last executing test programs:

20.983161329s ago: executing program 3 (id=208):
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000280)='./file1\x00', 0x808010, &(0x7f0000000640)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES32], 0x1, 0x2b2, &(0x7f0000001380)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file1\x00'})
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x4, 0x0, 0xbd, 0x30, r1, 0x1, '\x00', 0x0, r0, 0x0, 0x3, 0x2, 0x6}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x80, 0x5, 0x1000}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x10, &(0x7f0000000740), 0x0, 0x0, 0xf4, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\xff\xff\xff\x7f\x00')
fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10)
pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0xd33)

20.602998126s ago: executing program 3 (id=210):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000028000000"], 0x0}, 0x94)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/195, 0xc3, 0x1, &(0x7f0000000300)=""/183, 0xb7}, &(0x7f00000001c0)=0x40)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x4000000000000178}, 0x18)
r2 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3)
fcntl$setsig(r3, 0xa, 0x12)
poll(&(0x7f0000b2c000)=[{r4}], 0x2c, 0xffffffffffbffff8)
dup2(r3, r4)
fcntl$setown(r3, 0x8, r2)
tkill(r2, 0x13)

20.344335941s ago: executing program 3 (id=214):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffce}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) (async)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x4, 0x8, 0xd, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50)
write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[], 0xff5f)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x10, "0062ba7d82e7ff00000000000000f7ffffff00"}) (async)
r3 = syz_open_pts(r2, 0x20000)
ioctl$FIONREAD(r3, 0x541b, &(0x7f00000000c0)) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r4}, 0x10) (async)
r5 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r5, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @broadcast, 'bond_slave_1\x00'}}, 0x1e) (async)
r6 = socket$kcm(0x10, 0x2, 0x0) (async)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r7, 0x3) (async)
syz_emit_ethernet(0x0, 0x0, 0x0) (async)
syz_emit_ethernet(0x0, 0x0, 0x0) (async)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x44, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) (async)
setsockopt(r9, 0x2565, 0x7, &(0x7f0000000000), 0x0) (async)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880)
r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r10, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=0x1, @ANYRES32, @ANYBLOB='/\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="586ad04c5ee447e0001c31fb67e518bf", @ANYRES64=0x0], 0x20) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001000)={'tunl0\x00', &(0x7f0000000f80)={'ip_vti0\x00', 0x0, 0x10, 0x7, 0x6, 0x2, {{0xa, 0x4, 0x1, 0x29, 0x28, 0x66, 0x0, 0x4, 0x4, 0x0, @remote, @local, {[@rr={0x7, 0x7, 0xa0, [@private=0xa010102]}, @timestamp_addr={0x44, 0xc, 0xe5, 0x1, 0x8, [{@broadcast, 0x90}]}]}}}}})

20.188143944s ago: executing program 3 (id=217):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1f5a685a}, 0x4dc8, 0x10000, 0xfffffffc, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRESHEX=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='kfree\x00', r1}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
write$binfmt_script(r3, 0x0, 0x0)
r4 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x6)
symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r5, &(0x7f0000000080)='./file0\x00')
syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5024, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x83}, 0x6c8d, 0x0, 0x0, 0x0, 0x0, 0x6e, 0x8}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='7'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$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")
r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0)
writev(r8, &(0x7f0000000a40)=[{&(0x7f0000000e00)='t', 0x1}, {0x0}], 0x2)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
syz_clone(0x8010e000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8946, &(0x7f0000000080))
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd, 0x0, 0x0})
socket$nl_route(0x10, 0x3, 0x0)

19.83314818s ago: executing program 3 (id=221):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) (async)
syz_io_uring_setup(0x23b, &(0x7f0000000380)={0x0, 0xce0a, 0x10100, 0x3, 0x370}, 0x0, 0x0) (async)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00')
pread64(r1, &(0x7f0000000600)=""/4114, 0x1012, 0x5)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xee)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000000000000a00000000004e22fcffffff000000007ecd00000000000000000000000000000000ffff"], 0x54}}, 0x20000080) (async)
r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006040)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfeff0000}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000810) (async)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11) (async)
fstat(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r6=>0x0}) (async)
r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r7) (async)
keyctl$read(0xb, r7, &(0x7f0000000040)=""/117, 0x75)
keyctl$restrict_keyring(0x1d, 0xfffffffffffffffd, &(0x7f0000001800)='rxrpc\x00', 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[], 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x8, 0x20, 0x31b4, 0x40, {{0x6, 0x4, 0x2, 0x7, 0x18, 0x65, 0x0, 0x4, 0x2f, 0x0, @local, @broadcast, {[@generic={0x94, 0x2}]}}}}}) (async)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) (async)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001740)={0x6, 0x18, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001640)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001680)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000016c0)={0x0, 0xb, 0xffff166f, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001700)=[r0], 0x0, 0x10, 0x958}, 0x94) (async)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xa, 0x2)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') (async)
mount$9p_tcp(&(0x7f0000000080), &(0x7f0000000280)='./file2\x00', &(0x7f00000002c0), 0x81400, &(0x7f0000000500)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@cache_none}, {@aname={'aname', 0x3d, 'GPL\x00'}}, {@noxattr}, {@mmap}, {@msize={'msize', 0x3d, 0xb1}}, {@access_any}, {@access_client}, {@access_user}, {@access_user}, {@afid={'afid', 0x3d, 0x6}}], [{@func={'func', 0x3d, 'PATH_CHECK'}}, {@measure}, {@euid_eq={'euid', 0x3d, r6}}]}})
renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0)

19.039764806s ago: executing program 3 (id=223):
r0 = socket$inet(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x1, 0x0, 0x1, 0xa, 0x21005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x1, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x1}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0xffffffd9}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000640))
unshare(0x22020400)
r4 = syz_io_uring_setup(0xcd9, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x0, 0x234}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000300)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000480)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00'})
syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f0002"], 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x240, 0x240, 0x0, 0x350, 0x370, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000000)=0x1f5c, 0x4)
bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r7, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
io_uring_enter(r4, 0x40f9, 0x217, 0xa5, 0x0, 0x0)

19.025190126s ago: executing program 32 (id=223):
r0 = socket$inet(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x1, 0x0, 0x1, 0xa, 0x21005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x1, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x1}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0xffffffd9}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000640))
unshare(0x22020400)
r4 = syz_io_uring_setup(0xcd9, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x0, 0x234}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000300)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000480)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00'})
syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f0002"], 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x240, 0x240, 0x0, 0x350, 0x370, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000000)=0x1f5c, 0x4)
bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r7, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
io_uring_enter(r4, 0x40f9, 0x217, 0xa5, 0x0, 0x0)

9.020290297s ago: executing program 4 (id=326):
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={<r2=>r1, 0xffffffffffffffff, 0xfffffffffffffe01, 0x3})
r3 = socket$can_bcm(0x1d, 0x2, 0x2) (async, rerun: 32)
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@private0, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@broadcast}, 0x0, @in=@initdev}}, &(0x7f0000000180)=0xe8) (rerun: 32)
quotactl_fd$Q_QUOTAON(r3, 0xffffffff80000201, r4, &(0x7f00000001c0)='./file0\x00') (async, rerun: 32)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r5)
getsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000240), &(0x7f0000000280)=0x4) (async, rerun: 64)
readv(r3, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/138, 0x8a}, {&(0x7f0000000380)=""/166, 0xa6}, {&(0x7f0000000440)=""/85, 0x55}, {&(0x7f00000004c0)=""/102, 0x66}, {&(0x7f0000000540)=""/168, 0xa8}], 0x5) (rerun: 64)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={&(0x7f0000000680)="d8274a8c0899c13d35654990085b0e83d897c69faa65123611714b77dfe359199b6f66d2704151b9244705f903a1dead71686fafc97a76cfa7658a1040637452e450a6344628e7901a48ad44b00689be50b6319c37ef4e3117a1e17c5396327453cf8a3f8e3c6f8b34", &(0x7f0000000700)=""/24, &(0x7f0000000740)="22148f6af24fa7e0dd82aa3af694c3d0d4fab230967a006bcea89b4e29ef6ed4b762856a9aa95314dad3540a602004f294197a7b008780b959d679d8b7fb4888af0260191af4b52247fff18339c56283e441350dba7253323791a5672ac676e700e3081c509fcb2293215b296da342572e2369131adadafbff8f8df4971933329c0fdbcb862c09d6445cf96af08c0ffaed9bf4b1a7c9a61d2a18631c79f97819eed585aff618cec25abb2d35666dd0ada64fc0570aa4391683d7923c93f33c2619313d954d8e8fa236cb19b81a9cf8af1ad196aaa8b9134dbbb187a6", &(0x7f0000000840)="54f6a0cd2c398a438201719e623dc17af799dff5ab04082377e0475c8832f2d3b369aab841eec439e6028d9f8607398c7b9de2f78826fc94f80175146b86f4353f363e54fb56fd880633fc2ad61401f04b521260bcc18a441a168c4a7801e1465807754084f866dc705d55ae1e35b429e9205b27fd614e746dd1c141ed41afe9cd01e6fe3d1927183a6247", 0x3, r0, 0x4}, 0x38) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='afs_get_tree\x00', r2, 0x0, 0x80}, 0x18) (async)
ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f00000009c0)={0x18, 0x0, {0x3, @local, 'team0\x00'}})
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000a00)={'filter\x00', 0x4}, 0x68) (async)
openat$cgroup_procs(r2, &(0x7f0000000a80)='tasks\x00', 0x2, 0x0) (async)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000ac0), 0x4) (async, rerun: 64)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000b40)={0x2, 0x0, &(0x7f0000000b00)=[r3, r1]}, 0x2) (async, rerun: 64)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r7 = socket(0x27, 0x4, 0x80)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r7, 0x10f, 0x83, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4)
setsockopt$MRT6_DEL_MFC_PROXY(r7, 0x29, 0xd3, &(0x7f0000000c00)={{0xa, 0x4e23, 0x1, @mcast2, 0xfffffff9}, {0xa, 0x4e20, 0x1, @private1, 0x7}, 0x0, {[0x6, 0x4, 0x6, 0x83aa, 0x401, 0x400, 0x6, 0x7]}}, 0x5c) (async)
lsetxattr$trusted_overlay_opaque(&(0x7f0000000c80)='./file0/file0\x00', &(0x7f0000000cc0), &(0x7f0000000d00), 0x2, 0x2)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r2, 0x3312, 0x454)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000d40)={<r8=>0x0, 0x4}, &(0x7f0000000d80)=0x8)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000dc0)={r8, @in6={{0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x35}, 0x8000}}, 0x7fff, 0x8000}, 0x90) (async, rerun: 64)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r2) (rerun: 64)
sendmsg$NL80211_CMD_REQ_SET_REG(r7, &(0x7f0000000f80)={&(0x7f0000000e80), 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x14, r9, 0x4, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xa5f9e8c83c74d7ab}, 0x48000) (async)
setsockopt$CAIFSO_LINK_SELECT(r7, 0x116, 0x7f, &(0x7f0000000fc0)=0x4, 0x4) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000001080)={r8, 0x4c, &(0x7f0000001000)=[@in6={0xa, 0x4e22, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x454}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e24, @rand_addr=0x64010101}, @in={0x2, 0x4e23, @loopback}]}, &(0x7f00000010c0)=0x10)

8.943891999s ago: executing program 4 (id=327):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@float={0x4, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x61, 0x0, 0x30]}}, 0x0, 0x29, 0x0, 0x1, 0x1}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7708}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001740)='GPL\x00', 0x6, 0xfff9, 0x0, 0x41100, 0x18, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000015c0)={0x0, 0xf, 0xa0, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)

8.758276463s ago: executing program 4 (id=328):
r0 = open(&(0x7f0000000040)='./file1\x00', 0x0, 0x86)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x20010, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x42, 0x113)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r1=>0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r3}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x18)
shutdown(0xffffffffffffffff, 0x0)
quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2)
openat$tun(0xffffffffffffff9c, 0x0, 0x5be040b43913cdd7, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
write$P9_RREADLINK(r4, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
socket$inet6_tcp(0xa, 0x1, 0x0)

8.279804652s ago: executing program 4 (id=334):
syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = epoll_create1(0x80000)
r3 = fcntl$dupfd(r1, 0x406, r2)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000040)={0x10})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x10000014})
r5 = getpid()
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r3, &(0x7f0000000100)={r2, r3, 0xfffffffc})
getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f0000000080)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='ext4_error\x00', r7}, 0x18)
r8 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19)
pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0)

7.941833128s ago: executing program 4 (id=342):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x207, 0x226103)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syz_tun\x00'})
sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580100001000130428bd700000000000ac1414aa000000000000000000000000ac1e0101000000000000000000000000002000004e2400000a0020201d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x80}, 0x804)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001240)={{r0}, &(0x7f00000011c0), &(0x7f0000001200)=r1}, 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000cc0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$unix(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000007c0)='T', 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0)
recvmsg$unix(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/230, 0xe6}], 0x1}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
syz_open_dev$usbfs(&(0x7f00000001c0), 0x207, 0x226103) (async)
fcntl$dupfd(r3, 0x0, r3) (async)
ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syz_tun\x00'}) (async)
sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580100001000130428bd700000000000ac1414aa000000000000000000000000ac1e0101000000000000000000000000002000004e2400000a0020201d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x80}, 0x804) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001240)={{r0}, &(0x7f00000011c0), &(0x7f0000001200)=r1}, 0x20) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000cc0)) (async)
sendmsg$unix(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000007c0)='T', 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) (async)
recvmsg$unix(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/230, 0xe6}], 0x1}, 0x0) (async)

7.635463954s ago: executing program 4 (id=348):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r2}, 0x18)
keyctl$read(0xb, 0x0, 0x0, 0x0)
keyctl$chown(0x4, 0x0, 0x0, 0x0)
fchown(r0, 0x0, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
shutdown(r3, 0x1)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r4, 0xffffffffffffffff, 0x0)

7.602753604s ago: executing program 33 (id=348):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r2}, 0x18)
keyctl$read(0xb, 0x0, 0x0, 0x0)
keyctl$chown(0x4, 0x0, 0x0, 0x0)
fchown(r0, 0x0, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
shutdown(r3, 0x1)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r4, 0xffffffffffffffff, 0x0)

3.541453032s ago: executing program 0 (id=416):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0x42, &(0x7f0000000380)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x3, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x18)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a)
setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4)

