroup: Unknown subsys name 'net'
[   26.224572][   T29] audit: type=1400 audit(1725465856.995:83): avc:  denied  { mount } for  pid=3245 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   26.262998][   T29] audit: type=1400 audit(1725465857.025:84): avc:  denied  { unmount } for  pid=3245 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   26.401461][ T3245] cgroup: Unknown subsys name 'rlimit'
[   26.535281][   T29] audit: type=1400 audit(1725465857.325:85): avc:  denied  { setattr } for  pid=3245 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   26.565374][   T29] audit: type=1400 audit(1725465857.325:86): avc:  denied  { create } for  pid=3245 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   26.593243][   T29] audit: type=1400 audit(1725465857.325:87): avc:  denied  { write } for  pid=3245 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   26.617270][   T29] audit: type=1400 audit(1725465857.325:88): avc:  denied  { read } for  pid=3245 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   26.628602][ T3251] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   26.640536][   T29] audit: type=1400 audit(1725465857.335:89): avc:  denied  { mounton } for  pid=3245 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   26.677420][   T29] audit: type=1400 audit(1725465857.335:90): avc:  denied  { mount } for  pid=3245 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   26.706590][   T29] audit: type=1400 audit(1725465857.445:91): avc:  denied  { relabelto } for  pid=3251 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   26.745016][ T3245] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   27.907108][ T3258] chnl_net:caif_netlink_parms(): no params data found
[   28.021419][ T3258] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.028524][ T3258] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.035825][ T3258] bridge_slave_0: entered allmulticast mode
[   28.042554][ T3258] bridge_slave_0: entered promiscuous mode
[   28.066836][ T3263] chnl_net:caif_netlink_parms(): no params data found
[   28.076272][ T3258] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.083607][ T3258] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.091317][ T3258] bridge_slave_1: entered allmulticast mode
[   28.097758][ T3258] bridge_slave_1: entered promiscuous mode
[   28.139235][ T3258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   28.148528][ T3267] chnl_net:caif_netlink_parms(): no params data found
[   28.168636][ T3258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   28.188030][ T3259] chnl_net:caif_netlink_parms(): no params data found
[   28.233998][ T3258] team0: Port device team_slave_0 added
[   28.244574][ T3268] chnl_net:caif_netlink_parms(): no params data found
[   28.269323][ T3258] team0: Port device team_slave_1 added
[   28.325011][ T3263] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.333084][ T3263] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.341282][ T3263] bridge_slave_0: entered allmulticast mode
[   28.347915][ T3263] bridge_slave_0: entered promiscuous mode
[   28.355710][ T3263] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.363889][ T3263] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.372667][ T3263] bridge_slave_1: entered allmulticast mode
[   28.380192][ T3263] bridge_slave_1: entered promiscuous mode
[   28.388286][ T3267] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.397321][ T3267] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.404848][ T3267] bridge_slave_0: entered allmulticast mode
[   28.411869][ T3267] bridge_slave_0: entered promiscuous mode
[   28.419944][ T3267] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.427334][ T3267] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.435925][ T3267] bridge_slave_1: entered allmulticast mode
[   28.443313][ T3267] bridge_slave_1: entered promiscuous mode
[   28.456151][ T3258] batman_adv: batadv0: Adding interface: batadv_slave_0
[   28.464331][ T3258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.491715][ T3258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   28.528981][ T3258] batman_adv: batadv0: Adding interface: batadv_slave_1
[   28.536549][ T3258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.567567][ T3258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   28.581806][ T3259] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.589253][ T3259] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.596667][ T3259] bridge_slave_0: entered allmulticast mode
[   28.603418][ T3259] bridge_slave_0: entered promiscuous mode
[   28.625881][ T3267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   28.638295][ T3267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   28.648739][ T3259] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.656207][ T3259] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.664206][ T3259] bridge_slave_1: entered allmulticast mode
[   28.672331][ T3259] bridge_slave_1: entered promiscuous mode
[   28.680313][ T3263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   28.693617][ T3263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   28.741819][ T3267] team0: Port device team_slave_0 added
[   28.759641][ T3263] team0: Port device team_slave_0 added
[   28.771706][ T3267] team0: Port device team_slave_1 added
[   28.777472][ T3268] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.784643][ T3268] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.792358][ T3268] bridge_slave_0: entered allmulticast mode
[   28.799114][ T3268] bridge_slave_0: entered promiscuous mode
[   28.807593][ T3258] hsr_slave_0: entered promiscuous mode
[   28.813981][ T3258] hsr_slave_1: entered promiscuous mode
[   28.822203][ T3259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   28.832605][ T3263] team0: Port device team_slave_1 added
[   28.849324][ T3268] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.856695][ T3268] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.864125][ T3268] bridge_slave_1: entered allmulticast mode
[   28.870845][ T3268] bridge_slave_1: entered promiscuous mode
[   28.878394][ T3259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   28.905736][ T3267] batman_adv: batadv0: Adding interface: batadv_slave_0
[   28.913134][ T3267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.940021][ T3267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   28.962346][ T3268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   28.984033][ T3267] batman_adv: batadv0: Adding interface: batadv_slave_1
[   28.991308][ T3267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.017417][ T3267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.039056][ T3268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.048885][ T3259] team0: Port device team_slave_0 added
[   29.055226][ T3263] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.063124][ T3263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.090383][ T3263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.121288][ T3259] team0: Port device team_slave_1 added
[   29.127480][ T3263] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.134588][ T3263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.163538][ T3263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.180935][ T3268] team0: Port device team_slave_0 added
[   29.207236][ T3268] team0: Port device team_slave_1 added
[   29.213285][ T3259] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.220376][ T3259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.248195][ T3259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.262082][ T3259] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.269295][ T3259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.296009][ T3259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.353002][ T3267] hsr_slave_0: entered promiscuous mode
[   29.359614][ T3267] hsr_slave_1: entered promiscuous mode
[   29.365828][ T3267] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   29.373683][ T3267] Cannot create hsr debugfs directory
[   29.379682][ T3268] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.386759][ T3268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.413638][ T3268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.427288][ T3263] hsr_slave_0: entered promiscuous mode
[   29.433864][ T3263] hsr_slave_1: entered promiscuous mode
[   29.440287][ T3263] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   29.447973][ T3263] Cannot create hsr debugfs directory
[   29.468020][ T3259] hsr_slave_0: entered promiscuous mode
[   29.474389][ T3259] hsr_slave_1: entered promiscuous mode
[   29.480683][ T3259] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   29.488274][ T3259] Cannot create hsr debugfs directory
[   29.494414][ T3268] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.501570][ T3268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.528869][ T3268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.604678][ T3268] hsr_slave_0: entered promiscuous mode
[   29.610981][ T3268] hsr_slave_1: entered promiscuous mode
[   29.617793][ T3268] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   29.625675][ T3268] Cannot create hsr debugfs directory
[   29.737192][ T3258] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   29.762507][ T3258] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   29.774347][ T3258] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   29.783960][ T3258] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   29.847841][ T3267] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   29.857393][ T3267] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   29.868286][ T3267] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   29.878705][ T3267] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   29.904406][ T3263] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   29.917415][ T3263] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   29.927086][ T3263] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   29.938042][ T3263] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   29.984647][ T3268] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   29.994603][ T3259] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   30.005130][ T3259] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   30.015680][ T3259] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   30.025459][ T3259] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   30.035273][ T3268] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   30.064342][ T3268] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   30.073576][ T3268] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   30.110490][ T3258] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.164218][ T3258] 8021q: adding VLAN 0 to HW filter on device team0
