last executing test programs:

5.743147131s ago: executing program 3 (id=443):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000040000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
r2 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000480)=<r4=>0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="0c000000000000001c0012000c000100626f6e64000000000c0002000800010006df7a4deb1d92b6bdbaee16f3172b058b6b92371fffa51acc59178740c12213b1506d4219936c09b86c"], 0x3c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000e00000040000081002000860000000000000000000001ff02800000000000000000000000000187009078ff020000000000000000000000000001"], 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'})
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2)
readv(0xffffffffffffffff, &(0x7f0000000000), 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f0000000680)=""/247, 0xf7, 0x0, &(0x7f0000000380)=""/4, 0x4}}, 0x10)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x2c, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6}}, [@TCA_CHAIN={0x8}]}, 0x2c}}, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0})
io_uring_enter(r2, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0)

5.559849552s ago: executing program 3 (id=444):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000000440)={&(0x7f000000c780)=@deltfilter={0x34, 0x2d, 0x100, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfff3}, {0xffe0, 0x8}, {0x10, 0x1}}, [@f_rsvp6={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x1)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000240)={{0x2, 0x4e20, @local}, {0x306, @broadcast}, 0x0, {0x2, 0x4e20, @broadcast}, 'veth0_to_bond\x00'})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r3, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000100))
io_setup(0x5, &(0x7f0000000040))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, 0x0)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800)

5.401558543s ago: executing program 3 (id=445):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]})
io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000380)="fa0550f01c36e4096ee96b24912a40733378b6047c848d33b2a8a479ca2a5abd36e4d4c71a6007c6647617dadb8beb6b2f2867466fbc688282ba3eb60ca69be1f4eaacdf5c02c5f5958ba77e44504b7c1d8d893c1dcc7f18bde1168f06b93da82acbcdf088dd38ccbc47d50c29d4")
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a3200000000140000"], 0x7c}}, 0x4004944)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000019480)={&(0x7f0000019200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000019440)={&(0x7f00000192c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=0x0, @ANYBLOB="010025bd7000ffdbdf2545000000080001007063690011000200303030303a30303a31302e300000000008008e07000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0001000000080001007063690011000200303030303a30303a31302e300000000008008e000100000008000100706369df3c68d2ea5f0011000200303030303a30303a31302e300000000008008e0003000000050001007063690011000200303030303a30303a31302e300000000008008e0001000000080001007063890011000200303030303a30303a31302e30000000000800"], 0x140}, 0x1, 0x0, 0x0, 0x880}, 0x20000800)
sendmsg$NFT_BATCH(r2, &(0x7f0000019280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000194c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001", @ANYRES8=0x0, @ANYRES16=r1, @ANYRES8, @ANYRES16], 0x64}}, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = gettid()
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
read$ptp(r4, 0x0, 0x0)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=<r5=>0x0)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(r6, &(0x7f0000000000)='map_files\x00')
syz_open_procfs$pagemap(r1, &(0x7f0000000080))
mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16, 0x0, @tid=r6})
timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
chmod(&(0x7f0000000000)='./file0\x00', 0x60)
modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0x100000}, 0x10)
syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0)
lsm_get_self_attr(0x69, &(0x7f00000004c0)={0x0, 0x0, 0xda, 0xba, ""/186}, &(0x7f0000000300)=0xda, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18)
lsm_get_self_attr(0x68, &(0x7f00000006c0)={0x0, 0x0, 0xe8, 0xc8, ""/200}, &(0x7f0000000200)=0xe8, 0x0)

5.062420684s ago: executing program 2 (id=448):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]})
io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000380)="fa0550f01c36e4096ee96b24912a40733378b6047c848d33b2a8a479ca2a5abd36e4d4c71a6007c6647617dadb8beb6b2f2867466fbc688282ba3eb60ca69be1f4eaacdf5c02c5f5958ba77e44504b7c1d8d893c1dcc7f18bde1168f06b93da82acbcdf088dd38ccbc47d50c29d4")
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000019280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000194c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001", @ANYRES8=0x0, @ANYRES16=r1, @ANYRES16], 0x64}}, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = gettid()
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
read$ptp(r4, 0x0, 0x0)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=<r5=>0x0)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(r6, &(0x7f0000000000)='map_files\x00')
mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16, 0x0, @tid=r6})
timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
chmod(&(0x7f0000000000)='./file0\x00', 0x60)
modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0x100000}, 0x10)
syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0)
lsm_get_self_attr(0x69, &(0x7f00000004c0)={0x0, 0x0, 0xda, 0xba, ""/186}, &(0x7f0000000300)=0xda, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18)
lsm_get_self_attr(0x68, &(0x7f00000006c0)={0x0, 0x0, 0xe8, 0xc8, ""/200}, &(0x7f0000000200)=0xe8, 0x0)