3.228403858s ago: executing program 0 (id=423):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="250a00190000000061110000000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x2}, 0x94)
eventfd2(0xb, 0x800)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
r0 = getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r2}, 0x18)
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x142000)
ioctl$SG_IO(r3, 0x2285, &(0x7f00000004c0)={0x53, 0xfffffffffffffffe, 0x6, 0x2, @scatter={0x1, 0xdd, &(0x7f0000000040)=[{&(0x7f0000000580)=""/226, 0x95}]}, &(0x7f00000000c0)="ff33501ef663", 0x0, 0x840804, 0x10032, 0x1000, 0x0})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$key(0xf, 0x3, 0x2)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0ffb}]})
brk(0x1)

3.109024861s ago: executing program 0 (id=425):
r0 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x75b5000)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, 0x0, &(0x7f00000000c0))
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x11223}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x6}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)

3.040659231s ago: executing program 0 (id=426):
r0 = perf_event_open(&(0x7f0000000000)={0x7, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x9, 0x539, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x5}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r0, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8}, 0x94)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
syz_open_pts(r4, 0x141601)
r7 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
readlink(0x0, 0x0, 0x0)
r8 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
pidfd_send_signal(0xffffffffffffffff, 0x4002, 0x0, 0x4)
r9 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r9, 0x0)
write$selinux_load(r8, &(0x7f0000000000)=ANY=[], 0xffa8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r3}, 0x94)
r10 = syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0x692b, 0x13500, 0x0, 0x376}, &(0x7f0000000240), &(0x7f0000000480))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r10, 0x21, &(0x7f0000000440), 0x1)
r11 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800)
ioctl$SG_GET_VERSION_NUM(r11, 0x2284, &(0x7f0000000080))

2.964370833s ago: executing program 0 (id=429):
r0 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==")
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0xb, &(0x7f00000012c0)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000400)={{r0}, {@void, @max}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10)
io_pgetevents(0x0, 0x8, 0x0, 0x0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x4, 0x8, 0x963, 0xd8e, 0xffffffffffffffff, <r2=>0x0})
sched_setscheduler(r2, 0x0, &(0x7f0000000000))
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000000)="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", 0xfc)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r4=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f00000001c0)={@mcast2, r4}, 0x14)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0x5, <r5=>r0, 'id0\x00'})
recvfrom$inet_nvme(r5, &(0x7f0000000300)=""/255, 0xff, 0x10000, 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
renameat2(r6, &(0x7f0000000140)='./file0\x00', r6, &(0x7f0000000200)='./bus\x00', 0x0)

2.863928435s ago: executing program 0 (id=430):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0x0, 0x6}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_ECN={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xffff}, 0x18)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r4}, 0x18)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r5, 0x0, r6, 0x0, 0x7, 0x9)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10)
setreuid(0x0, 0xee00)
setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6})
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg$inet(r8, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10)
memfd_create(0x0, 0x5)
splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0)

1.638296038s ago: executing program 1 (id=442):
r0 = socket(0x10, 0x3, 0x0)
unshare(0x22020600) (async)
unshare(0x22020600)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
connect$can_j1939(r1, &(0x7f0000000140), 0x18) (async)
connect$can_j1939(r1, &(0x7f0000000140), 0x18)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)
sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0)

1.58296729s ago: executing program 1 (id=444):
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0x4, 0x6, 0x8, 0x100, 0x8, 0xd})
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x1, 0x6, 0x9, 0x17, 0x0, 0x70bd29, 0x25dfdbfb, [@sadb_spirange={0x2, 0x10, 0x4d3, 0x4d5}, @sadb_sa={0x2, 0x1, 0x4d5, 0x9, 0x1, 0x88, 0x1, 0x1a0000000}, @sadb_sa={0x2, 0x1, 0x4d2, 0x1, 0x0, 0x10, 0x4}, @sadb_x_nat_t_type={0x1, 0x14, 0x4}, @sadb_x_policy={0x8, 0x12, 0x4, 0x1, 0x0, 0x0, 0x7, {0x6, 0x33, 0x3, 0x4d, 0x0, 0x9, 0x0, @in=@rand_addr=0x64010101, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}}, @sadb_x_filter={0x5, 0x1a, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1, 0x10}, @sadb_x_nat_t_type={0x1, 0x14, 0x80}]}, 0xb8}}, 0x24008080)
r1 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x10)
fcntl$setlease(r1, 0x400, 0x2)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000200)={0x0, 0x0, 0x9, 0x81}, 0x8)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x30000, 0x0)
bind$vsock_stream(r3, &(0x7f0000000280)={0x28, 0x0, 0x0, @host}, 0x10)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000002c0)={<r4=>0x0, 0x9, 0x30, 0x6, 0x1}, &(0x7f0000000300)=0x18)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r3)
io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r3, 0x1e, &(0x7f0000000380)={r0}, 0x1)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r5=>r0, {0x200}}, './file0\x00'})
setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000400)={0x1, 'pimreg\x00', 0x4}, 0x18)
ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000440))
r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000480), 0x8000, 0x0)
ioctl$HIDIOCGUSAGE(r6, 0xc018480b, &(0x7f00000004c0)={0x2, 0x1, 0x8, 0x8, 0x3, 0x300000})
sendmsg$NFT_BATCH(r3, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x200}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_TYPE={0x8}]}], {0x14}}, 0x104}, 0x1, 0x0, 0x0, 0x44000}, 0x8010)
getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000700), &(0x7f0000000740)=0x8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000009c0)={'gretap0\x00', <r7=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x16, 0x22, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa4}, @map_val={0x18, 0x6, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000008c0)='GPL\x00', 0x1, 0x9f, &(0x7f0000000900)=""/159, 0x41100, 0x56, '\x00', r7, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xe9}, 0x94)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000b00)={r4, 0x9, 0x20}, 0xc)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b80), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000bc0)=<r11=>0x0)
sendmsg$NFC_CMD_LLC_SDREQ(r9, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r10, 0x402, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x898750348fa0f9b6}, 0x40)
setsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f0000000cc0)=0x1, 0x4)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000d00)={r4, 0xfff}, 0x8)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{r3}, &(0x7f0000000d40), &(0x7f0000000d80)='%pK    \x00'}, 0x20)

1.56505962s ago: executing program 1 (id=445):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x7c66df8b4c1da9e2, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00'}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)

1.536339091s ago: executing program 1 (id=446):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r2, 0x6, 0x9, &(0x7f00000000c0), 0x4)
getsockopt$inet6_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000280)=""/220, &(0x7f0000000000)=0xdc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18)
mount$9p_tcp(0x0, &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=t'])
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @b}})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f00000000c0)={{0x6, 0x8a}, 'port1\x00', 0xa0, 0x0, 0xa4b, 0x3f54, 0x6, 0x8000, 0x4d34, 0x0, 0x3, 0x5})

1.477233672s ago: executing program 1 (id=449):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x12, r2, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
preadv(r5, &(0x7f0000000a40)=[{0x0}], 0x1, 0x8, 0x8)
write$selinux_load(r2, &(0x7f0000000100)=ANY=[@ANYRES64], 0x1790)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x1, 0x402, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x81}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x1)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40001)
write$binfmt_aout(r6, &(0x7f0000000240)=ANY=[], 0xff2e)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x10, 0x0, 0x1, "0062b87d82101900f8ffe29a0ffef7ffeaff00"})
r7 = syz_open_pts(r6, 0x8182)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x17)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
r9 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_PRI(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000fcdbdf25010000000000000008410000004c001800003d35696200"], 0x68}, 0x1, 0x0, 0x0, 0x88004}, 0x4000000)

1.252472176s ago: executing program 5 (id=455):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000006b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffff9]}, 0x0, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r2 = socket$rxrpc(0x21, 0x2, 0x2)
recvmsg(r2, &(0x7f00000001c0)={&(0x7f0000000000)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000080)=""/157, 0x9d}, {&(0x7f0000000140)=""/96, 0x60}, {&(0x7f0000000240)=""/221, 0xdd}, {&(0x7f0000000340)=""/244, 0xf4}, {&(0x7f0000000440)=""/139, 0x8b}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/127, 0x7f}, {&(0x7f0000001580)=""/201, 0xc9}, {&(0x7f0000001680)=""/87, 0x57}], 0x9, &(0x7f00000017c0)=""/103, 0x67}, 0x40002000)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0)

1.076412549s ago: executing program 5 (id=460):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYRESHEX, @ANYRESHEX=r0, @ANYBLOB="d514fd8695f8e628a6b9cf0ca3064b0f6705f350e10e60d1ea3872b36d23b549e6ecd55ba726effe92e2d701dc89d08e5fff2a4c000afdab69a6fb774ba1e11cc0d8e24695b4c572ebacd4d36ad70829b47c1c10f243cc1dc74894578c92a6d4f60b2d3088a5358dc632f427587c719c58c4ec8cd01f036cb7883bc192a9bb515a750ae878e028a310a700139d46d0146ee6dda7c6580b946ace7b89619aea67e7fe6c908269a90be693967acbe2c4bd4d96", @ANYRES8=r0, @ANYRES32], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r6 = socket(0x1e, 0x80000, 0x9)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r8, &(0x7f00000001c0), 0x12)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = openat$cgroup_freezer_state(r7, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_freezer_state(r9, &(0x7f00000000c0)='THAWED\x00', 0x7)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='mark_victim\x00', r4, 0x0, 0x101}, 0x18)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x1000, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
chmod(&(0x7f0000000080)='./file0\x00', 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r10}, 0x3d)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r11 = socket$inet6(0xa, 0x0, 0x80000003)
sendto$inet6(r11, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
sendto$inet6(r6, &(0x7f0000001800)="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", 0x60a, 0x20048844, 0x0, 0x0)
sendto$inet6(r11, 0x0, 0x0, 0x0, 0x0, 0x0)
r12 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00'})

1.03993075s ago: executing program 5 (id=462):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4e7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
pipe2$9p(&(0x7f0000001900), 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5}, {0x0, [0x0, 0x5f, 0x1e]}}, &(0x7f0000000040)=""/39, 0x1d, 0x27, 0x1, 0x9, 0x10000}, 0x28)
r1 = openat$cgroup(r0, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000040)=""/30, 0x1e, 0x800000000040042)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$cgroup_type(r1, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r3}, 0x10)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)

1.012857571s ago: executing program 5 (id=463):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x15}, 0x0, 0x0, 0x800004, 0x5, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000023892)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x400000000000003, 0xfffffffffffffffa, 0x8, 0x100000000000000, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffc, 0x0, 0x9, 0x0, 0x80000, 0x7fffffff}, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r6}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r7, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e21, 0x80000, @remote, 0x3033}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002\x00\x00\x00', @ANYRESHEX=r7], 0x28}, 0x50)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x7, 0x4, 0x80, 0xe, 0x28}, 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x18)

951.547652ms ago: executing program 2 (id=465):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
setrlimit(0x40000000000008, &(0x7f0000000000))
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2}, 0x10)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)

791.991914ms ago: executing program 6 (id=470):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x3, 0x53e, &(0x7f0000000b40)="$eJzs3cFvHFcZAPBvJt544zh1Cj0AAhpKIaAoa3vTRlUvpBcQqiohKk4cUmNvLCu72ci7EbXJwT5w4F6JSJyA/4AbQpV64sCNG9y4lANSgAhUI3FYNLMTd2vvxktje2Lv7ydNZt57k/3e2817b+ZFuxPAxLoUEVsRcTYi3omIuSI/Kba40d+y8z56dH9559H95SR6vbf/keTlWV4M/J3M+eI1qxHx/e9E/CjZH7ezsXl7qdlsrBfp+W7r7nxnY/PqWhozeU79+uL1hdeuvVo/tLa+2PrNw2+vvfmD93/7pQ//uPXNn2TVmv3ZhbxssB2Hqd/0SswO5E1FxJtHEawkU8W/H06eNCI+ExEv5f1/Ls7kn2Zhe6rMqgEAR6TXm4ve3GAaADjtsvv/2UjSWrEWMBtpWqv11/BeiJm02e50r8y1791ZiXwN62JU0ltrzcZCsVZ4MSpJll7Mjz9O1z+Rfq9xLSKej4j3ps/l5bXldnOlzAsfAJhg5/fM//+e7s//gyplVQ4AODrVsisAABw78z8ATB7zPwBMnv9j/veNQAA4Jdz/A8DkMf8DwOQ5cP7fPp56AADH4ntvvZVtvZ3+718//qXuqyuNzu1a695ybbm9fre22m6vNhu15V7voNdrttt3F1/ZTXY2Nm+22vfudG+utZZWGzcbfksAAMr3/Isf/Dmb9LdeP5dvMfAsB3M1nG5p2RUASnOm7AoApfF9HphcY9zjWwaAU27II3r7igWCZNQJDzz8FU6qy5+3/g+T6mnW/60dwMn26db/v3Xo9QCOnzkcJlevl+x75n+6WwYAnEbW+IGR//9fqP70d8MLHhxFbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBkmM23JK3lzwLfyv5Ma7WICxFxMSrJrbVmYyEinouIP01XprP0YtmVBgCeUvq3pHj+1+W5l2f3lp5N/jOd7yPix794++fvLnW764tZ/j9387sPsvxz3fX62TIaAAAMurE/K5+/68V+4Eb+o0f3lx9vx1nFh29ERLUff6fY+iVTMZXvq1GJiJl/JUW6L7teOXMI8be2I+Jzj9tfjXcHIszmayDVPLU3fhb7wqHHH3z/98ZPP9HeNC/L9pX8vfhs7KkccKAP3uiPk0Xfy7p40f/SuJTvh/f/aj5CPb1s/Mu6686+8S/dHf/O7Iuf5H3+0m56T032PNT94Su//+6+wL25ftl2xBemhsVPduMnw8ffystjtvEvX/zyS6PKer+MuDy0/VnU9ysRrXyYne+27s53NjavrrWWVhurjTv1+vXF6wuvXXu1Pn9rrRkL8/lK9R+Gxfj761eeGxU/a//MiPjVJ7c/vjZm+3/133d++JUnxP/GV4d//i88IX72EX99zPhLMzeqo8qy+Csj2n/A5x9Xxoz/4V83V8Y8FQA4Bp2NzdtLzWZj/YCD7FrzoHMcjH+Q3ds/A9XID2IrYqyTzx98Tr4oERFDz8muqJ+NJh/VQVJa9F8f9guWPTIBR+3jTl92TQAAAAAAAAAAAAAAgFE6G5u3p4d/W+vQDspuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKfX/wIAAP//nCW+Cg==") (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x180) (async)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) (async, rerun: 64)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0xc082, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r0}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="5040fe9eeaeb5b147252ff16b869deb0fc383c26eff1389346469a73298f745b520bb209bd89", @ANYRES64=0x0], 0x10) (async)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124)
fcntl$lock(r4, 0x24, &(0x7f0000000100)={0x1, 0x2, 0x7fffffffffffffef, 0x2})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000140)=@framed={{}, [@jmp={0x5, 0x1, 0x6, 0xa, 0x6, 0xffffffffffffffff}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) (async)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async)
socket$nl_route(0x10, 0x3, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7, 0x0, 0x400007}, 0x18) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newlink={0x50, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x1000}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0xee}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x10001}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1}, 0x0) (async, rerun: 32)
r9 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040", 0x30}], 0x1}, 0xc094)
write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0xfe33) (async)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x11)
syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32, @ANYRESOCT=r8], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