[   30.186965][ T3267] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.203764][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.211017][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.236790][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.243941][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.255629][ T3259] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.279822][ T3263] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.287954][ T3267] 8021q: adding VLAN 0 to HW filter on device team0
[   30.302126][ T3259] 8021q: adding VLAN 0 to HW filter on device team0
[   30.326994][ T3268] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.339452][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.346937][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.357220][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.365072][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.375218][ T3263] 8021q: adding VLAN 0 to HW filter on device team0
[   30.385992][ T3258] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   30.410641][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.418962][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.439919][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.447058][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.456877][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.464412][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.479087][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.486363][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.497844][ T3268] 8021q: adding VLAN 0 to HW filter on device team0
[   30.534880][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.542600][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.564146][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.573993][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.607765][ T3267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   30.624031][ T3258] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.747998][ T3267] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.785162][ T3259] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.824243][ T3268] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.862405][ T3258] veth0_vlan: entered promiscuous mode
[   30.874631][ T3263] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.898370][ T3258] veth1_vlan: entered promiscuous mode
[   30.917479][ T3258] veth0_macvtap: entered promiscuous mode
[   30.948268][ T3258] veth1_macvtap: entered promiscuous mode
[   30.968605][ T3258] batman_adv: batadv0: Interface activated: batadv_slave_0
[   30.990606][ T3258] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.030915][ T3258] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.040915][ T3258] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.052277][ T3258] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.061948][ T3258] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.114191][ T3259] veth0_vlan: entered promiscuous mode
[   31.143294][ T3259] veth1_vlan: entered promiscuous mode
[   31.172702][ T3263] veth0_vlan: entered promiscuous mode
[   31.187917][ T3268] veth0_vlan: entered promiscuous mode
[   31.197807][ T3263] veth1_vlan: entered promiscuous mode
[   31.207352][   T29] kauditd_printk_skb: 24 callbacks suppressed
[   31.207371][   T29] audit: type=1400 audit(1725465862.005:116): avc:  denied  { read write } for  pid=3258 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   31.239876][   T29] audit: type=1400 audit(1725465862.005:117): avc:  denied  { open } for  pid=3258 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   31.265945][    C0] hrtimer: interrupt took 47829 ns
[   31.266323][   T29] audit: type=1400 audit(1725465862.005:118): avc:  denied  { ioctl } for  pid=3258 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   31.305095][   T29] audit: type=1400 audit(1725465862.015:119): avc:  denied  { create } for  pid=3398 comm="syz.3.4" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   31.307031][ T3267] veth0_vlan: entered promiscuous mode
[   31.326446][   T29] audit: type=1400 audit(1725465862.015:120): avc:  denied  { prog_load } for  pid=3398 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   31.351698][   T29] audit: type=1400 audit(1725465862.015:121): avc:  denied  { bpf } for  pid=3398 comm="syz.3.4" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   31.366028][ T3259] veth0_macvtap: entered promiscuous mode
[   31.374331][   T29] audit: type=1400 audit(1725465862.015:122): avc:  denied  { open } for  pid=3398 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   31.396428][ T3268] veth1_vlan: entered promiscuous mode
[   31.401668][   T29] audit: type=1400 audit(1725465862.015:123): avc:  denied  { perfmon } for  pid=3398 comm="syz.3.4" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   31.434237][   T29] audit: type=1400 audit(1725465862.015:124): avc:  denied  { kernel } for  pid=3398 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   31.434939][ T3267] veth1_vlan: entered promiscuous mode
[   31.473628][ T3259] veth1_macvtap: entered promiscuous mode
[   31.477977][ T3399] loop3: detected capacity change from 0 to 512
[   31.506489][ T3268] veth0_macvtap: entered promiscuous mode
[   31.517589][ T3263] veth0_macvtap: entered promiscuous mode
[   31.527780][ T3263] veth1_macvtap: entered promiscuous mode
[   31.548317][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.561194][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.577050][ T3259] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.585322][ T3399] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   31.586067][ T3268] veth1_macvtap: entered promiscuous mode
[   31.605085][   T29] audit: type=1400 audit(1725465862.395:125): avc:  denied  { mount } for  pid=3398 comm="syz.3.4" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   31.610121][ T3399] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   31.635526][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.651183][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.661440][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.672318][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.684487][ T3268] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.699845][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.712885][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.727245][ T3268] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.737366][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.749666][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.760553][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.771812][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.784934][ T3259] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.798577][ T3267] veth0_macvtap: entered promiscuous mode
[   31.817045][ T3268] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.826359][ T3268] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.836704][ T3268] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.846357][ T3268] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.859946][ T3267] veth1_macvtap: entered promiscuous mode
[   31.867017][ T3259] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.876169][ T3259] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.885772][ T3259] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.897327][ T3259] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.917000][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.927895][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.938344][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.949332][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.959371][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.970394][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.982541][ T3263] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.996111][ T3399] syz.3.4 (3399) used greatest stack depth: 10416 bytes left
[   31.997479][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.014580][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.025103][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.036758][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.047141][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.057825][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.068044][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.079781][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.091532][ T3258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.093473][ T3267] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.118410][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.129414][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.139616][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.151225][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.161559][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.173349][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.185090][ T3263] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.198375][ T3263] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.207417][ T3263] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.216342][ T3263] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.225503][ T3263] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.243270][ T3405] netlink: 'syz.3.6': attribute type 10 has an invalid length.