4.762832486s ago: executing program 0 (id=450):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]})
io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000380)="fa0550f01c36e4096ee96b24912a40733378b6047c848d33b2a8a479ca2a5abd36e4d4c71a6007c6647617dadb8beb6b2f2867466fbc688282ba3eb60ca69be1f4eaacdf5c02c5f5958ba77e44504b7c1d8d893c1dcc7f18bde1168f06b93da82acbcdf088dd38ccbc47d50c29d4")
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a3200000000140000001100"], 0x7c}}, 0x4004944)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000019480)={&(0x7f0000019200)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x20000800)
sendmsg$NFT_BATCH(r2, &(0x7f0000019280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000194c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001", @ANYRES8=0x0, @ANYRES16=r1, @ANYRES8, @ANYRES16], 0x64}}, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = gettid()
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
read$ptp(r4, 0x0, 0x0)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=<r5=>0x0)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(r6, &(0x7f0000000000)='map_files\x00')
syz_open_procfs$pagemap(r1, &(0x7f0000000080))
mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16, 0x0, @tid=r6})
timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
chmod(&(0x7f0000000000)='./file0\x00', 0x60)
modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0x100000}, 0x10)
syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0)
lsm_get_self_attr(0x69, &(0x7f00000004c0)={0x0, 0x0, 0xda, 0xba, ""/186}, &(0x7f0000000300)=0xda, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18)
lsm_get_self_attr(0x68, &(0x7f00000006c0)={0x0, 0x0, 0xe8, 0xc8, ""/200}, &(0x7f0000000200)=0xe8, 0x0)

4.424286598s ago: executing program 3 (id=451):
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x8, 0x26, 0x40, 0x7, 0x0, 0x0, 0xa005a, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x1}, 0x100987, 0x2, 0xb, 0x4, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000000)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c00db00fb18000000000300050000000000020000007f1a60746c000000000000000100"], 0x58}, 0x1, 0x7}, 0x0)
r5 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
wait4(r5, 0x0, 0x40000000, 0x0)
unshare(0x26020480)
unshare(0x26040600)

3.504066372s ago: executing program 1 (id=454):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000040000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
r2 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000480)=<r4=>0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="0c000000000000001c0012000c000100626f6e64000000000c0002000800010006df7a4deb1d92b6bdbaee16f3172b058b6b92371fffa51acc59178740c12213b1506d4219936c09b86c"], 0x3c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000e00000040000081002000860000000000000000000001ff02800000000000000000000000000187009078ff020000000000000000000000000001"], 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'})
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2)
readv(0xffffffffffffffff, &(0x7f0000000000), 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f0000000680)=""/247, 0xf7, 0x0, &(0x7f0000000380)=""/4, 0x4}}, 0x10)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x2c, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6}}, [@TCA_CHAIN={0x8}]}, 0x2c}}, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0})
io_uring_enter(r2, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0)

3.413273753s ago: executing program 1 (id=455):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]})
io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000380)="fa0550f01c36e4096ee96b24912a40733378b6047c848d33b2a8a479ca2a5abd36e4d4c71a6007c6647617dadb8beb6b2f2867466fbc688282ba3eb60ca69be1f4eaacdf5c02c5f5958ba77e44504b7c1d8d893c1dcc7f18bde1168f06b93da82acbcdf088dd38ccbc47d50c29d4")
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000019280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000194c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a010200000000000000000200000009000200", @ANYRES8=0x0, @ANYRES16=r1, @ANYRES8, @ANYRES16], 0x64}}, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = gettid()
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
read$ptp(r4, 0x0, 0x0)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=<r5=>0x0)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(r6, &(0x7f0000000000)='map_files\x00')
mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16, 0x0, @tid=r6})
timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
chmod(&(0x7f0000000000)='./file0\x00', 0x60)
modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0x100000}, 0x10)
syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0)
lsm_get_self_attr(0x69, &(0x7f00000004c0)={0x0, 0x0, 0xda, 0xba, ""/186}, &(0x7f0000000300)=0xda, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18)
lsm_get_self_attr(0x68, &(0x7f00000006c0)={0x0, 0x0, 0xe8, 0xc8, ""/200}, &(0x7f0000000200)=0xe8, 0x0)

3.129375105s ago: executing program 2 (id=456):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]})
io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000380)="fa0550f01c36e4096ee96b24912a40733378b6047c848d33b2a8a479ca2a5abd36e4d4c71a6007c6647617dadb8beb6b2f2867466fbc688282ba3eb60ca69be1f4eaacdf5c02c5f5958ba77e44504b7c1d8d893c1dcc7f18bde1168f06b93da82acbcdf088dd38ccbc47d50c29d4")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x7c}}, 0x4004944)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000019480)={&(0x7f0000019200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000019440)={&(0x7f00000192c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x880}, 0x20000800)
sendmsg$NFT_BATCH(r1, &(0x7f0000019280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000194c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001", @ANYRES8=0x0, @ANYRES16=r0, @ANYRES8, @ANYRES16], 0x64}}, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
gettid()
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
read$ptp(r2, 0x0, 0x0)

3.103679694s ago: executing program 0 (id=457):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32, @ANYBLOB="00000012a7"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x15}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10)
syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x66002)
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0xc0a81, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)={0x28, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x800}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x40)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r4, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x58, r6, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1ec}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x101}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x8080)
pread64(r4, &(0x7f00000000c0)=""/104, 0x68, 0x200)
r7 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
pread64(r2, &(0x7f0000000580)=""/217, 0xd9, 0x8000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
sendmsg$rds(r7, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0x6}, &(0x7f0000000200)=0x7fffffff, 0x0, 0x10000, 0x7, 0x8, 0xcebc, 0x11, 0x9}}], 0x58, 0x40845}, 0x0)
r8 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000000000)=0x80, 0x4)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x6, 0x8012, r8, 0x0)
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4011, &(0x7f0000000000)={[{@nobh}, {@norecovery}, {@nobh}]}, 0x9, 0x66d, &(0x7f00000011c0)="$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")