717.266376ms ago: executing program 6 (id=471):
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x8aef}, 0x18) (async)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r2, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94) (async)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) (async)
mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0xd0061, &(0x7f0000000300)={[{@mode={'mode', 0x3d, 0x100}}, {}]})

716.804516ms ago: executing program 6 (id=472):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000000))
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x20, r3, 0x1, 0xffffffff, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x55f, &(0x7f0000000d00)="$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")
creat(&(0x7f0000000280)='./file1\x00', 0x68)

715.221346ms ago: executing program 2 (id=473):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
socket$packet(0x11, 0x3, 0x300)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0ffb}]})
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x4, 0xfd, 0x3, 0x2}, {0x38e6, 0x4, 0xf2, 0x1}, {0x0, 0x7, 0x0, 0xfffffff6}]})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32=r1], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
flistxattr(0xffffffffffffffff, 0x0, 0x2)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002200)=ANY=[], 0x250}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000805)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10)
r4 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x80800)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r4, 0x8008f513, &(0x7f0000000200))
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x4d3, 0x3c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x2}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x26}}, 0xf0}}, 0x0)
write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x1}, 0x8)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x18)
r8 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10)
sendmmsg$inet(r8, &(0x7f0000000240)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000340)="00000064c6ee84b46cd2525d13c96b5dbe1a8843", 0x14}], 0x1}}], 0x1, 0x0)
fstat(0xffffffffffffffff, &(0x7f00000004c0))
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0)

620.239368ms ago: executing program 2 (id=474):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1d8c6, 0x0, 0xffffffff, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001940)=@newtaction={0x14, 0x30, 0x10b}, 0x14}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8)
ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000380)=0x2)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xfc}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94)
kexec_load(0x1, 0x2, &(0x7f0000000340)=[{&(0x7f0000000680)="5e0d9dbf37dba11d680abffc5faf077fb55ce9957a45e57c93b7ad68826052c7ec1722f6b20638c7fbed7eaf9fa88dc23fefcb5aa6a619ec50828ce912e7331141e46c72fca84f3cd47f904c812f32b51b5f6be422e2d0faccdd6f351f7ff2cd4788dc342ad19294bcd191727615bf176f4d816e7f4b2cb6ae601505e30b64badaf372408d1f93f25e16e416161eb889cfdf5a95b455b5f61e54653bcb1a99d43e4ff5b880eb98b2a594e285f6fda266751b93267005917f6fb4caa90bb7", 0xbe, 0x5, 0x9}, {&(0x7f0000000740)="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", 0xfe, 0x9, 0x8}], 0x2a0000)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10)
r6 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01)
ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f00000000c0)=ANY=[])
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="162a683139e92f5c2bbf296e77ab6d898716acdc04ad46cea8ce4abc6368426b5fff1ad8094b626998a80db2dbb78191b15292db3f234a827754d57febd0a2e4f5bcc128c42cb6ec1ea77afe2ca1cb095b72b1de56593603f0eeae82f6be0bce9b7b13b44b177b659922ab229316ba63e6445792e467c05737e5d8af9cb2c56c57132b1dae0338451f8330ce877a3e5521f35b52e7313765339b9467d87d1c19ce34af55fdc84faca2eabb1add05bdc7df058e7be35478c6c6b8e437d8eb74b351f1981ff4", @ANYRES64=0x0], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r7}, &(0x7f0000000540), &(0x7f0000000580)='%pS    \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='writeback_bdi_register\x00'}, 0x18)
pipe2$9p(&(0x7f0000000240)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
r10 = dup(r9)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r10])
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

590.904399ms ago: executing program 6 (id=475):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15)
remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40081)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
preadv(r2, &(0x7f0000000500), 0x0, 0xfffffffd, 0x8)

587.130379ms ago: executing program 1 (id=476):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0x7fff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800f0ffffff0000000000000000ed001811b4b4", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000140)={0x18, 0x0, {0x4, @empty, 'erspan0\x00'}}, 0x1e)
sendmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r5, 0x1, 0x470bd29}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008012)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r6}, 0x38)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10)
r8 = socket(0x10, 0x2, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r9, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28)
write$binfmt_script(r9, &(0x7f0000000500)={'#! ', './file0'}, 0xb)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
close_range(r8, r9, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000001580)={[&(0x7f00000003c0)='kfree\x00', &(0x7f0000000400)='GPL\x00']}, &(0x7f0000001940)={[&(0x7f00000015c0)='\x00', &(0x7f0000001700)='$\x00', &(0x7f0000001740)='@*\x80]\x00', &(0x7f0000001780)='&.}\x00', &(0x7f00000017c0)='erspan0\x00', &(0x7f0000001800)='TIPC\x00', &(0x7f0000001840)='\x00', &(0x7f0000001880)='^\x00', &(0x7f00000018c0)='kfree\x00', &(0x7f0000001900)='#\\-\x00']})
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

314.303484ms ago: executing program 2 (id=477):
r0 = syz_io_uring_setup(0x1104, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xfffffffe, 0x21e}, &(0x7f00000003c0)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1fc})
io_uring_enter(r0, 0x47fa, 0xffffffff, 0x0, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}}, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/hci\x00')
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}, {&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="040094807a026c57d2654d115e528c1459241cdf02597f14d35c3655073c5f407b4160b64e80e167c709d80d9da587820eeb0f3c363a773f519c2717597d2217f73d756a1e5262327a0d6705cffb6119d2df818584899aaf8d7b874dbb99330a6d2593829a3125c105c65840af5555000d003f0026e4b56b1866ada1d6000000ae69a5084963450371edc84dc99933e5f3798214db2bbd9046f0ccf707e29850c523bbf617b1d7ef1a551fb4d16bc02c3b80b31afd787c9d7b26e5ddbb196f76b5ae845fa547821e75e7ce9e57909e40c4879551d2f2238d4b261e66380a5ae73b551539b77a6588ca710abc8bcf5659e97a7c436980198477bba636c008a123467d4ebde947f09e3e18471413aacf4976b500"], 0x2cc}], 0x2, 0x0, 0x0, 0x20000001}, 0x0)
quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000900, r7, &(0x7f0000000100))
lchown(&(0x7f0000000040)='./file0\x00', r7, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r7}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0)
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000240)=@loop={'/dev/loop', 0x0}, r7, &(0x7f0000000500)={0xfff, 0x6, 0x5, 0x10, 0x9, 0x1, 0x65800000000, 0x7, 0xffff})
quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000302, r7, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c000380280000800800034000000002040002800c000440000010c6f7a0b5ec0c0005"], 0xec}}, 0x8890)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r8=>0xffffffffffffffff})
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r8, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x40032043, 0x1})

188.251656ms ago: executing program 6 (id=478):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=<r2=>r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x1004}, 0x18)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021181500001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000ec140380300000802c000180250001"], 0x159c}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e999000000000000000000000000000000000000ffff00000000ac1414bb000000000000000000000000fffe0400100000000200202000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000070000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000676000000000000000000009f00000000000000000000000000000000000000040000000000000000000000c06b6e000001000000020000"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GCALLUSERDATA(r5, 0x89e4, &(0x7f0000001180)={0x78, "a2213d7104d551731bf5b904dc8c2de5e322906c33d067eafeba48a5600f5599600adbe6f6e5103d33d386489dda9b43e0e70f25bd627b037d22267374a7f04bdb4654ba86a011b4c5f74bcbf163eebc5e708f4c38b2684a310df3db8e8ebc514469c7e50263fc1137cd95173c690a6925cfbf2dafec4203d46c51035061bfbb"})
sendmmsg$sock(r3, &(0x7f0000000700)=[{{&(0x7f0000000100)=@xdp={0x2c, 0x7, 0x0, 0x29}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000800)="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", 0x1000}, {&(0x7f00000001c0)="53111948eb2f93f31b73ce810430fce86152e53e9c32ffec4e49c0c7d8727c6ed40815e90898604381f4e6d8ae752ea6113c5d9836674a799d4c5b5ea15eadfd496d2bf65bf37cd6d1949e314c536e08e2093d14580636c0818e69c5bd6caa25372abdaabfd55f201f934e07", 0x6c}, {&(0x7f00000002c0)="6d4abed4c24e317afdf79f6043cc1fc19ae2a8ec6534766fbe94359ac22931729c18a8100e1ee60b1f6d939f5ac0c83f3ec83b1eebb0e2ba95becc592c62d21b9609f6710315555aba86a5a1cffdf0d16eef7c62eb96c96066e0212d3dd0bfd6d38679727f675819f0d04acba6cdce", 0x6f}, {&(0x7f0000000080)="21e37b47be22295f130b88668fb02552b0347b", 0x13}, {&(0x7f00000003c0)="81286b964bb859d626de01eb76ec034643e7588319c097a8b6ccf015ed74c5b2068063881bea6093c0ebf22444588ecf033ad752e631b018c4cde173c74b1c40e6611bab3ff83d764d02c98f0dcd6acfa155bc359115659abe", 0x59}, {&(0x7f0000000340)="e05421c9", 0x4}, {&(0x7f0000001ec0)="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", 0x1000}, {&(0x7f0000000440)="716a23478d938e200a66d035d0741df478cf9c1978bc0905ebd875d224d4cee6720fe74b0544b4c9dcf1abc4549a4865b1b73fe3a3e8b31540ed0c92c979844aa101b7b1c6a5e723fd56b85fdc28910ad4c8fe048562ffddb0436d39de4a19023ff15b232c3b24de6cbab083f4dfa7f9c79ee10412ba992a8eb8", 0x7a}], 0x8, &(0x7f0000000600)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x40}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x1ba}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x1c00000}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0xa}}, @timestamping={{0x14, 0x1, 0x25, 0xd3b}}], 0xd8}}], 0x1, 0x40080)
openat$zero(0xffffffffffffff9c, &(0x7f0000001800), 0x400, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a400020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newrule={0x2c, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xac1bea169f952a73}, [@FRA_FLOW={0x8, 0xb, 0x8}, @FRA_DST={0x8, 0x1, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9)
sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001840)=ANY=[@ANYRESOCT=r2, @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r11)

133.666757ms ago: executing program 5 (id=479):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000004000000ff4158d20800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0, <r2=>0xffffffffffffffff}, &(0x7f0000000380), &(0x7f0000000280)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc)
setuid(0xee01)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x5, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x280, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff}, 0x10}, 0x94)
ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000140))
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="dc79eeb6e67bfc03bcae1c2be829d20ef01922ef2fbcb7145e5bb5b5b84e0f4176a407c2fd25", @ANYBLOB="00000000000000000000000000e5000003000000d97b281ffaa8d00c18f9467288cc247b12afc2c5074ff290ddc38dd489201d6f50a8df44921117765c92accbe59a618d0383c86de504e5770863868d2e638f20f4636216ff28ad3ac1f7d058517388b74a7d9f44a89f4b9a754bb4", @ANYRES32=r0], 0x50)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000300), 0x2, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r6, 0x50009402, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r5, 0x111, 0x4, 0x1, 0x4)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000240)={0x2})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0300000080"], 0x50)

115.422058ms ago: executing program 2 (id=480):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1d8c6, 0x0, 0xffffffff, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001940)=@newtaction={0x14, 0x30, 0x10b}, 0x14}}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000380)=0x2)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xfc}}, 0x0)

60.371949ms ago: executing program 5 (id=481):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x1, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
socket$kcm(0xa, 0x922000000003, 0x11)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x6}, 0x18)
syz_clone(0x63081180, 0x0, 0x0, 0x0, 0x0, 0x0)

522.03µs ago: executing program 2 (id=482):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='task_rename\x00', r1, 0x0, 0xe3b9}, 0x18)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50)
faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5)
r2 = socket(0x10, 0x3, 0x0)
recvmsg$kcm(r2, 0x0, 0x80)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xfffffff3}]}}]}, 0x38}}, 0x0)
r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xd4, 0x1, 0x0, 0x0, 0x0, 0xf, 0x9211, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x8, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mm_page_alloc\x00', r5, 0x0, 0x10040b}, 0x18)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x0)