[   32.251512][ T3405] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6'.
[   32.252715][ T3406] loop3: detected capacity change from 0 to 256
[   32.264321][ T3405] vlan0: entered promiscuous mode
[   32.275579][ T3405] vlan0: entered allmulticast mode
[   32.281267][ T3405] veth0_vlan: entered allmulticast mode
[   32.289961][ T3405] bridge0: port 3(vlan0) entered blocking state
[   32.296830][ T3405] bridge0: port 3(vlan0) entered disabled state
[   32.304868][ T3405] bridge0: port 3(vlan0) entered blocking state
[   32.312136][ T3405] bridge0: port 3(vlan0) entered forwarding state
[   32.329183][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.342275][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.354601][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.355301][ T3406] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   32.366902][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.388452][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.400226][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.410548][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.414254][ T3406] syz.3.6 (3406) used greatest stack depth: 10368 bytes left
[   32.423195][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.447878][ T3267] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.473835][ T3267] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.482872][ T3267] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.491702][ T3267] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.501524][ T3267] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.604173][ T3414] dvmrp5: entered allmulticast mode
[   33.172145][ T3433] Zero length message leads to an empty skb
[   33.290916][ T3441] loop1: detected capacity change from 0 to 512
[   33.413566][ T3441] loop1: detected capacity change from 0 to 8192
[   33.693826][ T3452] netlink: 'syz.4.14': attribute type 10 has an invalid length.
[   33.705076][ T3452] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14'.
[   33.759068][ T3452] vlan0: entered promiscuous mode
[   33.765574][ T3452] vlan0: entered allmulticast mode
[   33.771886][ T3452] veth0_vlan: entered allmulticast mode
[   33.781917][ T3452] bridge0: port 3(vlan0) entered blocking state
[   33.790247][ T3452] bridge0: port 3(vlan0) entered disabled state
[   33.820961][ T3459] loop4: detected capacity change from 0 to 256
[   33.830467][ T3452] bridge0: port 3(vlan0) entered blocking state
[   33.834771][ T3460] loop3: detected capacity change from 0 to 256
[   33.839737][ T3452] bridge0: port 3(vlan0) entered forwarding state
[   33.867131][ T3452] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   33.880769][ T3458] netlink: 'syz.3.17': attribute type 10 has an invalid length.
[   33.891059][ T3458] netlink: 40 bytes leftover after parsing attributes in process `syz.3.17'.
[   33.921800][ T3455] loop2: detected capacity change from 0 to 8192
[   33.938525][ T3455] vfat: Unknown parameter 'ÿÿ'
[   34.005497][ T3458] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   34.085680][ T3470] loop4: detected capacity change from 0 to 512
[   34.188104][ T3455] loop2: detected capacity change from 0 to 512
[   34.256496][ T3465] loop0: detected capacity change from 0 to 8192
[   34.264081][ T3470] loop4: detected capacity change from 0 to 8192
[   34.304593][ T3465] vfat: Unknown parameter 'ÿÿ'
[   34.470852][ T3465] loop0: detected capacity change from 0 to 512
[   34.522222][ T3476] loop1: detected capacity change from 0 to 8192
[   34.534030][ T3455] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.564193][ T3476] vfat: Unknown parameter 'ÿÿ'
[   34.587271][ T3455] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   34.626162][ T3465] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.644660][ T3465] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   34.765026][ T3476] netlink: 84 bytes leftover after parsing attributes in process `syz.1.21'.
[   34.965734][ T3476] loop1: detected capacity change from 0 to 512
[   35.006314][ T3263] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.032431][ T3486] loop4: detected capacity change from 0 to 8192
[   35.052898][ T3486] vfat: Unknown parameter 'ÿÿ'
[   35.121012][ T3476] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.160571][ T3486] netlink: 84 bytes leftover after parsing attributes in process `syz.4.22'.
[   35.188057][ T3495] loop3: detected capacity change from 0 to 8192
[   35.198537][ T3495] vfat: Unknown parameter 'ÿÿ'
[   35.206582][ T3495] netlink: 84 bytes leftover after parsing attributes in process `syz.3.25'.
[   35.210132][ T3486] block device autoloading is deprecated and will be removed.
[   35.262122][ T3476] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   35.360314][ T3500] loop0: detected capacity change from 0 to 512
[   35.405593][ T3268] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.452142][ T3497] loop4: detected capacity change from 0 to 512
[   35.525180][ T3505] netlink: 132 bytes leftover after parsing attributes in process `syz.3.28'.