3.060420945s ago: executing program 4 (id=458):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r1, 0x0, 0x20008850)
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r8 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0)

2.744342656s ago: executing program 4 (id=459):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50)
mkdir(0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000040), 0x12)
syz_clone(0x11, 0x0, 0x500, 0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000300), &(0x7f0000000440)=r3}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xffffffffffffffdd)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)
r5 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmmsg$inet(r5, &(0x7f0000000240)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f0000000000)="17460081ba60ccbb9d000000000000", 0xf}], 0x2}}, {{&(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000780)="5825be06000000000000007ca2746314d1787b35", 0x14}], 0x1}}], 0x2, 0x4004040)

2.658440237s ago: executing program 4 (id=460):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32], 0x1c}}, 0x8004)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r4], 0x4)

2.543752277s ago: executing program 1 (id=461):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]})
io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000380)="fa0550f01c36e4096ee96b24912a40733378b6047c848d33b2a8a479ca2a5abd36e4d4c71a6007c6647617dadb8beb6b2f2867466fbc688282ba3eb60ca69be1f4eaacdf5c02c5f5958ba77e44504b7c1d8d893c1dcc7f18bde1168f06b93da82acbcdf088dd38ccbc47d50c29d4")
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000019280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000194c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a31000000000800044000000000090001007379", @ANYRES8=0x0, @ANYRES16=r1, @ANYRES8, @ANYRES16], 0x64}}, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = gettid()
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
read$ptp(r4, 0x0, 0x0)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=<r5=>0x0)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(r6, &(0x7f0000000000)='map_files\x00')
mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16, 0x0, @tid=r6})
timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
chmod(&(0x7f0000000000)='./file0\x00', 0x60)
modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0x100000}, 0x10)
syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0)
lsm_get_self_attr(0x69, &(0x7f00000004c0)={0x0, 0x0, 0xda, 0xba, ""/186}, &(0x7f0000000300)=0xda, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18)
lsm_get_self_attr(0x68, &(0x7f00000006c0)={0x0, 0x0, 0xe8, 0xc8, ""/200}, &(0x7f0000000200)=0xe8, 0x0)

2.538318958s ago: executing program 4 (id=462):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]})
io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000380)="fa0550f01c36e4096ee96b24912a40733378b6047c848d33b2a8a479ca2a5abd36e4d4c71a6007c6647617dadb8beb6b2f2867466fbc688282ba3eb60ca69be1f4eaacdf5c02c5f5958ba77e44504b7c1d8d893c1dcc7f18bde1168f06b93da82acbcdf088dd38ccbc47d50c29d4")
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a32000000001400000011"], 0x7c}}, 0x4004944)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000019480)={&(0x7f0000019200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000019440)={&(0x7f00000192c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x880}, 0x20000800)
sendmsg$NFT_BATCH(r2, &(0x7f0000019280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000194c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001", @ANYRES8=0x0, @ANYRES16=r1, @ANYRES8, @ANYRES16], 0x64}}, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = gettid()
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
read$ptp(r4, 0x0, 0x0)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=<r5=>0x0)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(r6, &(0x7f0000000000)='map_files\x00')
syz_open_procfs$pagemap(r1, &(0x7f0000000080))
mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16, 0x0, @tid=r6})
timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
chmod(&(0x7f0000000000)='./file0\x00', 0x60)
modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0x100000}, 0x10)
syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0)
lsm_get_self_attr(0x69, &(0x7f00000004c0)={0x0, 0x0, 0xda, 0xba, ""/186}, &(0x7f0000000300)=0xda, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18)
lsm_get_self_attr(0x68, &(0x7f00000006c0)={0x0, 0x0, 0xe8, 0xc8, ""/200}, &(0x7f0000000200)=0xe8, 0x0)

2.280095259s ago: executing program 2 (id=463):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xfd, 0x7ffc1ffd}]})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb000000000000000004000400"/102], 0xd8}}, 0x0)
r2 = gettid()
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x0, 0x0})
syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0)
rt_sigaction(0x1b, &(0x7f0000000040)={0xfffffffffffffffc, 0x4c000000, 0x0, {[0x8000000000005a]}}, 0x0, 0x8, &(0x7f00000001c0))
tkill(r2, 0x1b)
sched_setaffinity(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
r4 = perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80000001, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0x6)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, 0x0, &(0x7f0000000280)}, 0x20)
ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000000f254c217c24e12af6b3380efe4d2b9f401dcf008000080000000001c1598518484e3c4c12dc40f0b7545df286aa277d55b49154d3e568dd9617c224d8dfd098d2fcfabae0a6aecf54f6de3367231b572b14f4d6ea6777bfc916594c6b33d81ef5b2d69b880a3ff77c6418cfc1689bcf463", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000029c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in=@empty, 0x0, 0x40, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tmpl={0xc4, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x4d3, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, {{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x0, 0x3c}, 0x8, @in=@broadcast, 0x0, 0x4, 0x0, 0x4}]}]}, 0x17c}}, 0x0)