0s ago: executing program 6 (id=483):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x2000, 0x10000, 0x0, 0x1, 0x8, 0x7, 0xb, 0x0, 0x0, 0x0, 0x20010006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]})
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000005304"], 0x14}}, 0x0) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$packet(0x11, 0x3, 0x300)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async)
setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000100)=0x9, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'geneve0\x00', <r4=>0x0}) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) (async, rerun: 32)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) (async, rerun: 32)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) (async, rerun: 64)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) (rerun: 64)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
sendto$packet(r3, &(0x7f0000000180)="0b036800e0ff64000200475486dd", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r8) (async)
r10 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r11}, 0x10) (async, rerun: 32)
sendmsg$NL80211_CMD_GET_WIPHY(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01032bbd700000000000010000"], 0x28}}, 0x44) (rerun: 32)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r12=>r3, {0xcac}}, './file0\x00'})
setsockopt$MRT_DONE(r12, 0x0, 0xc9, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.97' (ED25519) to the list of known hosts.
[   27.713216][   T29] audit: type=1400 audit(1757768864.771:62): avc:  denied  { mounton } for  pid=3290 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   27.714373][ T3290] cgroup: Unknown subsys name 'net'
[   27.735974][   T29] audit: type=1400 audit(1757768864.771:63): avc:  denied  { mount } for  pid=3290 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   27.763448][   T29] audit: type=1400 audit(1757768864.801:64): avc:  denied  { unmount } for  pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   27.909663][ T3290] cgroup: Unknown subsys name 'cpuset'
[   27.916128][ T3290] cgroup: Unknown subsys name 'rlimit'
[   28.036934][   T29] audit: type=1400 audit(1757768865.091:65): avc:  denied  { setattr } for  pid=3290 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   28.060306][   T29] audit: type=1400 audit(1757768865.091:66): avc:  denied  { create } for  pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   28.080945][   T29] audit: type=1400 audit(1757768865.091:67): avc:  denied  { write } for  pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   28.093640][ T3296] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   28.101357][   T29] audit: type=1400 audit(1757768865.091:68): avc:  denied  { read } for  pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   28.130219][   T29] audit: type=1400 audit(1757768865.111:69): avc:  denied  { mounton } for  pid=3290 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   28.150339][ T3290] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   28.155121][   T29] audit: type=1400 audit(1757768865.111:70): avc:  denied  { mount } for  pid=3290 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   28.187302][   T29] audit: type=1400 audit(1757768865.171:71): avc:  denied  { relabelto } for  pid=3296 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   30.222328][ T3303] chnl_net:caif_netlink_parms(): no params data found
[   30.266289][ T3311] chnl_net:caif_netlink_parms(): no params data found
[   30.301864][ T3302] chnl_net:caif_netlink_parms(): no params data found
[   30.310615][ T3309] chnl_net:caif_netlink_parms(): no params data found
[   30.377506][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.384648][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.391919][ T3303] bridge_slave_0: entered allmulticast mode
[   30.398499][ T3303] bridge_slave_0: entered promiscuous mode
[   30.418655][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.425781][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.432985][ T3303] bridge_slave_1: entered allmulticast mode
[   30.439471][ T3303] bridge_slave_1: entered promiscuous mode
[   30.450655][ T3304] chnl_net:caif_netlink_parms(): no params data found
[   30.478449][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.485592][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.492873][ T3311] bridge_slave_0: entered allmulticast mode
[   30.499472][ T3311] bridge_slave_0: entered promiscuous mode
[   30.527579][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.534731][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.542043][ T3311] bridge_slave_1: entered allmulticast mode
[   30.548456][ T3311] bridge_slave_1: entered promiscuous mode
[   30.560858][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.567914][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.575122][ T3302] bridge_slave_0: entered allmulticast mode
[   30.581626][ T3302] bridge_slave_0: entered promiscuous mode
[   30.588111][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.595292][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.602562][ T3309] bridge_slave_0: entered allmulticast mode
[   30.609054][ T3309] bridge_slave_0: entered promiscuous mode
[   30.616677][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.625804][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.632948][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.640128][ T3309] bridge_slave_1: entered allmulticast mode
[   30.646491][ T3309] bridge_slave_1: entered promiscuous mode
[   30.661188][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.668263][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.675420][ T3302] bridge_slave_1: entered allmulticast mode
[   30.681983][ T3302] bridge_slave_1: entered promiscuous mode
[   30.689387][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.731511][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.741776][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.761149][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.771683][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.781915][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.792389][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.807472][ T3303] team0: Port device team_slave_0 added
[   30.833791][ T3303] team0: Port device team_slave_1 added
[   30.855732][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.862862][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.871127][ T3304] bridge_slave_0: entered allmulticast mode
[   30.877494][ T3304] bridge_slave_0: entered promiscuous mode
[   30.889670][ T3311] team0: Port device team_slave_0 added
[   30.896097][ T3302] team0: Port device team_slave_0 added
[   30.902434][ T3309] team0: Port device team_slave_0 added
[   30.908238][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.915331][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.922540][ T3304] bridge_slave_1: entered allmulticast mode
[   30.929066][ T3304] bridge_slave_1: entered promiscuous mode
[   30.941095][ T3311] team0: Port device team_slave_1 added
[   30.947201][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.954177][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.980098][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.991538][ T3302] team0: Port device team_slave_1 added
[   30.997942][ T3309] team0: Port device team_slave_1 added
[   31.014313][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.021315][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.047324][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.074429][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.102327][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.111700][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.118640][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.144690][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.155701][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.162739][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.188697][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.205142][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.212603][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.238675][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.255256][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.262271][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.288223][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.302072][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.309060][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.334984][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.346751][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.353767][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.379934][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.398785][ T3304] team0: Port device team_slave_0 added
[   31.405812][ T3304] team0: Port device team_slave_1 added
[   31.432904][ T3303] hsr_slave_0: entered promiscuous mode
[   31.439130][ T3303] hsr_slave_1: entered promiscuous mode
[   31.452124][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.459120][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.485025][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.511591][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.518558][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.544494][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.561904][ T3309] hsr_slave_0: entered promiscuous mode
[   31.567961][ T3309] hsr_slave_1: entered promiscuous mode
[   31.574035][ T3309] debugfs: 'hsr0' already exists in 'hsr'
[   31.579807][ T3309] Cannot create hsr debugfs directory
[   31.600703][ T3302] hsr_slave_0: entered promiscuous mode
[   31.606802][ T3302] hsr_slave_1: entered promiscuous mode
[   31.612756][ T3302] debugfs: 'hsr0' already exists in 'hsr'
[   31.618481][ T3302] Cannot create hsr debugfs directory
[   31.650749][ T3311] hsr_slave_0: entered promiscuous mode
[   31.656916][ T3311] hsr_slave_1: entered promiscuous mode
[   31.662905][ T3311] debugfs: 'hsr0' already exists in 'hsr'
[   31.668667][ T3311] Cannot create hsr debugfs directory
[   31.705862][ T3304] hsr_slave_0: entered promiscuous mode
[   31.712001][ T3304] hsr_slave_1: entered promiscuous mode
[   31.717815][ T3304] debugfs: 'hsr0' already exists in 'hsr'
[   31.723581][ T3304] Cannot create hsr debugfs directory
[   31.903165][ T3303] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   31.914001][ T3303] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   31.925062][ T3303] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   31.933878][ T3303] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   31.959812][ T3309] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   31.969140][ T3309] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   31.984038][ T3309] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   31.993196][ T3309] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   32.007107][ T3302] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   32.017420][ T3302] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   32.033850][ T3302] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   32.050004][ T3302] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   32.071932][ T3304] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   32.094001][ T3304] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   32.112444][ T3304] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   32.129926][ T3311] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   32.138942][ T3304] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   32.151699][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.167276][ T3311] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   32.182949][ T3311] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   32.198456][ T3311] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   32.216697][ T3303] 8021q: adding VLAN 0 to HW filter on device team0
[   32.231126][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.238303][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.250117][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.265835][ T1463] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.272953][ T1463] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.287085][ T3309] 8021q: adding VLAN 0 to HW filter on device team0
[   32.305242][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.317650][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.324903][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.346373][  T136] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.353478][  T136] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.378741][ T3303] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   32.389172][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   32.413471][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.422904][ T3302] 8021q: adding VLAN 0 to HW filter on device team0
[   32.440929][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.448010][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.481712][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.488930][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.501736][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.510670][ T3304] 8021q: adding VLAN 0 to HW filter on device team0
[   32.526405][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.533558][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.542570][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.549680][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.586858][ T3311] 8021q: adding VLAN 0 to HW filter on device team0
[   32.597374][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.607711][ T3302] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   32.618163][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   32.634610][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   32.656858][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.663976][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.682224][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.689333][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.730214][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   32.756181][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.771113][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.821036][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.863375][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.900627][ T3303] veth0_vlan: entered promiscuous mode
[   32.921653][ T3303] veth1_vlan: entered promiscuous mode
[   32.968528][ T3303] veth0_macvtap: entered promiscuous mode
[   32.981316][ T3309] veth0_vlan: entered promiscuous mode
[   32.987201][ T3303] veth1_macvtap: entered promiscuous mode
[   33.006725][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.018365][ T3309] veth1_vlan: entered promiscuous mode
[   33.031900][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.053231][ T3309] veth0_macvtap: entered promiscuous mode
[   33.072722][ T3302] veth0_vlan: entered promiscuous mode
[   33.080730][ T3309] veth1_macvtap: entered promiscuous mode
[   33.097591][ T3302] veth1_vlan: entered promiscuous mode
[   33.110938][ T3448] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.127228][ T3304] veth0_vlan: entered promiscuous mode
[   33.135392][ T3448] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.152636][ T3304] veth1_vlan: entered promiscuous mode
[   33.163988][ T3302] veth0_macvtap: entered promiscuous mode
[   33.170752][ T3448] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.183616][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.192187][   T29] kauditd_printk_skb: 9 callbacks suppressed
[   33.192202][   T29] audit: type=1400 audit(1757768870.251:81): avc:  denied  { mounton } for  pid=3303 comm="syz-executor" path="/root/syzkaller.3NpPDg/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   33.209718][ T3304] veth0_macvtap: entered promiscuous mode
[   33.229536][   T29] audit: type=1400 audit(1757768870.251:82): avc:  denied  { mount } for  pid=3303 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   33.243051][ T3302] veth1_macvtap: entered promiscuous mode
[   33.251708][   T29] audit: type=1400 audit(1757768870.251:83): avc:  denied  { mounton } for  pid=3303 comm="syz-executor" path="/root/syzkaller.3NpPDg/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   33.259516][ T3448] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.282442][   T29] audit: type=1400 audit(1757768870.251:84): avc:  denied  { mount } for  pid=3303 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   33.299707][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.312882][   T29] audit: type=1400 audit(1757768870.251:85): avc:  denied  { mounton } for  pid=3303 comm="syz-executor" path="/root/syzkaller.3NpPDg/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   33.321766][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.346633][   T29] audit: type=1400 audit(1757768870.251:86): avc:  denied  { mounton } for  pid=3303 comm="syz-executor" path="/root/syzkaller.3NpPDg/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   33.355621][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.381202][   T29] audit: type=1400 audit(1757768870.251:87): avc:  denied  { unmount } for  pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   33.409771][   T29] audit: type=1400 audit(1757768870.291:88): avc:  denied  { mounton } for  pid=3303 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   33.410090][ T3303] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   33.432755][   T29] audit: type=1400 audit(1757768870.291:89): avc:  denied  { mount } for  pid=3303 comm="syz-executor" name="/" dev="gadgetfs" ino=3709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   33.475536][ T3304] veth1_macvtap: entered promiscuous mode
[   33.482335][   T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.496822][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.504406][   T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.524004][ T3311] veth0_vlan: entered promiscuous mode
[   33.530230][   T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.540203][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.547669][   T29] audit: type=1400 audit(1757768870.591:90): avc:  denied  { read write } for  pid=3303 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   33.571194][ T3471] loop0: detected capacity change from 0 to 1024
[   33.578405][ T3471] =======================================================
[   33.578405][ T3471] WARNING: The mand mount option has been deprecated and
[   33.578405][ T3471]          and is ignored by this kernel. Remove the mand