[   35.532858][ T3503] loop2: detected capacity change from 0 to 512
[   35.559625][ T3500] loop0: detected capacity change from 0 to 8192
[   35.576720][ T3503] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   35.591238][ T3503] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   35.612997][ T3497] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.623311][ T3503] EXT4-fs (loop2): 1 truncate cleaned up
[   35.634336][ T3503] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   35.654535][ T3497] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   35.722200][ T3259] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.767355][ T3267] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.938237][ T3268] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.956688][ T3524] loop4: detected capacity change from 0 to 512
[   35.969898][ T3524] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   35.995485][ T3524] EXT4-fs (loop4): 1 truncate cleaned up
[   36.003198][ T3524] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.003792][ T3529] loop2: detected capacity change from 0 to 512
[   36.035124][ T3529] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   36.050114][ T3529] EXT4-fs (loop2): 1 truncate cleaned up
[   36.056536][ T3529] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.167844][ T3541] loop1: detected capacity change from 0 to 512
[   36.188230][ T3541] =======================================================
[   36.188230][ T3541] WARNING: The mand mount option has been deprecated and
[   36.188230][ T3541]          and is ignored by this kernel. Remove the mand
[   36.188230][ T3541]          option from the mount to silence this warning.
[   36.188230][ T3541] =======================================================
[   36.269704][ T3541] EXT4-fs (loop1): external journal device major/minor numbers have changed
[   36.282466][ T3267] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.288119][ T3543] loop0: detected capacity change from 0 to 8192
[   36.299312][ T3543] vfat: Unknown parameter 'ÿÿ'
[   36.335437][ T3268] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.381225][ T3541] EXT4-fs (loop1): failed to open journal device unknown-block(0,3) -6
[   36.398385][   T29] kauditd_printk_skb: 289 callbacks suppressed
[   36.398421][   T29] audit: type=1400 audit(1725465867.185:415): avc:  denied  { write } for  pid=3545 comm="syz.4.36" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   36.458183][   T29] audit: type=1400 audit(1725465867.195:416): avc:  denied  { mount } for  pid=3538 comm="syz.1.35" name="/" dev="ramfs" ino=3854 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   36.458352][ T3541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35'.
[   36.481304][   T29] audit: type=1400 audit(1725465867.205:417): avc:  denied  { create } for  pid=3538 comm="syz.1.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   36.481343][   T29] audit: type=1400 audit(1725465867.215:418): avc:  denied  { ioctl } for  pid=3538 comm="syz.1.35" path="socket:[3858]" dev="sockfs" ino=3858 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   36.548102][ T3554] ebt_limit: overflow, try lower: 570423552/2483027968
[   36.558240][ T3552] loop3: detected capacity change from 0 to 512
[   36.559392][ T3543] loop0: detected capacity change from 0 to 512
[   36.566982][ T3552] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   36.586487][   T29] audit: type=1326 audit(1725465867.365:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3548 comm="syz.2.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fd5becef9 code=0x7ffc0000
[   36.612330][   T29] audit: type=1326 audit(1725465867.365:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3548 comm="syz.2.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fd5becef9 code=0x7ffc0000
[   36.628708][ T3549] loop2: detected capacity change from 0 to 256
[   36.638255][   T29] audit: type=1326 audit(1725465867.365:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3548 comm="syz.2.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4fd5becef9 code=0x7ffc0000
[   36.670154][   T29] audit: type=1326 audit(1725465867.365:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3548 comm="syz.2.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fd5becef9 code=0x7ffc0000
[   36.694146][   T29] audit: type=1326 audit(1725465867.385:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3548 comm="syz.2.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4fd5becef9 code=0x7ffc0000
[   36.719493][   T29] audit: type=1326 audit(1725465867.385:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3548 comm="syz.2.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fd5becef9 code=0x7ffc0000
[   36.741596][ T3552] EXT4-fs (loop3): 1 truncate cleaned up
[   36.767486][ T3552] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.794550][ T3541] hsr_slave_1 (unregistering): left promiscuous mode
[   36.812100][ T3550] netlink: 'syz.2.37': attribute type 10 has an invalid length.
[   36.822191][ T3550] netlink: 40 bytes leftover after parsing attributes in process `syz.2.37'.
[   36.846573][ T3550] vlan0: entered promiscuous mode
[   36.852700][ T3550] vlan0: entered allmulticast mode
[   36.858342][ T3550] veth0_vlan: entered allmulticast mode
[   36.865935][ T3550] bridge0: port 3(vlan0) entered blocking state
[   36.872368][ T3550] bridge0: port 3(vlan0) entered disabled state
[   36.883762][ T3550] bridge0: port 3(vlan0) entered blocking state
[   36.891832][ T3550] bridge0: port 3(vlan0) entered forwarding state
[   36.908415][ T3549] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   36.927308][ T3543] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.949851][ T3543] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   37.091618][ T3258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.111772][ T3576] loop4: detected capacity change from 0 to 512
[   37.166204][ T3579] loop2: detected capacity change from 0 to 512
[   37.175287][ T3579] EXT4-fs (loop2): external journal device major/minor numbers have changed
[   37.231571][ T3576] loop4: detected capacity change from 0 to 8192
[   37.269717][ T3579] EXT4-fs (loop2): failed to open journal device unknown-block(0,3) -6
[   37.311431][ T3579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.43'.
[   37.334200][ T3543] syz.0.33 (3543) used greatest stack depth: 9456 bytes left
[   37.364595][ T3588] ebt_limit: overflow, try lower: 570423552/2483027968
[   37.365478][ T3587] loop1: detected capacity change from 0 to 512
[   37.379552][ T3263] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.391702][ T3579] hsr_slave_1 (unregistering): left promiscuous mode
[   37.432666][ T3587] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.464843][ T3587] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   37.474473][ T3593] loop0: detected capacity change from 0 to 512
[   37.540637][ T3259] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.554300][ T3593] loop0: detected capacity change from 0 to 8192
[   37.635516][ T3597] loop1: detected capacity change from 0 to 512
[   37.652550][ T3597] EXT4-fs (loop1): external journal device major/minor numbers have changed
[   37.707518][ T3597] EXT4-fs (loop1): failed to open journal device unknown-block(0,3) -6
[   37.763097][ T3597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.47'.