2.00236859s ago: executing program 0 (id=464):
unshare(0x6a040000)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x2)
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0)
fsopen(&(0x7f0000000080)='vfat\x00', 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]})
lgetxattr(0x0, 0x0, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

1.842073241s ago: executing program 0 (id=465):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]})
io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000380)="fa0550f01c36e4096ee96b24912a40733378b6047c848d33b2a8a479ca2a5abd36e4d4c71a6007c6647617dadb8beb6b2f2867466fbc688282ba3eb60ca69be1f4eaacdf5c02c5f5958ba77e44504b7c1d8d893c1dcc7f18bde1168f06b93da82acbcdf088dd38ccbc47d50c29d4")
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000019280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000194c0)=ANY=[@ANYBLOB, @ANYRES8=0x0, @ANYRES16=r1, @ANYRES8, @ANYRES16], 0x64}}, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = gettid()
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
read$ptp(r4, 0x0, 0x0)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=<r5=>0x0)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(r6, &(0x7f0000000000)='map_files\x00')
mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16, 0x0, @tid=r6})
timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
chmod(&(0x7f0000000000)='./file0\x00', 0x60)
modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0x100000}, 0x10)
syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0)
lsm_get_self_attr(0x69, &(0x7f00000004c0)={0x0, 0x0, 0xda, 0xba, ""/186}, &(0x7f0000000300)=0xda, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18)
lsm_get_self_attr(0x68, &(0x7f00000006c0)={0x0, 0x0, 0xe8, 0xc8, ""/200}, &(0x7f0000000200)=0xe8, 0x0)

1.646301902s ago: executing program 1 (id=466):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]})
io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000380)="fa0550f01c36e4096ee96b24912a40733378b6047c848d33b2a8a479ca2a5abd36e4d4c71a6007c6647617dadb8beb6b2f2867466fbc688282ba3eb60ca69be1f4eaacdf5c02c5f5958ba77e44504b7c1d8d893c1dcc7f18bde1168f06b93da82acbcdf088dd38ccbc47d50c29d4")
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000019280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000194c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a1400000011", @ANYRES8=0x0, @ANYRES16=r1, @ANYRES8, @ANYRES16], 0x64}}, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = gettid()
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
read$ptp(r4, 0x0, 0x0)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=<r5=>0x0)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(r6, &(0x7f0000000000)='map_files\x00')
mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16, 0x0, @tid=r6})
timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
chmod(&(0x7f0000000000)='./file0\x00', 0x60)
modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0x100000}, 0x10)
syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0)
lsm_get_self_attr(0x69, &(0x7f00000004c0)={0x0, 0x0, 0xda, 0xba, ""/186}, &(0x7f0000000300)=0xda, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18)
lsm_get_self_attr(0x68, &(0x7f00000006c0)={0x0, 0x0, 0xe8, 0xc8, ""/200}, &(0x7f0000000200)=0xe8, 0x0)

1.587872412s ago: executing program 4 (id=467):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]})
io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000380)="fa0550f01c36e4096ee96b24912a40733378b6047c848d33b2a8a479ca2a5abd36e4d4c71a6007c6647617dadb8beb6b2f2867466fbc688282ba3eb60ca69be1f4eaacdf5c02c5f5958ba77e44504b7c1d8d893c1dcc7f18bde1168f06b93da82acbcdf088dd38ccbc47d50c29d4")
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a3200000000140000001100"], 0x7c}}, 0x4004944)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000019480)={&(0x7f0000019200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000019440)={&(0x7f00000192c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=0x0], 0x140}, 0x1, 0x0, 0x0, 0x880}, 0x20000800)
sendmsg$NFT_BATCH(r2, &(0x7f0000019280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000194c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001", @ANYRES8=0x0, @ANYRES16=r1, @ANYRES8, @ANYRES16], 0x64}}, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = gettid()
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
read$ptp(r4, 0x0, 0x0)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=<r5=>0x0)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(r6, &(0x7f0000000000)='map_files\x00')
syz_open_procfs$pagemap(r1, &(0x7f0000000080))
mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16, 0x0, @tid=r6})
timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
chmod(&(0x7f0000000000)='./file0\x00', 0x60)
modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0x100000}, 0x10)
syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0)
lsm_get_self_attr(0x69, &(0x7f00000004c0)={0x0, 0x0, 0xda, 0xba, ""/186}, &(0x7f0000000300)=0xda, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18)
lsm_get_self_attr(0x68, &(0x7f00000006c0)={0x0, 0x0, 0xe8, 0xc8, ""/200}, &(0x7f0000000200)=0xe8, 0x0)