[   33.578405][ T3471]          option from the mount to silence this warning.
[   33.578405][ T3471] =======================================================
[   33.614669][ T3471] EXT4-fs: quotafile must be on filesystem root
[   33.623924][ T3311] veth1_vlan: entered promiscuous mode
[   33.630582][   T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.647359][   T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.674558][   T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.697295][ T3311] veth0_macvtap: entered promiscuous mode
[   33.718899][   T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.727820][   T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.737794][ T3311] veth1_macvtap: entered promiscuous mode
[   33.752172][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.759572][   T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.782311][   T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.792482][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.808370][ T3484] loop1: detected capacity change from 0 to 512
[   33.837709][ T1463] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.869602][ T3484] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.881747][ T1463] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.915784][ T3484] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   33.919268][ T3498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7'.
[   33.960029][ T1463] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.965415][ T3506] loop0: detected capacity change from 0 to 1024
[   33.982194][ T1463] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   34.027072][ T3506] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   34.030158][ T1463] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   34.038046][ T3506] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   34.064262][ T3511] loop4: detected capacity change from 0 to 128
[   34.072458][ T1463] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   34.088146][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.115021][ T3506] JBD2: no valid journal superblock found
[   34.120879][ T3506] EXT4-fs (loop0): Could not load journal inode
[   34.188389][ T3506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8'.
[   34.301181][    C0] hrtimer: interrupt took 37586 ns
[   34.303431][ T3535] netlink: 256 bytes leftover after parsing attributes in process `syz.0.13'.
[   34.390917][ T3548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16'.
[   34.399757][ T3548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16'.
[   34.540314][ T3526] loop1: detected capacity change from 0 to 512
[   34.609211][ T3548] futex_wake_op: syz.2.16 tries to shift op by 144; fix this program
[   34.685487][ T3526] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.717722][ T3548] loop2: detected capacity change from 0 to 512
[   34.813670][ T3548] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   34.826843][ T3548] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   34.844136][ T3526] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   34.918026][ T3548] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.16: invalid indirect mapped block 4294967295 (level 0)
[   34.952141][ T3548] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.16: invalid indirect mapped block 4294967295 (level 1)
[   35.016378][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.031018][ T3548] EXT4-fs (loop2): 1 orphan inode deleted
[   35.036846][ T3548] EXT4-fs (loop2): 1 truncate cleaned up
[   35.078671][ T3548] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   35.106446][ T3575] netlink: 'syz.1.21': attribute type 3 has an invalid length.
[   35.114079][ T3575] netlink: 'syz.1.21': attribute type 3 has an invalid length.
[   35.122668][ T3575] netlink: 16 bytes leftover after parsing attributes in process `syz.1.21'.
[   35.128311][ T3548] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.16: iget: bad extra_isize 46 (inode size 256)
[   35.147219][ T3575] program syz.1.21 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   35.189506][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.205133][ T3576] netlink: 'syz.1.21': attribute type 10 has an invalid length.
[   35.212862][ T3576] netlink: 40 bytes leftover after parsing attributes in process `syz.1.21'.
[   35.222083][ T3576] dummy0: entered promiscuous mode
[   35.228153][ T3576] bridge0: port 3(dummy0) entered blocking state
[   35.234563][ T3576] bridge0: port 3(dummy0) entered disabled state
[   35.254699][ T3576] dummy0: entered allmulticast mode
[   35.268048][ T3576] bridge0: port 3(dummy0) entered blocking state
[   35.274512][ T3576] bridge0: port 3(dummy0) entered forwarding state
[   35.359313][    C1] sd 0:0:1:0: [sda] tag#2755 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[   35.369735][    C1] sd 0:0:1:0: [sda] tag#2755 CDB: Read(6) 08 00 00 00 00 20
[   35.601582][ T3665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29'.
[   35.681083][ T3668] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   35.941517][ T3685] loop0: detected capacity change from 0 to 164
[   36.018826][ T3686] random: crng reseeded on system resumption
[   36.070455][ T3681] loop3: detected capacity change from 0 to 32768
[   36.104114][ T3687] netlink: 16 bytes leftover after parsing attributes in process `syz.3.33'.
[   36.119622][ T3681]  loop3: p1 p3 < >
[   36.320994][ T3691] loop2: detected capacity change from 0 to 128
[   36.341344][ T3691] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   36.357091][ T3691] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   36.445267][ T3695] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=3695 comm=syz.2.38
[   36.447442][ T3693] loop1: detected capacity change from 0 to 8192
[   36.506906][ T3702] netlink: 'syz.2.41': attribute type 3 has an invalid length.
[   36.514566][ T3702] netlink: 'syz.2.41': attribute type 3 has an invalid length.
[   36.524893][ T3702] netlink: 16 bytes leftover after parsing attributes in process `syz.2.41'.
[   36.536039][ T3702] program syz.2.41 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   36.639982][ T3714] netlink: 'syz.2.41': attribute type 10 has an invalid length.
[   36.647768][ T3714] dummy0: entered promiscuous mode
[   36.658733][ T3714] bridge0: port 3(dummy0) entered blocking state
[   36.665155][ T3714] bridge0: port 3(dummy0) entered disabled state
[   36.672753][ T3714] dummy0: entered allmulticast mode
[   36.692197][ T3714] dummy0: left allmulticast mode
[   36.700509][ T3714] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   36.723778][ T3717] SELinux:  Context system_u:object_r:iptables_unit_file_t:s0 is not valid (left unmapped).
[   36.739007][    C1] sd 0:0:1:0: [sda] tag#2785 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[   36.739148][ T3717] loop1: detected capacity change from 0 to 512
[   36.749437][    C1] sd 0:0:1:0: [sda] tag#2785 CDB: Read(6) 08 00 00 00 00 20
[   36.764883][ T3717] journal_path: Non-blockdev passed as './bus'
[   36.771108][ T3717] EXT4-fs: error: could not find journal device path
[   36.798580][ T3719] netlink: 'syz.2.47': attribute type 3 has an invalid length.
[   36.806468][ T3719] netlink: 'syz.2.47': attribute type 3 has an invalid length.
[   36.866888][ T3732] loop0: detected capacity change from 0 to 128
[   36.894518][ T3732] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[   36.915019][ T3679] syz.3.33 (3679) used greatest stack depth: 6408 bytes left
[   36.922972][ T3732] System zones: 1-3, 19-19, 35-36
[   36.929087][ T3732] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[   36.949608][ T3732] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   37.021834][ T3732] EXT4-fs (loop0): shut down requested (0)
[   37.060135][ T3744] loop3: detected capacity change from 0 to 1024
[   37.067083][ T3744] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[   37.080033][ T1044] IPVS: starting estimator thread 0...
[   37.102727][ T3303] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   37.124152][ T3749] loop3: detected capacity change from 0 to 128
[   37.156466][ T3749] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   37.199576][ T3749] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   37.278990][ T3745] IPVS: using max 1824 ests per chain, 91200 per kthread
[   37.445181][ T3780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   37.446745][ T3776] bridge0: port 3(macsec1) entered blocking state
[   37.455405][ T3780] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   37.460303][ T3776] bridge0: port 3(macsec1) entered disabled state
[   37.475775][ T3776] macsec1: entered allmulticast mode
[   37.519383][ T3776] macsec1: left allmulticast mode
[   37.595790][ T3794] netlink: 'syz.3.70': attribute type 3 has an invalid length.
[   37.603636][ T3794] netlink: 'syz.3.70': attribute type 3 has an invalid length.
[   37.729244][ T3795] loop0: detected capacity change from 0 to 2048
[   37.772175][ T3798] program syz.3.70 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   37.786708][ T3792] syz.2.69 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   37.954028][ T3803] Zero length message leads to an empty skb
[   37.993943][ T3800] random: crng reseeded on system resumption
[   38.022143][ T3794] dummy0: entered promiscuous mode
[   38.044820][ T3794] bridge0: port 3(dummy0) entered blocking state
[   38.051328][ T3794] bridge0: port 3(dummy0) entered disabled state
[   38.060679][ T3795] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.080576][ T3794] dummy0: entered allmulticast mode
[   38.086998][ T3794] bridge0: port 3(dummy0) entered blocking state
[   38.093444][ T3794] bridge0: port 3(dummy0) entered forwarding state
[   38.297910][    C1] sd 0:0:1:0: [sda] tag#2800 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[   38.308305][    C1] sd 0:0:1:0: [sda] tag#2800 CDB: Read(6) 08 00 00 00 00 20
[   38.337795][   T29] kauditd_printk_skb: 1041 callbacks suppressed
[   38.337814][   T29] audit: type=1326 audit(1757768875.371:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3812 comm="syz.4.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b645aeba9 code=0x7ffc0000
[   38.367549][   T29] audit: type=1326 audit(1757768875.381:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3812 comm="syz.4.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8b645aeba9 code=0x7ffc0000
[   38.391117][   T29] audit: type=1326 audit(1757768875.381:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3812 comm="syz.4.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b645aeba9 code=0x7ffc0000
[   38.414409][   T29] audit: type=1326 audit(1757768875.381:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3812 comm="syz.4.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b645aeba9 code=0x7ffc0000
[   38.438613][   T29] audit: type=1326 audit(1757768875.381:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3812 comm="syz.4.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b645aeba9 code=0x7ffc0000
[   38.461865][   T29] audit: type=1326 audit(1757768875.381:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3812 comm="syz.4.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b645aeba9 code=0x7ffc0000
[   38.485492][   T29] audit: type=1326 audit(1757768875.381:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3812 comm="syz.4.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b645aeba9 code=0x7ffc0000
[   38.509105][   T29] audit: type=1326 audit(1757768875.381:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3812 comm="syz.4.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b645aeba9 code=0x7ffc0000
[   38.532362][   T29] audit: type=1326 audit(1757768875.381:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3812 comm="syz.4.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b645aeba9 code=0x7ffc0000
[   38.555795][   T29] audit: type=1326 audit(1757768875.381:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3812 comm="syz.4.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b645aeba9 code=0x7ffc0000
[   38.580973][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.694257][ T3826] loop4: detected capacity change from 0 to 2048
[   38.707178][ T3828] loop0: detected capacity change from 0 to 2048
[   38.741452][ T3828] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.759369][ T3836] loop1: detected capacity change from 0 to 128
[   38.766197][ T3836] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   38.771071][ T3826]  loop4: p1 < > p4
[   38.778731][ T3836] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   38.792051][ T3826] loop4: p4 size 8388608 extends beyond EOD, truncated
[   38.828610][ T3838] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:0
[   38.839267][ T3838] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=3838 comm=syz.1.84
[   38.853544][ T3838] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3838 comm=syz.1.84
[   38.984062][ T3853] tipc: Started in network mode
[   38.989126][ T3853] tipc: Node identity 92a35cf6d727, cluster identity 4711
[   38.996352][ T3853] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   39.008380][ T3857] capability: warning: `syz.4.90' uses deprecated v2 capabilities in a way that may be insecure
[   39.035641][ T3855] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   39.057479][ T3853] syzkaller0: entered promiscuous mode
[   39.063172][ T3853] syzkaller0: entered allmulticast mode
[   39.094708][ T3855] tipc: Resetting bearer <eth:syzkaller0>
[   39.115505][ T3852] tipc: Resetting bearer <eth:syzkaller0>
[   39.129629][ T3852] tipc: Disabling bearer <eth:syzkaller0>
[   39.176464][ T3870] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   39.210868][ T3872] loop4: detected capacity change from 0 to 128
[   39.231410][ T3872] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   39.272978][ T3872] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   39.283540][ T3850] pim6reg: entered allmulticast mode
[   39.304470][ T3850] pim6reg: left allmulticast mode
[   39.535911][ T3899] __nla_validate_parse: 8 callbacks suppressed
[   39.535930][ T3899] netlink: 256 bytes leftover after parsing attributes in process `syz.3.101'.
[   39.553135][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.691682][ T3910] netlink: 40 bytes leftover after parsing attributes in process `syz.3.104'.
[   39.709465][ T3911] $Hÿ: renamed from bond0 (while UP)
[   39.726574][ T3911] $Hÿ: entered promiscuous mode
[   39.731725][ T3911] bond_slave_0: entered promiscuous mode
[   39.737505][ T3911] bond_slave_1: entered promiscuous mode
[   39.941309][ T3954] syz_tun: entered promiscuous mode
[   39.947726][ T3954] batadv_slave_0: entered promiscuous mode
[   39.954431][ T3954] hsr1: entered allmulticast mode
[   39.954589][ T3958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.113'.
[   39.959568][ T3954] syz_tun: entered allmulticast mode
[   39.973905][ T3954] batadv_slave_0: entered allmulticast mode
[   40.126045][ T3960] mmap: syz.2.108 (3960) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   40.272439][ T3991] loop0: detected capacity change from 0 to 8192
[   40.576759][ T4017] loop4: detected capacity change from 0 to 128
[   40.586434][ T4016] netlink: 224 bytes leftover after parsing attributes in process `syz.1.122'.
[   40.597228][ T4017] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   40.614548][ T4022] loop2: detected capacity change from 0 to 512
[   40.631397][ T4022] EXT4-fs: Ignoring removed mblk_io_submit option
[   40.638101][ T4016] netlink: 16 bytes leftover after parsing attributes in process `syz.1.122'.
[   40.647064][ T4016] tipc: Started in network mode
[   40.651981][ T4016] tipc: Node identity fffffe01, cluster identity 64
[   40.658584][ T4016] tipc: Node number set to 4294966785
[   40.666703][ T4017] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   40.698938][ T4022] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a856c018, mo2=0002]
[   40.721927][ T4022] System zones: 0-2, 18-18, 34-34
[   40.727574][ T4016] tipc: Cannot configure node identity twice
[   40.862069][ T4022] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.915781][ T4044] netlink: 20 bytes leftover after parsing attributes in process `syz.4.126'.
[   40.924500][ T4022] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   41.001651][ T4055] loop1: detected capacity change from 0 to 512
[   41.042432][ T4055] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.055162][ T4055] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   41.118033][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.257432][ T4066] validate_nla: 3 callbacks suppressed
[   41.257450][ T4066] netlink: 'syz.0.131': attribute type 3 has an invalid length.
[   41.270756][ T4066] netlink: 'syz.0.131': attribute type 3 has an invalid length.
[   41.308335][ T4066] netlink: 16 bytes leftover after parsing attributes in process `syz.0.131'.
[   41.411206][ T4076] netlink: 32 bytes leftover after parsing attributes in process `syz.1.133'.
[   41.431849][ T4075] loop1: detected capacity change from 0 to 512
[   41.459064][ T4083] loop1: detected capacity change from 0 to 128
[   41.466009][ T4083] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   41.479461][ T4083] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   41.545742][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.573747][ T4101] loop1: detected capacity change from 0 to 1024
[   41.582845][ T4101] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   41.604964][ T4101] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #3: block 1: comm syz.1.140: lblock 1 mapped to illegal pblock 1 (length 1)
[   41.622094][ T4101] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.140: Failed to acquire dquot type 0
[   41.634714][ T4101] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.140: Freeing blocks not in datazone - block = 0, count = 4096
[   41.650566][ T4101] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.140: Invalid inode bitmap blk 0 in block_group 0
[   41.664180][ T4101] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem
[   41.672863][   T51] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1)
[   41.678509][ T4116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.142'.
[   41.696083][ T4101] EXT4-fs (loop1): 1 orphan inode deleted
[   41.702421][ T4101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.715431][   T51] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 0
[   41.751885][ T4116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.142'.
[   41.761285][ T4137] loop0: detected capacity change from 0 to 512
[   41.768034][ T4137] EXT4-fs: Ignoring removed nomblk_io_submit option
[   41.777700][ T4116] veth0_macvtap: left promiscuous mode