[   37.773624][ T3597] ebt_limit: overflow, try lower: 570423552/2483027968
[   38.105149][ T3624] loop3: detected capacity change from 0 to 512
[   38.116429][ T3624] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   38.161928][ T3624] EXT4-fs (loop3): 1 truncate cleaned up
[   38.170919][ T3624] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.239295][ T3258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.466558][ T3631] loop2: detected capacity change from 0 to 512
[   38.529333][ T3631] loop2: detected capacity change from 0 to 8192
[   38.574524][ T3628] loop3: detected capacity change from 0 to 8192
[   38.590703][ T3628] vfat: Unknown parameter 'ÿÿ'
[   38.614326][ T3628] netlink: 84 bytes leftover after parsing attributes in process `syz.3.52'.
[   38.637245][ T3637] netlink: 'syz.1.57': attribute type 10 has an invalid length.
[   38.645685][ T3637] netlink: 40 bytes leftover after parsing attributes in process `syz.1.57'.
[   38.678414][ T3637] vlan0: entered promiscuous mode
[   38.684024][ T3637] vlan0: entered allmulticast mode
[   38.689431][ T3637] veth0_vlan: entered allmulticast mode
[   38.706677][ T3637] bridge0: port 3(vlan0) entered blocking state
[   38.714158][ T3637] bridge0: port 3(vlan0) entered disabled state
[   38.771409][ T3637] bridge0: port 3(vlan0) entered blocking state
[   38.779177][ T3637] bridge0: port 3(vlan0) entered forwarding state
[   38.779440][ T3643] loop1: detected capacity change from 0 to 256
[   38.833632][ T3645] loop4: detected capacity change from 0 to 512
[   38.859627][ T3645] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   38.862226][ T3637] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   38.886553][ T3648] loop0: detected capacity change from 0 to 512
[   38.894601][ T3648] EXT4-fs (loop0): external journal device major/minor numbers have changed
[   38.920398][ T3628] loop3: detected capacity change from 0 to 512
[   38.929139][ T3645] EXT4-fs (loop4): 1 truncate cleaned up
[   38.956253][ T3645] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.972021][ T3648] EXT4-fs (loop0): failed to open journal device unknown-block(0,3) -6
[   39.004247][ T3648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.60'.
[   39.056549][ T3659] ebt_limit: overflow, try lower: 570423552/2483027968
[   39.064891][ T3648] hsr_slave_1 (unregistering): left promiscuous mode
[   39.092094][ T3267] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.106055][ T3628] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.124875][ T3628] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   39.329666][ T3258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.379230][ T3665] netlink: 132 bytes leftover after parsing attributes in process `syz.3.64'.
[   39.458323][ T3669] loop2: detected capacity change from 0 to 512
[   39.471925][ T3670] loop3: detected capacity change from 0 to 512
[   39.480946][ T3670] EXT4-fs (loop3): external journal device major/minor numbers have changed
[   39.533274][ T3670] EXT4-fs (loop3): failed to open journal device unknown-block(0,3) -6
[   39.563675][ T3670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.65'.
[   39.566972][ T3669] loop2: detected capacity change from 0 to 8192
[   39.636891][ T3670] hsr_slave_1 (unregistering): left promiscuous mode
[   39.672016][ T3674] ebt_limit: overflow, try lower: 570423552/2483027968
[   39.757337][ T3682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.68'.
[   40.105809][ T3697] loop4: detected capacity change from 0 to 512
[   40.130908][ T3696] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   40.153033][ T3696] vhci_hcd: invalid port number 23
[   40.242861][ T3695] loop4: detected capacity change from 0 to 8192
[   40.440933][ T3706] loop3: detected capacity change from 0 to 512
[   40.453831][ T3706] EXT4-fs (loop3): external journal device major/minor numbers have changed
[   40.511234][ T3711] loop2: detected capacity change from 0 to 512
[   40.521364][ T3706] EXT4-fs (loop3): failed to open journal device unknown-block(0,3) -6
[   40.527081][ T3711] EXT4-fs (loop2): external journal device major/minor numbers have changed
[   40.586445][ T3711] EXT4-fs (loop2): failed to open journal device unknown-block(0,3) -6
[   40.606294][ T3715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.76'.
[   40.648161][ T3715] ebt_limit: overflow, try lower: 570423552/2483027968
[   40.671742][ T3718] FAULT_INJECTION: forcing a failure.
[   40.671742][ T3718] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   40.686216][ T3718] CPU: 0 UID: 0 PID: 3718 Comm: syz.0.78 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0
[   40.697846][ T3718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[   40.708202][ T3718] Call Trace:
[   40.711519][ T3718]  <TASK>
[   40.714502][ T3718]  dump_stack_lvl+0xf2/0x150
[   40.719769][ T3718]  dump_stack+0x15/0x20
[   40.724169][ T3718]  should_fail_ex+0x229/0x230
[   40.729725][ T3718]  should_fail+0xb/0x10
[   40.734499][ T3718]  should_fail_usercopy+0x1a/0x20
[   40.737106][ T3722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.75'.