1.424697253s ago: executing program 3 (id=468):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]})
io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000380)="fa0550f01c36e4096ee96b24912a40733378b6047c848d33b2a8a479ca2a5abd36e4d4c71a6007c6647617dadb8beb6b2f2867466fbc688282ba3eb60ca69be1f4eaacdf5c02c5f5958ba77e44504b7c1d8d893c1dcc7f18bde1168f06b93da82acbcdf088dd38ccbc47d50c29d4")
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a3200000000140000001100"], 0x7c}}, 0x4004944)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000019480)={&(0x7f0000019200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000019440)={&(0x7f00000192c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=0x0], 0x140}, 0x1, 0x0, 0x0, 0x880}, 0x20000800)
sendmsg$NFT_BATCH(r2, &(0x7f0000019280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000194c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001", @ANYRES8=0x0, @ANYRES16=r1, @ANYRES8, @ANYRES16], 0x64}}, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = gettid()
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
read$ptp(r4, 0x0, 0x0)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=<r5=>0x0)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(r6, &(0x7f0000000000)='map_files\x00')
syz_open_procfs$pagemap(r1, &(0x7f0000000080))
mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16, 0x0, @tid=r6})
timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
chmod(&(0x7f0000000000)='./file0\x00', 0x60)
modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0x100000}, 0x10)
syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0)
lsm_get_self_attr(0x69, &(0x7f00000004c0)={0x0, 0x0, 0xda, 0xba, ""/186}, &(0x7f0000000300)=0xda, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18)
lsm_get_self_attr(0x68, &(0x7f00000006c0)={0x0, 0x0, 0xe8, 0xc8, ""/200}, &(0x7f0000000200)=0xe8, 0x0)

1.378603323s ago: executing program 2 (id=469):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r8 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0)

1.246095404s ago: executing program 2 (id=470):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]})
io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000380)="fa0550f01c36e4096ee96b24912a40733378b6047c848d33b2a8a479ca2a5abd36e4d4c71a6007c6647617dadb8beb6b2f2867466fbc688282ba3eb60ca69be1f4eaacdf5c02c5f5958ba77e44504b7c1d8d893c1dcc7f18bde1168f06b93da82acbcdf088dd38ccbc47d50c29d4")
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000019280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000194c0)=ANY=[], 0x64}}, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = gettid()
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
read$ptp(r4, 0x0, 0x0)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=<r5=>0x0)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(r6, &(0x7f0000000000)='map_files\x00')
mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16, 0x0, @tid=r6})
timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
chmod(&(0x7f0000000000)='./file0\x00', 0x60)
modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0x100000}, 0x10)
syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0)
lsm_get_self_attr(0x69, &(0x7f00000004c0)={0x0, 0x0, 0xda, 0xba, ""/186}, &(0x7f0000000300)=0xda, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18)
lsm_get_self_attr(0x68, &(0x7f00000006c0)={0x0, 0x0, 0xe8, 0xc8, ""/200}, &(0x7f0000000200)=0xe8, 0x0)

969.177055ms ago: executing program 0 (id=471):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
creat(0x0, 0x0)
setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x81}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(0x0, 0x184)

676.208197ms ago: executing program 1 (id=472):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32], 0x1c}}, 0x8004)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r4], 0x4)

457.947818ms ago: executing program 1 (id=473):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]})
io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000380)="fa0550f01c36e4096ee96b24912a40733378b6047c848d33b2a8a479ca2a5abd36e4d4c71a6007c6647617dadb8beb6b2f2867466fbc688282ba3eb60ca69be1f4eaacdf5c02c5f5958ba77e44504b7c1d8d893c1dcc7f18bde1168f06b93da82acbcdf088dd38ccbc47d50c29d4")
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a3200000000140000001100"], 0x7c}}, 0x4004944)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000019480)={0x0, 0x0, &(0x7f0000019440)={&(0x7f00000192c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=0x0, @ANYBLOB="010025bd7000ffdbdf2545000000080001007063690011000200303030303a30303a31302e300000000008008e07000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0001000000080001007063690011000200303030303a30303a31302e300000000008008e000100000008000100706369df3c68d2ea5f0011000200303030303a30303a31302e300000000008008e0003000000050001007063690011000200303030303a30303a31302e300000000008008e0001000000080001007063890011000200303030303a30303a31302e30000000000800"], 0x140}, 0x1, 0x0, 0x0, 0x880}, 0x20000800)
sendmsg$NFT_BATCH(r2, &(0x7f0000019280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000194c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001", @ANYRES8=0x0, @ANYRES16=r1, @ANYRES8, @ANYRES16], 0x64}}, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = gettid()
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
read$ptp(r4, 0x0, 0x0)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=<r5=>0x0)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(r6, &(0x7f0000000000)='map_files\x00')
syz_open_procfs$pagemap(r1, &(0x7f0000000080))
mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16, 0x0, @tid=r6})
timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
chmod(&(0x7f0000000000)='./file0\x00', 0x60)
modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0x100000}, 0x10)
syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0)
lsm_get_self_attr(0x69, &(0x7f00000004c0)={0x0, 0x0, 0xda, 0xba, ""/186}, &(0x7f0000000300)=0xda, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18)
lsm_get_self_attr(0x68, &(0x7f00000006c0)={0x0, 0x0, 0xe8, 0xc8, ""/200}, &(0x7f0000000200)=0xe8, 0x0)