[   41.786521][ T4137] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   41.794699][ T4137] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002]
[   41.794720][ T4118] loop3: detected capacity change from 0 to 1024
[   41.810676][ T4137] EXT4-fs (loop0): orphan cleanup on readonly fs
[   41.812579][ T4118] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.817247][ T4137] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   41.830860][ T4118] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   41.843906][ T4137] EXT4-fs (loop0): Cannot turn on quotas: error -22
[   41.860941][ T4145] netlink: 'syz.1.140': attribute type 29 has an invalid length.
[   41.866036][ T4137] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.145: bg 0: block 40: padding at end of block bitmap is not set
[   41.874125][ T4145] netlink: 'syz.1.140': attribute type 29 has an invalid length.
[   41.885659][ T4137] EXT4-fs (loop0): Remounting filesystem read-only
[   41.897327][ T4137] EXT4-fs (loop0): 1 truncate cleaned up
[   41.903469][ T4137] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   41.973838][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.002034][ T4167] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[   42.021228][ T4167] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28
[   42.033669][ T4167] EXT4-fs (loop3): This should not happen!! Data will be lost
[   42.033669][ T4167] 
[   42.043357][ T4167] EXT4-fs (loop3): Total free blocks count 0
[   42.049481][ T4167] EXT4-fs (loop3): Free/Dirty block details
[   42.055429][ T4167] EXT4-fs (loop3): free_blocks=4293918720
[   42.061195][ T4167] EXT4-fs (loop3): dirty_blocks=16
[   42.066326][ T4167] EXT4-fs (loop3): Block reservation details
[   42.072364][ T4167] EXT4-fs (loop3): i_reserved_data_blocks=1
[   42.081890][ T4181] loop0: detected capacity change from 0 to 128
[   42.089576][ T4181] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   42.102208][ T4181] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   42.138101][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.264714][ T4196] netlink: 'syz.0.153': attribute type 1 has an invalid length.
[   42.275250][ T4196] loop0: detected capacity change from 0 to 128
[   42.331207][ T4196] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[   42.350241][ T4196] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   42.403704][ T3303] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   42.454100][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.480882][ T4212] netlink: zone id is out of range
[   42.486034][ T4212] netlink: zone id is out of range
[   42.491265][ T4212] netlink: zone id is out of range
[   42.496424][ T4212] netlink: zone id is out of range
[   42.501757][ T4212] netlink: zone id is out of range
[   42.509538][ T4212] netlink: zone id is out of range
[   42.514690][ T4212] netlink: zone id is out of range
[   42.519923][ T4212] netlink: zone id is out of range
[   42.525058][ T4212] netlink: zone id is out of range
[   42.530560][ T4212] netlink: zone id is out of range
[   42.547734][ T4219] sctp: [Deprecated]: syz.2.160 (pid 4219) Use of int in max_burst socket option.
[   42.547734][ T4219] Use struct sctp_assoc_value instead
[   42.724111][ T4235] netlink: 'syz.1.165': attribute type 3 has an invalid length.
[   42.731852][ T4235] netlink: 'syz.1.165': attribute type 3 has an invalid length.
[   43.568878][   T29] kauditd_printk_skb: 575 callbacks suppressed
[   43.568895][   T29] audit: type=1326 audit(1757768880.561:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4283 comm="syz.4.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b645aeba9 code=0x7ffc0000
[   43.598459][   T29] audit: type=1326 audit(1757768880.561:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4283 comm="syz.4.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b645aeba9 code=0x7ffc0000
[   43.621899][   T29] audit: type=1326 audit(1757768880.561:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4283 comm="syz.4.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f8b645aeba9 code=0x7ffc0000
[   43.645315][   T29] audit: type=1326 audit(1757768880.561:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4283 comm="syz.4.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b645aeba9 code=0x7ffc0000
[   43.668884][   T29] audit: type=1326 audit(1757768880.561:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4283 comm="syz.4.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b645aeba9 code=0x7ffc0000
[   43.692298][   T29] audit: type=1400 audit(1757768880.561:1718): avc:  denied  { getopt } for  pid=4281 comm="syz.2.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   43.860822][ T4299] netlink: 'syz.1.178': attribute type 3 has an invalid length.
[   43.868518][ T4299] netlink: 'syz.1.178': attribute type 3 has an invalid length.
[   43.924307][   T29] audit: type=1400 audit(1757768880.891:1719): avc:  denied  { create } for  pid=4291 comm="syz.4.179" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   43.945290][   T29] audit: type=1400 audit(1757768880.981:1720): avc:  denied  { unlink } for  pid=3311 comm="syz-executor" name="file0" dev="tmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   43.971490][ T4305] loop4: detected capacity change from 0 to 128
[   43.981669][ T4305] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   44.002817][ T4305] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   44.014553][   T29] audit: type=1400 audit(1757768881.071:1721): avc:  denied  { write } for  pid=4301 comm="syz.0.180" name="001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   44.050278][ T4303] hub 2-0:1.0: USB hub found
[   44.055362][ T4303] hub 2-0:1.0: 8 ports detected
[   44.060833][   T29] audit: type=1400 audit(1757768881.111:1722): avc:  denied  { mount } for  pid=4304 comm="syz.4.182" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   44.194940][ T4323] loop2: detected capacity change from 0 to 512
[   44.230009][ T4327] bridge_slave_0: left allmulticast mode
[   44.231027][ T4323] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.235710][ T4327] bridge_slave_0: left promiscuous mode
[   44.235868][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.262236][ T4323] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   44.314054][ T4327] bridge_slave_1: left allmulticast mode
[   44.319869][ T4327] bridge_slave_1: left promiscuous mode
[   44.325645][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.362944][ T4336] loop4: detected capacity change from 0 to 512
[   44.384928][ T4327] $Hÿ: (slave bond_slave_0): Releasing backup interface
[   44.392570][ T4327] bond_slave_0: left promiscuous mode
[   44.411929][ T4336] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   44.412262][ T4327] $Hÿ: (slave bond_slave_1): Releasing backup interface
[   44.420236][ T4336] EXT4-fs (loop4): orphan cleanup on readonly fs
[   44.428490][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.445682][ T4336] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.192: corrupted inode contents
[   44.466786][ T4327] bond_slave_1: left promiscuous mode
[   44.479480][ T4336] EXT4-fs (loop4): Remounting filesystem read-only
[   44.486753][ T4336] EXT4-fs (loop4): 1 truncate cleaned up
[   44.487935][ T4327] team0: Failed to send options change via netlink (err -105)
[   44.501436][ T1463] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   44.512032][ T1463] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   44.529220][ T4346] netlink: 'syz.2.194': attribute type 3 has an invalid length.
[   44.553944][ T4327] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[   44.563426][ T1463] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[   44.573800][ T4350] loop2: detected capacity change from 0 to 128
[   44.574625][ T4336] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   44.592761][ T4327] team0: Port device team_slave_0 removed
[   44.599934][ T4350] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   44.612178][ T4350] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   44.623814][ T4327] team0: Failed to send options change via netlink (err -105)
[   44.633072][ T4327] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[   44.657520][ T4327] team0: Port device team_slave_1 removed
[   44.666858][ T4327] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   44.674460][ T4327] batman_adv: batadv0: Removing interface: batadv_slave_0
[   44.675428][ T4363] __nla_validate_parse: 13 callbacks suppressed
[   44.675447][ T4363] netlink: 9067 bytes leftover after parsing attributes in process `syz.3.197'.
[   44.705012][ T4327] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   44.712489][ T4327] batman_adv: batadv0: Removing interface: batadv_slave_1
[   44.836399][ T4358] syzkaller1: entered promiscuous mode
[   44.841987][ T4358] syzkaller1: entered allmulticast mode
[   44.972436][ T4385] netlink: 27 bytes leftover after parsing attributes in process `syz.0.202'.
[   45.083553][ T4391] netlink: 96 bytes leftover after parsing attributes in process `syz.3.203'.
[   45.131275][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.161768][ T4394] loop1: detected capacity change from 0 to 512
[   45.193967][ T4394] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   45.286549][ T4394] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   45.336240][ T4394] EXT4-fs (loop1): 1 truncate cleaned up
[   45.347390][ T4394] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.370321][ T4402] netlink: 44 bytes leftover after parsing attributes in process `+}[@'.
[   45.381708][ T4402] netlink: 8 bytes leftover after parsing attributes in process `+}[@'.
[   45.421603][ T4405] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   45.478224][ T4405] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   45.504599][ T4421] loop3: detected capacity change from 0 to 128
[   45.589127][ T4405] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   45.655672][ T4405] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   45.675727][ T4421] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   45.724303][ T4421] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   45.879651][ T1463] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.963957][ T1463] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.046040][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.091721][   T37] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.253137][ T4479] loop3: detected capacity change from 0 to 512
[   46.290642][ T4483] validate_nla: 4 callbacks suppressed
[   46.290661][ T4483] netlink: 'syz.2.219': attribute type 3 has an invalid length.
[   46.303976][ T4483] netlink: 'syz.2.219': attribute type 3 has an invalid length.
[   46.338972][ T4483] netlink: 16 bytes leftover after parsing attributes in process `syz.2.219'.
[   46.350757][ T4479] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.464195][ T4490] loop2: detected capacity change from 0 to 128
[   46.627150][ T4490] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   47.115249][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.186126][ T4490] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   47.388236][ T4468] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   47.454722][ T4468] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   47.524868][ T4468] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   47.667229][ T4468] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   47.837219][ T4468] dummy0: left allmulticast mode
[   47.843464][ T4468] bridge0: port 3(dummy0) entered disabled state
[   47.860095][ T4468] bridge_slave_1: left allmulticast mode
[   47.865769][ T4468] bridge_slave_1: left promiscuous mode
[   47.871777][ T4468] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.900872][ T4468] bridge_slave_0: left allmulticast mode
[   47.906570][ T4468] bridge_slave_0: left promiscuous mode
[   47.912346][ T4468] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.104727][ T4468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   48.120828][ T4468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   48.143123][ T4468] bond0 (unregistering): Released all slaves
[   48.162486][ T4404] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.195091][ T4531] sd 0:0:1:0: device reset
[   48.213439][ T4468] tipc: Left network mode
[   48.224173][ T4468] hsr_slave_0: left promiscuous mode
[   48.233130][ T4468] hsr_slave_1: left promiscuous mode
[   48.239260][ T4468] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   48.246744][ T4468] batman_adv: batadv0: Removing interface: batadv_slave_0
[   48.270285][ T4468] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   48.273019][ T4548] netlink: 'syz.0.229': attribute type 3 has an invalid length.
[   48.277701][ T4468] batman_adv: batadv0: Removing interface: batadv_slave_1
[   48.322163][ T4468] veth1_macvtap: left promiscuous mode
[   48.327681][ T4468] veth0_macvtap: left promiscuous mode
[   48.337104][ T4468] veth1_vlan: left promiscuous mode
[   48.355936][ T4553] loop1: detected capacity change from 0 to 2048
[   48.371950][ T4468] veth0_vlan: left promiscuous mode
[   48.390107][ T4553] EXT4-fs (loop1): failed to initialize system zone (-117)
[   48.422086][ T4553] EXT4-fs (loop1): mount failed
[   48.490680][ T4468] team0 (unregistering): Port device team_slave_1 removed
[   48.509291][ T4468] team0 (unregistering): Port device team_slave_0 removed
[   48.540653][ T4562] loop1: detected capacity change from 0 to 128
[   48.560101][ T4562] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   48.576884][ T4562] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   48.590411][ T4404] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.650502][   T29] kauditd_printk_skb: 140 callbacks suppressed
[   48.650562][   T29] audit: type=1400 audit(1757768885.711:1857): avc:  denied  { execute } for  pid=4578 comm="syz.1.234" name="file1" dev="tmpfs" ino=303 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   48.682773][ T4579] process 'syz.1.234' launched './file1' with NULL argv: empty string added
[   48.694624][   T29] audit: type=1400 audit(1757768885.751:1858): avc:  denied  { execute_no_trans } for  pid=4578 comm="syz.1.234" path="/53/file1" dev="tmpfs" ino=303 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   48.722134][ T4404] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.867362][ T4501] chnl_net:caif_netlink_parms(): no params data found
[   48.894414][   T29] audit: type=1326 audit(1757768885.951:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4668 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1a344eeba9 code=0x7ffc0000
[   48.953563][   T29] audit: type=1326 audit(1757768885.991:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4668 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1a344eeba9 code=0x7ffc0000
[   48.977115][   T29] audit: type=1326 audit(1757768885.991:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4668 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1a344eeba9 code=0x7ffc0000
[   49.000820][   T29] audit: type=1326 audit(1757768885.991:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4668 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1a344eeba9 code=0x7ffc0000
[   49.024390][   T29] audit: type=1326 audit(1757768885.991:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4668 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1a344eeba9 code=0x7ffc0000
[   49.047961][   T29] audit: type=1326 audit(1757768885.991:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4668 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1a344eeba9 code=0x7ffc0000
[   49.071439][   T29] audit: type=1326 audit(1757768885.991:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4668 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1a344eeba9 code=0x7ffc0000
[   49.094969][   T29] audit: type=1326 audit(1757768885.991:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4668 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1a344eeba9 code=0x7ffc0000
[   49.153268][ T4468] IPVS: stop unused estimator thread 0...
[   49.221231][ T4701] loop1: detected capacity change from 0 to 2048
[   49.240833][ T4501] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.248013][ T4501] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.255522][ T4501] bridge_slave_0: entered allmulticast mode
[   49.262134][ T4501] bridge_slave_0: entered promiscuous mode
[   49.271543][ T4501] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.278888][ T4501] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.286096][ T4501] bridge_slave_1: entered allmulticast mode
[   49.293266][ T4501] bridge_slave_1: entered promiscuous mode
[   49.312003][ T4701]  loop1: unable to read partition table
[   49.317745][ T4701] loop1: partition table beyond EOD, truncated
[   49.324075][ T4701] loop_reread_partitions: partition scan of loop1 () failed (rc=-5)
[   49.343191][ T4501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   49.354806][ T4501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   49.580028][ T4501] team0: Port device team_slave_0 added
[   49.591128][ T4501] team0: Port device team_slave_1 added
[   49.633470][ T4501] batman_adv: batadv0: Adding interface: batadv_slave_0
[   49.640505][ T4501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   49.666493][ T4501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   49.681233][ T4501] batman_adv: batadv0: Adding interface: batadv_slave_1
[   49.688195][ T4501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   49.714419][ T4501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   49.758366][ T4501] hsr_slave_0: entered promiscuous mode
[   49.764938][ T4501] hsr_slave_1: entered promiscuous mode
[   49.772672][ T4501] debugfs: 'hsr0' already exists in 'hsr'
[   49.778446][ T4501] Cannot create hsr debugfs directory
[   49.892795][ T4501] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   49.912784][ T4501] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   49.923374][ T4501] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   49.937455][ T4501] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   49.947150][   T31] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.968632][   T31] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.983192][ T4471] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.999250][ T4501] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.006333][ T4501] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.014987][ T4471] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.055017][ T4501] 8021q: adding VLAN 0 to HW filter on device bond0
[   50.067949][ T4471] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.077994][ T4934] loop4: detected capacity change from 0 to 1024
[   50.085550][ T4934] EXT4-fs: Ignoring removed bh option