[   40.739818][ T3718]  _copy_from_iter+0xd3/0xb00
[   40.739860][ T3718]  ? kmalloc_reserve+0x16e/0x190
[   40.739890][ T3718]  ? __build_skb_around+0x196/0x1f0
[   40.764367][ T3718]  ? __alloc_skb+0x21f/0x310
[   40.764482][ T3723] vlan2: entered promiscuous mode
[   40.769072][ T3718]  ? __virt_addr_valid+0x1ed/0x250
[   40.769141][ T3718]  ? __check_object_size+0x35b/0x510
[   40.774291][ T3723] team0: entered promiscuous mode
[   40.779479][ T3718]  netlink_sendmsg+0x460/0x6e0
[   40.779535][ T3718]  ? __pfx_netlink_sendmsg+0x10/0x10
[   40.785694][ T3723] team_slave_0: entered promiscuous mode
[   40.790665][ T3718]  __sock_sendmsg+0x140/0x180
[   40.790715][ T3718]  ____sys_sendmsg+0x312/0x410
[   40.795888][ T3723] team_slave_1: entered promiscuous mode
[   40.802113][ T3718]  __sys_sendmsg+0x1e9/0x280
[   40.829751][ T3718]  __x64_sys_sendmsg+0x46/0x50
[   40.835889][ T3718]  x64_sys_call+0x2689/0x2d60
[   40.840823][ T3718]  do_syscall_64+0xc9/0x1c0
[   40.845547][ T3718]  ? clear_bhb_loop+0x55/0xb0
[   40.850663][ T3718]  ? clear_bhb_loop+0x55/0xb0
[   40.855381][ T3718]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   40.862037][ T3718] RIP: 0033:0x7ffb5291cef9
[   40.866851][ T3718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   40.887982][ T3718] RSP: 002b:00007ffb51597038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   40.897476][ T3718] RAX: ffffffffffffffda RBX: 00007ffb52ad5f80 RCX: 00007ffb5291cef9
[   40.905529][ T3718] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004
[   40.913539][ T3718] RBP: 00007ffb51597090 R08: 0000000000000000 R09: 0000000000000000
[   40.921944][ T3718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   40.930187][ T3718] R13: 0000000000000000 R14: 00007ffb52ad5f80 R15: 00007ffcc7788738
[   40.938269][ T3718]  </TASK>
[   40.943668][ T3711] ebt_limit: overflow, try lower: 570423552/2483027968
[   40.953397][ T3723] team0: left promiscuous mode
[   40.959127][ T3723] team_slave_0: left promiscuous mode
[   40.964769][ T3723] team_slave_1: left promiscuous mode
[   41.074539][ T3734] FAULT_INJECTION: forcing a failure.
[   41.074539][ T3734] name failslab, interval 1, probability 0, space 0, times 1
[   41.087859][ T3734] CPU: 1 UID: 0 PID: 3734 Comm: syz.4.83 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0
[   41.094736][ T3737] mmap: syz.0.85 (3737) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   41.098629][ T3734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[   41.121936][ T3734] Call Trace:
[   41.125512][ T3734]  <TASK>
[   41.128550][ T3734]  dump_stack_lvl+0xf2/0x150
[   41.133341][ T3734]  dump_stack+0x15/0x20
[   41.137642][ T3734]  should_fail_ex+0x229/0x230
[   41.143038][ T3734]  ? rtnl_newlink+0x5d/0x1690
[   41.148059][ T3734]  should_failslab+0x8f/0xb0
[   41.152979][ T3734]  __kmalloc_cache_noprof+0x4b/0x2a0
[   41.158534][ T3734]  rtnl_newlink+0x5d/0x1690
[   41.163254][ T3734]  ? kmem_cache_free+0x153/0x280
[   41.168616][ T3734]  ? __slab_free+0x67/0x2b0
[   41.173367][ T3734]  ? __rcu_read_unlock+0x4e/0x70
[   41.178819][ T3734]  ? avc_has_perm_noaudit+0x1cc/0x210
[   41.185037][ T3734]  ? selinux_capable+0x1f2/0x260
[   41.190513][ T3734]  ? security_capable+0x64/0x80
[   41.195951][ T3734]  ? ns_capable+0x7d/0xb0
[   41.200316][ T3734]  ? __pfx_rtnl_newlink+0x10/0x10
[   41.205479][ T3734]  rtnetlink_rcv_msg+0x6aa/0x710
[   41.207981][ T3738] loop1: detected capacity change from 0 to 256
[   41.210600][ T3734]  ? ref_tracker_free+0x3a5/0x410
[   41.210642][ T3734]  ? __dev_queue_xmit+0x161/0x1fe0
[   41.227571][ T3734]  netlink_rcv_skb+0x12c/0x230
[   41.232808][ T3734]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   41.238380][ T3734]  rtnetlink_rcv+0x1c/0x30
[   41.243036][ T3734]  netlink_unicast+0x599/0x670
[   41.248207][ T3734]  netlink_sendmsg+0x5cc/0x6e0
[   41.253197][ T3734]  ? __pfx_netlink_sendmsg+0x10/0x10
[   41.258533][ T3734]  __sock_sendmsg+0x140/0x180
[   41.263616][ T3734]  ____sys_sendmsg+0x312/0x410
[   41.268468][ T3734]  __sys_sendmsg+0x1e9/0x280
[   41.273372][ T3734]  __x64_sys_sendmsg+0x46/0x50
[   41.278239][ T3734]  x64_sys_call+0x2689/0x2d60
[   41.283094][ T3734]  do_syscall_64+0xc9/0x1c0
[   41.287721][ T3734]  ? clear_bhb_loop+0x55/0xb0
[   41.292880][ T3734]  ? clear_bhb_loop+0x55/0xb0
[   41.297930][ T3734]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   41.303939][ T3734] RIP: 0033:0x7f4181aecef9
[   41.308670][ T3734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   41.328510][ T3734] RSP: 002b:00007f4180767038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   41.337141][ T3734] RAX: ffffffffffffffda RBX: 00007f4181ca5f80 RCX: 00007f4181aecef9
[   41.345285][ T3734] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000004
[   41.353905][ T3734] RBP: 00007f4180767090 R08: 0000000000000000 R09: 0000000000000000
[   41.362068][ T3734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   41.370520][ T3734] R13: 0000000000000000 R14: 00007f4181ca5f80 R15: 00007ffcac71ee58
[   41.379031][ T3734]  </TASK>
[   41.383885][ T3735] netlink: 'syz.1.84': attribute type 10 has an invalid length.