443.545998ms ago: executing program 4 (id=474):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]})
io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000380)="fa0550f01c36e4096ee96b24912a40733378b6047c848d33b2a8a479ca2a5abd36e4d4c71a6007c6647617dadb8beb6b2f2867466fbc688282ba3eb60ca69be1f4eaacdf5c02c5f5958ba77e44504b7c1d8d893c1dcc7f18bde1168f06b93da82acbcdf088dd38ccbc47d50c29d4")
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a32000000001400000011"], 0x7c}}, 0x4004944)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000019480)={&(0x7f0000019200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000019440)={&(0x7f00000192c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x880}, 0x20000800)
sendmsg$NFT_BATCH(r2, &(0x7f0000019280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000194c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001", @ANYRES8=0x0, @ANYRES16=r1, @ANYRES8, @ANYRES16], 0x64}}, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = gettid()
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
read$ptp(r4, 0x0, 0x0)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=<r5=>0x0)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(r6, &(0x7f0000000000)='map_files\x00')
syz_open_procfs$pagemap(r1, &(0x7f0000000080))
mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16, 0x0, @tid=r6})
timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
chmod(&(0x7f0000000000)='./file0\x00', 0x60)
modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0x100000}, 0x10)
syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0)
lsm_get_self_attr(0x69, &(0x7f00000004c0)={0x0, 0x0, 0xda, 0xba, ""/186}, &(0x7f0000000300)=0xda, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18)
lsm_get_self_attr(0x68, &(0x7f00000006c0)={0x0, 0x0, 0xe8, 0xc8, ""/200}, &(0x7f0000000200)=0xe8, 0x0)

396.767168ms ago: executing program 3 (id=475):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]})
io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000380)="fa0550f01c36e4096ee96b24912a40733378b6047c848d33b2a8a479ca2a5abd36e4d4c71a6007c6647617dadb8beb6b2f2867466fbc688282ba3eb60ca69be1f4eaacdf5c02c5f5958ba77e44504b7c1d8d893c1dcc7f18bde1168f06b93da82acbcdf088dd38ccbc47d50c29d4")
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a3200000000140000001100"], 0x7c}}, 0x4004944)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, 0x0, 0x20000800)
sendmsg$NFT_BATCH(r2, &(0x7f0000019280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000194c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001", @ANYRES8=0x0, @ANYRES16=r1, @ANYRES8, @ANYRES16], 0x64}}, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = gettid()
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
read$ptp(r4, 0x0, 0x0)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=<r5=>0x0)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(r6, &(0x7f0000000000)='map_files\x00')
syz_open_procfs$pagemap(r1, &(0x7f0000000080))
mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16, 0x0, @tid=r6})
timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
chmod(&(0x7f0000000000)='./file0\x00', 0x60)
modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0x100000}, 0x10)
syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0)
lsm_get_self_attr(0x69, &(0x7f00000004c0)={0x0, 0x0, 0xda, 0xba, ""/186}, &(0x7f0000000300)=0xda, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18)
lsm_get_self_attr(0x68, &(0x7f00000006c0)={0x0, 0x0, 0xe8, 0xc8, ""/200}, &(0x7f0000000200)=0xe8, 0x0)

156.078739ms ago: executing program 2 (id=476):
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00"/13], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETMODE(r1, 0x4b3a, 0x1)
ioctl$TCXONC(r1, 0x4b3a, 0x3)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r2 = io_uring_setup(0x6c2, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x2, 0x10f})
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0x22d3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00')
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x2}, 0x18)
r4 = socket(0x10, 0x2, 0x0)
recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, 0x0, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='kmem_cache_free\x00', r6, 0x0, 0x1}, 0x18)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c)