[   50.093050][ T4934] EXT4-fs: inline encryption not supported
[   50.103951][ T4501] 8021q: adding VLAN 0 to HW filter on device team0
[   50.116189][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.123450][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.129175][ T4934] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   50.139881][ T4941] netlink: 'syz.2.245': attribute type 10 has an invalid length.
[   50.142083][ T4934] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[   50.157158][ T4935] loop1: detected capacity change from 0 to 256
[   50.161574][ T4934] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.243: lblock 2 mapped to illegal pblock 2 (length 1)
[   50.166868][ T4941] veth0_vlan: entered allmulticast mode
[   50.184831][ T4934] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.243: lblock 0 mapped to illegal pblock 48 (length 1)
[   50.190940][ T4935] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   50.204992][ T4941] veth0_vlan: left promiscuous mode
[   50.214853][ T4934] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.243: Failed to acquire dquot type 0
[   50.227840][ T4941] veth0_vlan: entered promiscuous mode
[   50.237020][ T4941] team0: Device veth0_vlan failed to register rx_handler
[   50.244142][ T4934] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem
[   50.269404][ T4501] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   50.279910][ T4501] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   50.298683][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.305895][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.307172][ T4934] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.243: mark_inode_dirty error
[   50.328738][ T4934] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[   50.341026][ T4934] EXT4-fs (loop4): 1 orphan inode deleted
[   50.351218][ T4934] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.364424][ T3503] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1)
[   50.403423][ T3503] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:8: Failed to release dquot type 0
[   50.417394][ T4934] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.243: lblock 0 mapped to illegal pblock 48 (length 1)
[   50.433043][ T4949] netlink: 36 bytes leftover after parsing attributes in process `syz.0.246'.
[   50.453695][ T4949] netlink: 120 bytes leftover after parsing attributes in process `syz.0.246'.
[   50.462892][ T4949] netlink: 120 bytes leftover after parsing attributes in process `syz.0.246'.
[   50.512431][ T4934] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 16: comm syz.4.243: lblock 0 mapped to illegal pblock 16 (length 1)
[   50.527118][ T4934] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 16: comm syz.4.243: lblock 0 mapped to illegal pblock 16 (length 1)
[   50.666529][ T4501] 8021q: adding VLAN 0 to HW filter on device batadv0
[   51.105323][ T4997] netlink: 'syz.2.254': attribute type 3 has an invalid length.
[   51.113084][ T4997] netlink: 'syz.2.254': attribute type 3 has an invalid length.
[   51.200150][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.209950][ T4997] netlink: 16 bytes leftover after parsing attributes in process `syz.2.254'.
[   51.478643][ T5037] loop0: detected capacity change from 0 to 128
[   51.504815][ T5037] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   51.520661][ T5030] loop2: detected capacity change from 0 to 512
[   51.539777][ T5037] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   51.540908][ T5030] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   51.583519][ T5030] EXT4-fs (loop2): 1 truncate cleaned up
[   51.589702][ T5030] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.604226][ T5030] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.639105][ T5052] netlink: 'syz.0.264': attribute type 3 has an invalid length.
[   51.646813][ T5052] netlink: 'syz.0.264': attribute type 3 has an invalid length.
[   51.654882][ T5052] netlink: 16 bytes leftover after parsing attributes in process `syz.0.264'.
[   51.698580][ T4501] veth0_vlan: entered promiscuous mode
[   51.714638][ T5063] netlink: 'syz.2.266': attribute type 3 has an invalid length.
[   51.722447][ T5063] netlink: 'syz.2.266': attribute type 3 has an invalid length.
[   51.731268][ T5063] netlink: 16 bytes leftover after parsing attributes in process `syz.2.266'.
[   51.908410][ T5053] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   51.915881][ T5053] batman_adv: batadv0: Removing interface: batadv_slave_0
[   51.967485][ T5053] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   51.975013][ T5053] batman_adv: batadv0: Removing interface: batadv_slave_1
[   52.014338][ T4501] veth1_vlan: entered promiscuous mode
[   52.052464][ T4501] veth0_macvtap: entered promiscuous mode
[   52.067441][ T4501] veth1_macvtap: entered promiscuous mode
[   52.090300][ T4501] batman_adv: batadv0: Interface activated: batadv_slave_0
[   52.105477][ T4501] batman_adv: batadv0: Interface activated: batadv_slave_1
[   52.127721][   T31] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   52.142985][   T31] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   52.172529][   T31] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   52.195667][   T31] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   52.236586][ T5094] netlink: 'syz.0.271': attribute type 4 has an invalid length.
[   52.265436][ T5094] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.362101][ T5094] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.445206][ T5094] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.581279][ T5094] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.742304][   T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   52.779932][   T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   52.792556][ T5143] netlink: 'syz.1.276': attribute type 3 has an invalid length.
[   52.800389][ T5143] netlink: 'syz.1.276': attribute type 3 has an invalid length.
[   52.836194][   T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   52.859246][   T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   52.877488][ T5143] netlink: 16 bytes leftover after parsing attributes in process `syz.1.276'.
[   52.982674][ T5149] loop0: detected capacity change from 0 to 8192
[   53.125668][ T5166] loop5: detected capacity change from 0 to 512
[   53.148741][ T5166] EXT4-fs: Ignoring removed nomblk_io_submit option
[   53.157387][ T5166] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   53.165927][ T5166] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[   53.182350][ T5166] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.283: Allocating blocks 41-42 which overlap fs metadata
[   53.197623][ T5166] EXT4-fs (loop5): Remounting filesystem read-only
[   53.252287][ T5166] EXT4-fs (loop5): 1 truncate cleaned up
[   53.269659][ T5166] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.383418][ T4501] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.581947][ T5208] loop1: detected capacity change from 0 to 1024
[   53.666884][   T29] kauditd_printk_skb: 94 callbacks suppressed
[   53.666904][   T29] audit: type=1326 audit(1757768890.631:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5206 comm="syz.1.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63749eba9 code=0x7ffc0000
[   53.668429][ T5208] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   53.673135][   T29] audit: type=1326 audit(1757768890.631:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5206 comm="syz.1.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa63749eba9 code=0x7ffc0000
[   53.702033][ T5208] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   53.708564][   T29] audit: type=1326 audit(1757768890.631:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5206 comm="syz.1.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63749eba9 code=0x7ffc0000
[   53.765824][   T29] audit: type=1326 audit(1757768890.631:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5206 comm="syz.1.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63749eba9 code=0x7ffc0000
[   53.789253][   T29] audit: type=1326 audit(1757768890.631:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5206 comm="syz.1.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa63749eba9 code=0x7ffc0000
[   53.812605][   T29] audit: type=1326 audit(1757768890.631:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5206 comm="syz.1.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa63749ebe3 code=0x7ffc0000
[   53.835820][   T29] audit: type=1326 audit(1757768890.631:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5206 comm="syz.1.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa63749d65f code=0x7ffc0000
[   53.859075][   T29] audit: type=1326 audit(1757768890.641:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5206 comm="syz.1.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa63749ec37 code=0x7ffc0000
[   53.882396][   T29] audit: type=1326 audit(1757768890.641:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5206 comm="syz.1.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa63749d510 code=0x7ffc0000
[   53.905742][   T29] audit: type=1326 audit(1757768890.641:1962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5206 comm="syz.1.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa63749e7ab code=0x7ffc0000
[   53.976732][   T58] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:4: bg 0: block 393: padding at end of block bitmap is not set
[   54.001172][   T58] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117
[   54.013816][   T58] EXT4-fs (loop1): This should not happen!! Data will be lost
[   54.013816][   T58] 
[   54.037385][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.162640][ T5224] loop5: detected capacity change from 0 to 8192
[   54.290134][ T5235] netlink: 76 bytes leftover after parsing attributes in process `syz.5.292'.
[   55.090073][ T5297] capability: warning: `GPL' uses 32-bit capabilities (legacy support in use)
[   55.164069][ T5305] loop5: detected capacity change from 0 to 1024
[   55.191456][ T5305] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.220362][ T5303] loop1: detected capacity change from 0 to 8192
[   55.229184][ T5305] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   55.251947][ T3383] IPVS: starting estimator thread 0...
[   55.260680][ T4501] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.297131][ T5321] netlink: 52 bytes leftover after parsing attributes in process `syz.1.310'.
[   55.306097][ T5321] netlink: 52 bytes leftover after parsing attributes in process `syz.1.310'.
[   55.396397][ T5321] bridge0: port 3(dummy0) entered disabled state
[   55.402919][ T5321] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.410218][ T5321] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.462676][ T5315] IPVS: using max 2304 ests per chain, 115200 per kthread
[   55.573292][ T5321] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   55.617585][ T5321] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   55.670161][ T5340] dummy0: entered allmulticast mode
[   55.683982][   T58] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.692920][   T58] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   55.757529][   T58] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.766573][   T58] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   55.813316][ T5347] loop1: detected capacity change from 0 to 512
[   55.842168][ T5347] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   55.852801][   T58] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.861737][   T58] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   55.862501][ T5347] EXT4-fs (loop1): 1 truncate cleaned up
[   55.877833][ T5347] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   55.892844][ T5347] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.903017][   T58] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.912004][   T58] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   56.081587][ T5313] dummy0: left allmulticast mode
[   56.170538][ T5376] loop0: detected capacity change from 0 to 1024
[   56.177277][ T5376] EXT4-fs: Ignoring removed orlov option
[   56.183052][ T5376] EXT4-fs: Ignoring removed nomblk_io_submit option
[   56.219366][ T5362] IPVS: length: 166 != 8
[   56.250159][ T5362] __nla_validate_parse: 1 callbacks suppressed
[   56.250177][ T5362] netlink: 24 bytes leftover after parsing attributes in process `syz.2.313'.
[   56.286155][ T5362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.313'.
[   56.380673][ T5376] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   56.555976][ T5393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.317'.
[   56.713786][ T5401] loop4: detected capacity change from 0 to 2048
[   56.720762][ T5401] EXT4-fs: test_dummy_encryption option not supported
[   56.907859][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.027040][ T5400] loop5: detected capacity change from 0 to 8192
[   57.234951][ T5421] loop5: detected capacity change from 0 to 2048
[   57.451209][ T5421] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   57.471273][ T5422] loop2: detected capacity change from 0 to 512
[   57.616439][ T5421] EXT4-fs error (device loop5): __ext4_new_inode:1073: comm syz.5.325: reserved inode found cleared - inode=1
[   57.703873][ T5422] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   57.754860][ T5422] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   57.769671][ T4501] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.926199][ T5445] netlink: 4 bytes leftover after parsing attributes in process `syz.5.329'.
[   57.958045][ T5445] netlink: 32 bytes leftover after parsing attributes in process `syz.5.329'.
[   58.204001][ T5464] netlink: 8 bytes leftover after parsing attributes in process `syz.5.335'.
[   58.220209][ T5465] netlink: 8 bytes leftover after parsing attributes in process `syz.5.335'.
[   58.290733][ T5471] loop4: detected capacity change from 0 to 1024
[   58.332345][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.343493][ T5471] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   58.384383][ T5471] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.334: Allocating blocks 497-513 which overlap fs metadata
[   58.436924][ T5471] EXT4-fs (loop4): pa ffff888106c1b5b0: logic 256, phys. 369, len 9
[   58.445120][ T5471] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[   58.491020][ T5484] netlink: 'syz.2.340': attribute type 3 has an invalid length.
[   58.498715][ T5484] netlink: 'syz.2.340': attribute type 3 has an invalid length.
[   58.532670][ T5484] netlink: 16 bytes leftover after parsing attributes in process `syz.2.340'.
[   58.710107][ T5475] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.857706][   T29] kauditd_printk_skb: 230 callbacks suppressed
[   58.857735][   T29] audit: type=1326 audit(1757768895.911:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5524 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63749eba9 code=0x7ffc0000
[   58.886941][   T29] audit: type=1326 audit(1757768895.911:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5524 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa63749eba9 code=0x7ffc0000
[   58.909891][   T29] audit: type=1326 audit(1757768895.911:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5524 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63749eba9 code=0x7ffc0000
[   58.932893][   T29] audit: type=1326 audit(1757768895.911:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5524 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa63749eba9 code=0x7ffc0000
[   58.955766][   T29] audit: type=1326 audit(1757768895.911:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5524 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63749eba9 code=0x7ffc0000
[   58.978814][   T29] audit: type=1326 audit(1757768895.911:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5524 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fa63749eba9 code=0x7ffc0000
[   59.001613][   T29] audit: type=1326 audit(1757768895.911:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5524 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63749eba9 code=0x7ffc0000
[   59.024509][   T29] audit: type=1326 audit(1757768895.911:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5524 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63749eba9 code=0x7ffc0000
[   59.047485][   T29] audit: type=1326 audit(1757768895.911:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5524 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa63749eba9 code=0x7ffc0000
[   59.070408][   T29] audit: type=1326 audit(1757768895.911:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5524 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63749eba9 code=0x7ffc0000
[   59.140320][   T31] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.180447][ T5549] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5549 comm=syz.2.351
[   59.197996][   T31] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.245147][ T5547] netlink: 'syz.2.351': attribute type 1 has an invalid length.
[   59.254297][   T31] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.297410][ T5582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.353'.
[   59.306298][ T5582] netlink: 28 bytes leftover after parsing attributes in process `syz.1.353'.
[   59.351776][ T5584] netlink: 'syz.5.355': attribute type 3 has an invalid length.
[   59.359548][ T5584] netlink: 'syz.5.355': attribute type 3 has an invalid length.
[   59.373060][ T5547] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[   59.383830][ T5582] geneve3: entered promiscuous mode
[   59.397605][ T5582] geneve3: entered allmulticast mode
[   59.450784][   T31] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.487609][ T3503] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.508420][ T3503] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.547914][ T5613] loop0: detected capacity change from 0 to 1024
[   59.556183][ T3503] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.597828][ T5613] EXT4-fs: Ignoring removed nobh option
[   59.603568][ T5613] EXT4-fs: Ignoring removed bh option
[   59.608120][ T3503] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.618088][   T31] bridge_slave_1: left allmulticast mode
[   59.623926][   T31] bridge_slave_1: left promiscuous mode
[   59.629810][   T31] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.638519][   T31] bridge_slave_0: left allmulticast mode
[   59.644227][   T31] bridge_slave_0: left promiscuous mode
[   59.650008][   T31] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.664684][ T5613] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.740224][ T5658] loop2: detected capacity change from 0 to 512