[   41.398987][   T29] kauditd_printk_skb: 503 callbacks suppressed
[   41.399002][   T29] audit: type=1326 audit(1725465872.185:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3732 comm="syz.1.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f84b6518859 code=0x7ffc0000
[   41.407824][ T3737] audit: audit_backlog=65 > audit_backlog_limit=64
[   41.429934][   T29] audit: type=1326 audit(1725465872.185:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3732 comm="syz.1.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f84b6573ea7 code=0x7ffc0000
[   41.429974][   T29] audit: type=1326 audit(1725465872.185:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3732 comm="syz.1.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f84b6518859 code=0x7ffc0000
[   41.430005][   T29] audit: type=1326 audit(1725465872.185:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3732 comm="syz.1.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f84b6573ea7 code=0x7ffc0000
[   41.437430][ T3737] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[   41.461032][   T29] audit: type=1326 audit(1725465872.185:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3732 comm="syz.1.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f84b6518859 code=0x7ffc0000
[   41.461074][   T29] audit: type=1326 audit(1725465872.185:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3732 comm="syz.1.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f84b6573ea7 code=0x7ffc0000
[   41.484386][ T3737] audit: backlog limit exceeded
[   41.507902][   T29] audit: type=1326 audit(1725465872.185:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3732 comm="syz.1.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f84b6518859 code=0x7ffc0000
[   41.541949][ T3735] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   41.619114][ T3741] loop3: detected capacity change from 0 to 512
[   41.680600][ T3744] netlink: 'syz.2.87': attribute type 10 has an invalid length.
[   41.704713][ T3741] loop3: detected capacity change from 0 to 8192
[   41.826774][ T3751] loop1: detected capacity change from 0 to 1024
[   41.840230][ T3744] loop2: detected capacity change from 0 to 256
[   41.858738][ T3744] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   42.101965][ T3763] loop2: detected capacity change from 0 to 512
[   42.218305][ T3763] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.234861][ T3763] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   42.250076][ T3763] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.91: Directory hole found for htree leaf block 0
[   42.268562][ T3763] syz.2.91[3763] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   42.284480][ T3751] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.330875][ T3268] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.385445][ T3259] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.437641][ T3773] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   42.451736][ T3773] loop1: detected capacity change from 0 to 128
[   42.464632][ T3770] loop0: detected capacity change from 0 to 512
[   42.465038][ T3773] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   42.474551][ T3770] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.95: corrupted in-inode xattr: invalid ea_ino
[   42.498911][ T3770] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.95: couldn't read orphan inode 15 (err -117)
[   42.502907][ T3773] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   42.512904][ T3770] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.577861][ T3770] __nla_validate_parse: 5 callbacks suppressed
[   42.577879][ T3770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.95'.
[   42.616483][ T3781] loop3: detected capacity change from 0 to 8192
[   42.620935][ T3784] netlink: 132 bytes leftover after parsing attributes in process `syz.4.98'.
[   42.623433][ T3781] vfat: Unknown parameter 'ÿÿ'
[   42.634444][ T3259] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   42.665734][ T3786] netlink: 'syz.2.100': attribute type 10 has an invalid length.
[   42.673591][ T3786] netlink: 40 bytes leftover after parsing attributes in process `syz.2.100'.
[   42.691358][ T3788] usb usb7: usbfs: process 3788 (syz.1.99) did not claim interface 0 before use
[   42.729316][ T3263] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.753361][ T3786] loop2: detected capacity change from 0 to 256
[   42.767737][ T3793] loop1: detected capacity change from 0 to 512
[   42.779811][ T3786] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   42.794613][ T3781] loop3: detected capacity change from 0 to 512
[   42.837935][ T3803] loop0: detected capacity change from 0 to 1024
[   42.861239][ T3803] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.873590][ T3793] loop1: detected capacity change from 0 to 8192
[   42.891395][ T3781] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.906623][ T3781] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   42.954962][ T3263] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.002414][ T3817] loop0: detected capacity change from 0 to 128
[   43.023799][ T3817] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[   43.191022][ T3258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.211734][ T3821] FAULT_INJECTION: forcing a failure.
[   43.211734][ T3821] name failslab, interval 1, probability 0, space 0, times 0
[   43.224979][ T3821] CPU: 0 UID: 0 PID: 3821 Comm: syz.3.110 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0
[   43.235807][ T3821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[   43.246024][ T3821] Call Trace:
[   43.249361][ T3821]  <TASK>
[   43.252369][ T3821]  dump_stack_lvl+0xf2/0x150
[   43.257170][ T3821]  dump_stack+0x15/0x20
[   43.261486][ T3821]  should_fail_ex+0x229/0x230
[   43.266364][ T3821]  ? sidtab_sid2str_get+0xb8/0x140
[   43.271671][ T3821]  should_failslab+0x8f/0xb0
[   43.276399][ T3821]  __kmalloc_node_track_caller_noprof+0xa6/0x380
[   43.282776][ T3821]  kmemdup_noprof+0x2a/0x60
[   43.287375][ T3821]  sidtab_sid2str_get+0xb8/0x140
[   43.292425][ T3821]  security_sid_to_context_core+0x1eb/0x2f0
[   43.298341][ T3821]  security_sid_to_context+0x27/0x30
[   43.303748][ T3821]  selinux_secid_to_secctx+0x22/0x30
[   43.309140][ T3821]  security_secid_to_secctx+0x4a/0x80
[   43.314604][ T3821]  audit_log_task_context+0x8c/0x1b0
[   43.320059][ T3821]  audit_log_task+0xfb/0x180
[   43.325040][ T3821]  audit_seccomp+0x68/0x130
[   43.329565][ T3821]  __seccomp_filter+0x6fa/0x1180
[   43.334723][ T3821]  ? putname+0x20/0xe0
[   43.338908][ T3821]  ? __se_sys_statx+0x1aa/0x1e0
[   43.343781][ T3821]  __secure_computing+0x9f/0x1c0
[   43.348808][ T3821]  syscall_trace_enter+0xd1/0x1f0
[   43.354218][ T3821]  do_syscall_64+0xaa/0x1c0
[   43.359289][ T3821]  ? clear_bhb_loop+0x55/0xb0
[   43.364185][ T3821]  ? clear_bhb_loop+0x55/0xb0
[   43.369101][ T3821]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   43.375152][ T3821] RIP: 0033:0x7f2664cbb93c
[   43.379853][ T3821] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[   43.400016][ T3821] RSP: 002b:00007f2663937030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   43.408827][ T3821] RAX: ffffffffffffffda RBX: 00007f2664e75f80 RCX: 00007f2664cbb93c
[   43.416913][ T3821] RDX: 000000000000000f RSI: 00007f26639370a0 RDI: 0000000000000003
[   43.425046][ T3821] RBP: 00007f2663937090 R08: 0000000000000000 R09: 0000000000000000
[   43.433118][ T3821] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000002
[   43.441141][ T3821] R13: 0000000000000000 R14: 00007f2664e75f80 R15: 00007ffd28e1fa08
[   43.449168][ T3821]  </TASK>
[   43.793028][ T3831] netlink: 132 bytes leftover after parsing attributes in process `syz.1.111'.