0s ago: executing program 0 (id=477):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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")
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000000440)={&(0x7f000000c780)=@deltfilter={0x34, 0x2d, 0x100, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfff3}, {0xffe0, 0x8}, {0x10, 0x1}}, [@f_rsvp6={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x1)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000240)={{0x2, 0x4e20, @local}, {0x306, @broadcast}, 0x0, {0x2, 0x4e20, @broadcast}, 'veth0_to_bond\x00'})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100))
io_setup(0x5, &(0x7f0000000040))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, 0x0)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18)
openat$tun(0xffffffffffffff9c, 0x0, 0x2400, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.208' (ED25519) to the list of known hosts.
[   33.436143][   T29] audit: type=1400 audit(1762316243.572:62): avc:  denied  { mounton } for  pid=3304 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   33.459148][   T29] audit: type=1400 audit(1762316243.592:63): avc:  denied  { mount } for  pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   33.460032][ T3304] cgroup: Unknown subsys name 'net'
[   33.486858][   T29] audit: type=1400 audit(1762316243.622:64): avc:  denied  { unmount } for  pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   33.613474][ T3304] cgroup: Unknown subsys name 'cpuset'
[   33.619862][ T3304] cgroup: Unknown subsys name 'rlimit'
[   33.731503][   T29] audit: type=1400 audit(1762316243.862:65): avc:  denied  { setattr } for  pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   33.754773][   T29] audit: type=1400 audit(1762316243.862:66): avc:  denied  { create } for  pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   33.775409][   T29] audit: type=1400 audit(1762316243.862:67): avc:  denied  { write } for  pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   33.795820][   T29] audit: type=1400 audit(1762316243.862:68): avc:  denied  { read } for  pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   33.816289][   T29] audit: type=1400 audit(1762316243.902:69): avc:  denied  { mounton } for  pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   33.832985][ T3306] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   33.841137][   T29] audit: type=1400 audit(1762316243.902:70): avc:  denied  { mount } for  pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   33.872987][   T29] audit: type=1400 audit(1762316243.992:71): avc:  denied  { relabelto } for  pid=3306 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   33.889394][ T3304] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   35.134189][ T3314] chnl_net:caif_netlink_parms(): no params data found
[   35.169268][ T3317] chnl_net:caif_netlink_parms(): no params data found
[   35.270442][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.277670][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.285061][ T3314] bridge_slave_0: entered allmulticast mode
[   35.291613][ T3314] bridge_slave_0: entered promiscuous mode
[   35.298188][ T3322] chnl_net:caif_netlink_parms(): no params data found
[   35.308858][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.315979][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.323597][ T3314] bridge_slave_1: entered allmulticast mode
[   35.329992][ T3314] bridge_slave_1: entered promiscuous mode
[   35.344167][ T3321] chnl_net:caif_netlink_parms(): no params data found
[   35.360607][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.367699][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.374923][ T3317] bridge_slave_0: entered allmulticast mode
[   35.381307][ T3317] bridge_slave_0: entered promiscuous mode
[   35.389578][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.396753][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.403864][ T3317] bridge_slave_1: entered allmulticast mode
[   35.410229][ T3317] bridge_slave_1: entered promiscuous mode
[   35.434031][ T3313] chnl_net:caif_netlink_parms(): no params data found
[   35.455373][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   35.478855][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   35.498015][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   35.521210][ T3314] team0: Port device team_slave_0 added
[   35.527946][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   35.546371][ T3314] team0: Port device team_slave_1 added
[   35.583926][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.591000][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.598279][ T3322] bridge_slave_0: entered allmulticast mode
[   35.604741][ T3322] bridge_slave_0: entered promiscuous mode
[   35.611157][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.618265][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.625507][ T3321] bridge_slave_0: entered allmulticast mode
[   35.632111][ T3321] bridge_slave_0: entered promiscuous mode
[   35.640858][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.648030][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.655210][ T3321] bridge_slave_1: entered allmulticast mode
[   35.661534][ T3321] bridge_slave_1: entered promiscuous mode
[   35.673634][ T3317] team0: Port device team_slave_0 added
[   35.679610][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0
[   35.686593][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   35.712594][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   35.723324][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.730433][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.737919][ T3322] bridge_slave_1: entered allmulticast mode
[   35.744323][ T3322] bridge_slave_1: entered promiscuous mode
[   35.761103][ T3317] team0: Port device team_slave_1 added
[   35.771584][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1
[   35.778575][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   35.804526][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   35.835779][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0
[   35.842803][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   35.868766][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   35.887066][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.894239][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.901492][ T3313] bridge_slave_0: entered allmulticast mode
[   35.908122][ T3313] bridge_slave_0: entered promiscuous mode
[   35.915912][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   35.926815][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   35.936214][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1
[   35.943178][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   35.969120][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   35.981038][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   35.991489][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.000692][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.007846][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.014997][ T3313] bridge_slave_1: entered allmulticast mode
[   36.021296][ T3313] bridge_slave_1: entered promiscuous mode
[   36.066448][ T3321] team0: Port device team_slave_0 added
[   36.073409][ T3322] team0: Port device team_slave_0 added
[   36.084721][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.109336][ T3321] team0: Port device team_slave_1 added
[   36.120253][ T3322] team0: Port device team_slave_1 added
[   36.128025][ T3314] hsr_slave_0: entered promiscuous mode
[   36.134060][ T3314] hsr_slave_1: entered promiscuous mode
[   36.141006][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.152486][ T3317] hsr_slave_0: entered promiscuous mode
[   36.158683][ T3317] hsr_slave_1: entered promiscuous mode
[   36.164506][ T3317] debugfs: 'hsr0' already exists in 'hsr'
[   36.170224][ T3317] Cannot create hsr debugfs directory
[   36.201241][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.208324][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   36.234234][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.250425][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.257430][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   36.283366][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.294549][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.301497][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   36.327395][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.338639][ T3313] team0: Port device team_slave_0 added
[   36.344704][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.351724][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   36.377684][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.397153][ T3313] team0: Port device team_slave_1 added
[   36.432125][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.439216][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   36.465189][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.492951][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.499940][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   36.525860][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.548676][ T3321] hsr_slave_0: entered promiscuous mode
[   36.554897][ T3321] hsr_slave_1: entered promiscuous mode