[   59.746916][ T5658] EXT4-fs: inline encryption not supported
[   59.756644][ T5658] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   59.771713][ T5658] EXT4-fs (loop2): 1 truncate cleaned up
[   59.777876][ T5658] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   59.795024][   T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   59.808548][   T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   59.822031][   T31] bond0 (unregistering): Released all slaves
[   59.863089][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.894518][   T31] hsr_slave_0: left promiscuous mode
[   59.905280][   T31] hsr_slave_1: left promiscuous mode
[   59.914229][   T31] veth1_macvtap: left promiscuous mode
[   59.920155][   T31] veth1_vlan: left promiscuous mode
[   59.925442][   T31] veth0_vlan: left promiscuous mode
[   59.926588][ T5741] loop0: detected capacity change from 0 to 512
[   59.937509][ T5741] EXT4-fs: Ignoring removed nobh option
[   59.944924][ T5741] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #2: block 3: comm syz.0.361: lblock 0 mapped to illegal pblock 3 (length 1)
[   59.960024][ T5741] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.361: error -117 reading directory block
[   59.972872][ T5741] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[   59.981520][ T5741] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   60.007728][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.024489][   T31] team0 (unregistering): Port device team_slave_1 removed
[   60.034632][   T31] team0 (unregistering): Port device team_slave_0 removed
[   60.035523][ T5749] Illegal XDP return value 176644864 on prog  (id 330) dev N/A, expect packet loss!
[   60.063160][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.078664][ T5744] batadv_slave_0: entered promiscuous mode
[   60.082064][ T5758] IPv6: Can't replace route, no match found
[   60.090512][ T5757] IPv6: Can't replace route, no match found
[   60.094086][ T5532] chnl_net:caif_netlink_parms(): no params data found
[   60.106120][ T5736] batadv_slave_0: left promiscuous mode
[   60.111978][ T5758] loop2: detected capacity change from 0 to 164
[   60.135193][ T5758] iso9660: Unknown parameter ''
[   60.151841][ T5790] netlink: 'syz.1.365': attribute type 3 has an invalid length.
[   60.159591][ T5790] netlink: 'syz.1.365': attribute type 3 has an invalid length.
[   60.195633][ T5532] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.202932][ T5532] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.210341][ T5532] bridge_slave_0: entered allmulticast mode
[   60.216885][ T5532] bridge_slave_0: entered promiscuous mode
[   60.224360][ T5826] loop2: detected capacity change from 0 to 764
[   60.253513][ T5532] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.260668][ T5532] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.267919][ T5532] bridge_slave_1: entered allmulticast mode
[   60.275068][ T5532] bridge_slave_1: entered promiscuous mode
[   60.312106][ T5532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.330268][ T5532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.355740][ T5826] rock: directory entry would overflow storage
[   60.362092][ T5826] rock: sig=0x4f50, size=4, remaining=3
[   60.367683][ T5826] iso9660: Corrupted directory entry in block 6 of inode 1792
[   60.390131][ T5532] team0: Port device team_slave_0 added
[   60.397119][ T5532] team0: Port device team_slave_1 added
[   60.491574][ T5914] loop0: detected capacity change from 0 to 512
[   60.555577][ T5532] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.562719][ T5532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.588743][ T5532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.602568][ T5914] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   60.603157][ T5937] can0: slcan on ttyS3.
[   60.616841][ T5914] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   60.632317][ T5532] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.639389][ T5532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.665539][ T5532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.681659][ T5914] netlink: 'syz.0.373': attribute type 3 has an invalid length.
[   60.719739][ T5914] syz.0.373 uses obsolete (PF_INET,SOCK_PACKET)
[   60.751940][ T5532] hsr_slave_0: entered promiscuous mode
[   60.758390][ T5532] hsr_slave_1: entered promiscuous mode
[   60.764754][ T5532] debugfs: 'hsr0' already exists in 'hsr'
[   60.770578][ T5532] Cannot create hsr debugfs directory
[   60.789311][ T5948] can0 (unregistered): slcan off ttyS3.
[   60.838664][ T6007] netlink: 'syz.1.377': attribute type 3 has an invalid length.
[   60.846483][ T6007] netlink: 'syz.1.377': attribute type 3 has an invalid length.
[   60.858919][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.025712][ T5532] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   61.048132][ T5532] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   61.100761][ T5532] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   61.130946][ T5532] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   61.174582][ T5532] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.181707][ T5532] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.189184][ T5532] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.196251][ T5532] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.216919][ T4468] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.225458][ T4468] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.259962][ T5532] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.273641][ T5532] 8021q: adding VLAN 0 to HW filter on device team0
[   61.294414][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.301516][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.336026][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.343145][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.391003][ T5532] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   61.401411][ T5532] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   61.489305][ T6159] __nla_validate_parse: 4 callbacks suppressed
[   61.489321][ T6159] netlink: 16 bytes leftover after parsing attributes in process `syz.1.393'.
[   61.564762][ T5532] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.917339][ T5532] veth0_vlan: entered promiscuous mode
[   61.987736][ T6198] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   62.000173][ T5532] veth1_vlan: entered promiscuous mode
[   62.011675][ T6200] loop5: detected capacity change from 0 to 128
[   62.033606][ T6198] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   62.068577][ T6200] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[   62.096349][ T5532] veth0_macvtap: entered promiscuous mode
[   62.136140][ T5532] veth1_macvtap: entered promiscuous mode
[   62.204069][ T5532] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.240732][ T5532] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.252034][ T4468] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.281341][   T31] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.292719][   T31] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.310018][   T31] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.324052][ T6214] netlink: 16 bytes leftover after parsing attributes in process `syz.5.404'.
[   62.346096][ T6218] netlink: 16 bytes leftover after parsing attributes in process `syz.6.349'.
[   62.358233][ T6217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   62.367262][ T6217] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   62.376846][ T6218] program syz.6.349 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   62.480721][ T6225] netlink: 40 bytes leftover after parsing attributes in process `syz.6.349'.
[   62.489804][ T6225] dummy0: entered promiscuous mode
[   62.495490][ T6225] bridge0: port 3(dummy0) entered blocking state
[   62.501953][ T6225] bridge0: port 3(dummy0) entered disabled state
[   62.511154][ T6225] dummy0: entered allmulticast mode
[   62.517271][ T6225] bridge0: port 3(dummy0) entered blocking state
[   62.523695][ T6225] bridge0: port 3(dummy0) entered forwarding state
[   62.609327][    C1] sd 0:0:1:0: [sda] tag#2779 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[   62.619792][    C1] sd 0:0:1:0: [sda] tag#2779 CDB: Read(6) 08 00 00 00 00 20
[   62.794443][ T6246] loop1: detected capacity change from 0 to 512
[   62.811188][ T6246] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   62.824659][ T6246] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   62.892670][ T6246] pim6reg1: entered promiscuous mode
[   62.923975][ T6267] team0: Device hsr_slave_0 failed to register rx_handler
[   62.961465][ T6269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.417'.
[   62.976521][ T6265] pim6reg: entered allmulticast mode
[   62.983105][ T6269] bridge_slave_1: left allmulticast mode
[   62.988849][ T6269] bridge_slave_1: left promiscuous mode
[   62.994593][ T6269] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.004175][ T6269] bridge_slave_0: left allmulticast mode
[   63.009968][ T6269] bridge_slave_0: left promiscuous mode
[   63.015732][ T6269] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.034495][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.060511][ T6275] pim6reg: left allmulticast mode
[   63.420357][ T6309] SELinux: failed to load policy
[   63.451485][ T6314] loop0: detected capacity change from 0 to 512
[   63.460515][ T6314] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   63.476112][ T6314] EXT4-fs (loop0): 1 truncate cleaned up
[   63.483230][ T6314] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   63.502084][ T6314] validate_nla: 9 callbacks suppressed
[   63.502112][ T6314] netlink: 'syz.0.429': attribute type 3 has an invalid length.
[   63.517747][ T6314] EXT4-fs error (device loop0): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.0.429: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[   63.546928][ T6314] EXT4-fs (loop0): Remounting filesystem read-only
[   63.553824][ T6314] EXT4-fs warning (device loop0): ext4_rename_delete:3731: inode #2: comm syz.0.429: Deleting old file: nlink 4, error=-117
[   63.585127][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.258872][   T29] kauditd_printk_skb: 202 callbacks suppressed
[   64.258891][   T29] audit: type=1326 audit(1757768901.311:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.5.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3536bbeba9 code=0x7fc00000
[   64.292769][ T6337] loop2: detected capacity change from 0 to 128
[   64.302773][ T6337] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[   64.317708][ T6337] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   64.341109][   T29] audit: type=1400 audit(1757768901.401:2406): avc:  denied  { setattr } for  pid=6335 comm="syz.2.433" path="/101/file1/file1" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   64.364424][   T29] audit: type=1400 audit(1757768901.421:2407): avc:  denied  { append } for  pid=6335 comm="syz.2.433" name="file1" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   64.407290][   T29] audit: type=1400 audit(1757768901.461:2408): avc:  denied  { ioctl } for  pid=6335 comm="syz.2.433" path="/101/file1/file1" dev="loop2" ino=12 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   64.435656][   T29] audit: type=1400 audit(1757768901.491:2409): avc:  denied  { map } for  pid=6335 comm="syz.2.433" path="/101/file1/file1" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   64.458365][   T29] audit: type=1400 audit(1757768901.491:2410): avc:  denied  { execute } for  pid=6335 comm="syz.2.433" path="/101/file1/file1" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   64.500554][ T6354] loop1: detected capacity change from 0 to 164
[   64.510470][   T29] audit: type=1326 audit(1757768901.571:2411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6353 comm="syz.1.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63749eba9 code=0x7ffc0000
[   64.533966][   T29] audit: type=1326 audit(1757768901.571:2412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6353 comm="syz.1.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63749eba9 code=0x7ffc0000
[   64.573291][ T6354] syz.1.436: attempt to access beyond end of device
[   64.573291][ T6354] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164
[   64.591477][   T29] audit: type=1326 audit(1757768901.571:2413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6353 comm="syz.1.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa63749eba9 code=0x7ffc0000
[   64.601899][ T6354] syz.1.436: attempt to access beyond end of device
[   64.601899][ T6354] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164
[   64.614858][   T29] audit: type=1326 audit(1757768901.571:2414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6353 comm="syz.1.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63749eba9 code=0x7ffc0000
[   64.675614][ T6367] tipc: Started in network mode
[   64.680535][ T6367] tipc: Node identity , cluster identity 4711
[   64.686631][ T6367] tipc: Failed to set node id, please configure manually
[   64.693812][ T6367] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   64.711140][ T6369] loop6: detected capacity change from 0 to 512
[   64.718739][ T6369] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[   64.729165][ T6369] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002]
[   64.739477][ T6369] System zones: 1-12
[   64.744084][ T6369] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.439: corrupted in-inode xattr: e_value size too large
[   64.787025][ T6367] loop5: detected capacity change from 0 to 8192
[   64.790465][ T6369] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.439: couldn't read orphan inode 15 (err -117)
[   64.793851][ T6367] msdos: Unknown parameter 'A'
[   64.823314][ T6369] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   64.837920][ T3309] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   64.938214][ T6409] 9pnet: Could not find request transport: t
[   65.025780][ T6430] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   65.047913][ T6430] loop2: detected capacity change from 0 to 1024
[   65.055091][ T6430] EXT4-fs: Ignoring removed nobh option
[   65.060842][ T6430] EXT4-fs: Ignoring removed bh option
[   65.077252][ T6430] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   65.094896][ T6437] netlink: 8 bytes leftover after parsing attributes in process `syz.5.453'.
[   65.103867][ T6437] netlink: 'syz.5.453': attribute type 30 has an invalid length.
[   65.117504][ T6329] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   65.129053][ T3448] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   65.129516][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.144541][ T3448] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   65.155821][ T3448] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   65.302602][ T6460] netlink: 48 bytes leftover after parsing attributes in process `syz.2.459'.
[   65.500969][ T5532] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.661814][ T6507] loop6: detected capacity change from 0 to 512
[   65.673253][ T6507] EXT4-fs warning (device loop6): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop6.
[   65.743550][ T6520] loop6: detected capacity change from 0 to 512
[   65.771253][ T6520] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   65.784625][ T6520] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   65.797417][ T6520] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.472: bg 0: block 328: padding at end of block bitmap is not set
[   65.802903][ T6527] netlink: 'syz.2.474': attribute type 3 has an invalid length.
[   65.819881][ T6527] netlink: 'syz.2.474': attribute type 3 has an invalid length.
[   65.827947][ T6527] netlink: 16 bytes leftover after parsing attributes in process `syz.2.474'.
[   65.844392][ T6527] program syz.2.474 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   65.859678][ T5532] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.947392][ T6539] netlink: 'syz.2.474': attribute type 10 has an invalid length.
[   65.955446][ T6539] netlink: 40 bytes leftover after parsing attributes in process `syz.2.474'.
[   65.967112][ T6539] net_ratelimit: 2 callbacks suppressed
[   65.967130][ T6539] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   66.098956][    C1] sd 0:0:1:0: [sda] tag#2806 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[   66.109408][    C1] sd 0:0:1:0: [sda] tag#2806 CDB: Read(6) 08 00 00 00 00 20
[   66.200841][ T6543] netlink: 'syz.2.477': attribute type 1 has an invalid length.
[   66.209269][ T6543] netlink: 224 bytes leftover after parsing attributes in process `syz.2.477'.
[   66.276699][ T6551] syzkaller0: entered promiscuous mode
[   66.282350][ T6551] syzkaller0: entered allmulticast mode
[   66.340060][ T6561] netlink: 'syz.2.480': attribute type 3 has an invalid length.
[   66.347754][ T6561] netlink: 'syz.2.480': attribute type 3 has an invalid length.
[   66.463990][ T6569] ==================================================================
[   66.472155][ T6569] BUG: KCSAN: data-race in audit_log_start / audit_receive
[   66.479403][ T6569] 
[   66.481735][ T6569] write to 0xffffffff88e60470 of 8 bytes by task 6568 on cpu 1:
[   66.489368][ T6569]  audit_receive+0x78/0x2180
[   66.493990][ T6569]  netlink_unicast+0x5bd/0x690
[   66.498762][ T6569]  netlink_sendmsg+0x58b/0x6b0
[   66.503547][ T6569]  __sock_sendmsg+0x145/0x180
[   66.508247][ T6569]  ____sys_sendmsg+0x31e/0x4e0
[   66.513026][ T6569]  ___sys_sendmsg+0x17b/0x1d0
[   66.517727][ T6569]  __x64_sys_sendmsg+0xd4/0x160
[   66.522591][ T6569]  x64_sys_call+0x191e/0x2ff0
[   66.527276][ T6569]  do_syscall_64+0xd2/0x200
[   66.531841][ T6569]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   66.537746][ T6569] 
[   66.540085][ T6569] read to 0xffffffff88e60470 of 8 bytes by task 6569 on cpu 0:
[   66.547629][ T6569]  audit_log_start+0x129/0x6c0
[   66.552412][ T6569]  audit_seccomp+0x48/0x100
[   66.556938][ T6569]  __seccomp_filter+0x69d/0x10d0
[   66.561881][ T6569]  __secure_computing+0x82/0x150
[   66.566835][ T6569]  syscall_trace_enter+0xcf/0x1e0
[   66.571875][ T6569]  do_syscall_64+0xac/0x200
[   66.576401][ T6569]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   66.582301][ T6569] 
[   66.584629][ T6569] value changed: 0x0000000000000000 -> 0xffff8881035a0000
[   66.591738][ T6569] 
[   66.594069][ T6569] Reported by Kernel Concurrency Sanitizer on:
[   66.600232][ T6569] CPU: 0 UID: 0 PID: 6569 Comm: syz.6.483 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   66.609880][ T6569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   66.619946][ T6569] ==================================================================