[   43.903098][ T3836] netlink: 'syz.3.116': attribute type 10 has an invalid length.
[   43.911390][ T3836] netlink: 40 bytes leftover after parsing attributes in process `syz.3.116'.
[   43.921567][ T3837] loop2: detected capacity change from 0 to 512
[   43.947381][ T3842] Process accounting resumed
[   43.965699][ T3843] loop1: detected capacity change from 0 to 512
[   43.977139][ T3836] loop3: detected capacity change from 0 to 256
[   43.986383][ T3837] loop2: detected capacity change from 0 to 8192
[   43.993578][ T3849] netlink: 132 bytes leftover after parsing attributes in process `syz.0.121'.
[   44.008096][ T3843] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   44.024071][ T3836] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   44.043307][ T3853] loop4: detected capacity change from 0 to 512
[   44.051377][ T3843] EXT4-fs (loop1): 1 truncate cleaned up
[   44.057623][ T3843] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.116003][ T3853] loop4: detected capacity change from 0 to 8192
[   44.150904][ T3864] loop3: detected capacity change from 0 to 128
[   44.215344][ T3871] capability: warning: `syz.0.128' uses deprecated v2 capabilities in a way that may be insecure
[   44.231342][ T3853] ==================================================================
[   44.240732][ T3853] BUG: KCSAN: data-race in mark_buffer_dirty_inode / mark_buffer_dirty_inode
[   44.249736][ T3853] 
[   44.252164][ T3853] write to 0xffff8881063bbc20 of 8 bytes by task 3866 on cpu 1:
[   44.260005][ T3853]  mark_buffer_dirty_inode+0x18d/0x1c0
[   44.265616][ T3853]  fat_mirror_bhs+0x241/0x330
[   44.271049][ T3853]  fat_alloc_clusters+0x994/0xa80
[   44.276165][ T3853]  fat_get_block+0x25c/0x5e0
[   44.280893][ T3853]  __block_write_begin_int+0x417/0xfa0
[   44.286672][ T3853]  block_write_begin+0x7b/0x170
[   44.291576][ T3853]  cont_write_begin+0x486/0x6b0
[   44.296766][ T3853]  fat_write_begin+0x61/0xf0
[   44.301475][ T3853]  cont_write_begin+0x186/0x6b0
[   44.306570][ T3853]  fat_write_begin+0x61/0xf0
[   44.311786][ T3853]  generic_cont_expand_simple+0xaa/0x150
[   44.317797][ T3853]  fat_cont_expand+0x3a/0x160
[   44.322735][ T3853]  fat_fallocate+0x182/0x1d0
[   44.327801][ T3853]  vfs_fallocate+0x392/0x3e0
[   44.332692][ T3853]  __x64_sys_fallocate+0x79/0xc0
[   44.337654][ T3853]  x64_sys_call+0x2783/0x2d60
[   44.342397][ T3853]  do_syscall_64+0xc9/0x1c0
[   44.347105][ T3853]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   44.353198][ T3853] 
[   44.355878][ T3853] read to 0xffff8881063bbc20 of 8 bytes by task 3853 on cpu 0:
[   44.363553][ T3853]  mark_buffer_dirty_inode+0x96/0x1c0
[   44.368981][ T3853]  fat_mirror_bhs+0x241/0x330
[   44.373717][ T3853]  fat_alloc_clusters+0x994/0xa80
[   44.378948][ T3853]  fat_get_block+0x25c/0x5e0
[   44.383992][ T3853]  __block_write_begin_int+0x417/0xfa0
[   44.389626][ T3853]  block_write_begin+0x7b/0x170
[   44.394595][ T3853]  cont_write_begin+0x486/0x6b0
[   44.399509][ T3853]  fat_write_begin+0x61/0xf0
[   44.404313][ T3853]  generic_perform_write+0x1b4/0x580
[   44.409641][ T3853]  __generic_file_write_iter+0xa1/0x120
[   44.416092][ T3853]  generic_file_write_iter+0x7d/0x1d0
[   44.421579][ T3853]  iter_file_splice_write+0x5e6/0x970
[   44.427095][ T3853]  do_splice+0x99b/0x1150
[   44.431694][ T3853]  __se_sys_splice+0x24c/0x390
[   44.436575][ T3853]  __x64_sys_splice+0x78/0x90
[   44.441352][ T3853]  x64_sys_call+0x2945/0x2d60
[   44.446237][ T3853]  do_syscall_64+0xc9/0x1c0
[   44.450875][ T3853]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   44.456897][ T3853] 
[   44.459333][ T3853] value changed: 0x0000000000000000 -> 0xffff888106112308
[   44.466680][ T3853] 
[   44.469298][ T3853] Reported by Kernel Concurrency Sanitizer on:
[   44.475555][ T3853] CPU: 0 UID: 0 PID: 3853 Comm: syz.4.123 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0
[   44.486616][ T3853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[   44.497572][ T3853] ==================================================================
[   44.594618][ T3259] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.