[   36.560635][ T3321] debugfs: 'hsr0' already exists in 'hsr'
[   36.566418][ T3321] Cannot create hsr debugfs directory
[   36.590570][ T3322] hsr_slave_0: entered promiscuous mode
[   36.596751][ T3322] hsr_slave_1: entered promiscuous mode
[   36.602468][ T3322] debugfs: 'hsr0' already exists in 'hsr'
[   36.608224][ T3322] Cannot create hsr debugfs directory
[   36.644473][ T3313] hsr_slave_0: entered promiscuous mode
[   36.650627][ T3313] hsr_slave_1: entered promiscuous mode
[   36.656722][ T3313] debugfs: 'hsr0' already exists in 'hsr'
[   36.662529][ T3313] Cannot create hsr debugfs directory
[   36.805792][ T3314] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   36.824954][ T3314] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   36.836198][ T3314] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   36.847265][ T3314] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   36.869077][ T3317] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   36.879795][ T3317] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   36.888786][ T3317] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   36.897485][ T3317] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   36.936296][ T3321] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   36.949624][ T3321] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   36.959294][ T3321] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   36.970584][ T3321] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   36.997855][ T3313] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   37.014807][ T3313] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   37.026273][ T3313] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   37.035491][ T3313] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   37.052609][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.074151][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.090020][ T3322] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   37.098962][ T3322] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   37.108629][ T3317] 8021q: adding VLAN 0 to HW filter on device team0
[   37.121000][ T3322] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   37.132043][ T3322] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   37.142044][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.149143][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.160535][ T3314] 8021q: adding VLAN 0 to HW filter on device team0
[   37.174463][  T396] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.181669][  T396] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.195380][ T2820] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.202439][ T2820] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.237850][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.244918][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.297566][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.313637][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.321361][ T3322] 8021q: adding VLAN 0 to HW filter on device team0
[   37.340704][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.354330][ T3313] 8021q: adding VLAN 0 to HW filter on device team0
[   37.370817][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.377912][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.387591][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.394807][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.408712][ T3321] 8021q: adding VLAN 0 to HW filter on device team0
[   37.421562][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.431556][  T396] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.438781][  T396] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.447595][  T396] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.454690][  T396] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.467244][  T396] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.474373][  T396] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.494187][  T134] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.501246][  T134] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.543360][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.555884][ T3322] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   37.566368][ T3322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   37.579565][ T3321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   37.685741][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.730421][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.739367][ T3317] veth0_vlan: entered promiscuous mode
[   37.775341][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.786995][ T3317] veth1_vlan: entered promiscuous mode
[   37.818013][ T3317] veth0_macvtap: entered promiscuous mode
[   37.829738][ T3317] veth1_macvtap: entered promiscuous mode
[   37.860281][ T3314] veth0_vlan: entered promiscuous mode
[   37.875336][ T3314] veth1_vlan: entered promiscuous mode
[   37.885312][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0
[   37.901507][ T3313] veth0_vlan: entered promiscuous mode
[   37.919315][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1
[   37.936725][ T3321] veth0_vlan: entered promiscuous mode
[   37.945950][ T3313] veth1_vlan: entered promiscuous mode
[   37.956551][  T396] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   37.990032][  T396] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   37.999051][  T396] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.007981][  T396] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.016980][ T3322] veth0_vlan: entered promiscuous mode
[   38.023965][ T3321] veth1_vlan: entered promiscuous mode
[   38.031241][ T3322] veth1_vlan: entered promiscuous mode
[   38.037613][ T3313] veth0_macvtap: entered promiscuous mode
[   38.044171][ T3314] veth0_macvtap: entered promiscuous mode
[   38.051574][ T3314] veth1_macvtap: entered promiscuous mode
[   38.068443][ T3313] veth1_macvtap: entered promiscuous mode
[   38.079292][ T3321] veth0_macvtap: entered promiscuous mode
[   38.089173][ T3317] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   38.090382][ T3322] veth0_macvtap: entered promiscuous mode
[   38.124382][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.134193][ T3322] veth1_macvtap: entered promiscuous mode
[   38.142045][ T3321] veth1_macvtap: entered promiscuous mode
[   38.160080][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.168615][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.169551][ T3483] netlink: 'syz.0.1': attribute type 1 has an invalid length.
[   38.185584][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.195331][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.204412][ T3483] Zero length message leads to an empty skb
[   38.207047][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.224162][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.234194][ T2820] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.250176][  T134] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.265638][  T134] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.274744][ T3484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'.
[   38.290982][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.298696][  T134] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.340846][  T134] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.380633][  T134] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.430406][  T134] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.442764][   T29] kauditd_printk_skb: 39 callbacks suppressed
[   38.442778][   T29] audit: type=1400 audit(1762316248.582:111): avc:  denied  { ioctl } for  pid=3486 comm="syz.4.5" path="socket:[4581]" dev="sockfs" ino=4581 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   38.473306][   T29] audit: type=1400 audit(1762316248.582:112): avc:  denied  { bind } for  pid=3486 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   38.474292][  T396] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.579652][   T29] audit: type=1400 audit(1762316248.602:113): avc:  denied  { perfmon } for  pid=3497 comm="syz.2.3" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   38.600332][   T29] audit: type=1326 audit(1762316248.662:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3504 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b44ebf6c9 code=0x7ffc0000
[   38.623451][   T29] audit: type=1326 audit(1762316248.662:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3504 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b44ebf6c9 code=0x7ffc0000
[   38.636863][ T2820] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.646522][   T29] audit: type=1400 audit(1762316248.662:116): avc:  denied  { open } for  pid=3501 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   38.655626][ T2820] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.674155][   T29] audit: type=1400 audit(1762316248.662:117): avc:  denied  { kernel } for  pid=3501 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   38.683736][ T2820] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.702136][   T29] audit: type=1326 audit(1762316248.662:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3504 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b44ebf6c9 code=0x7ffc0000
[   38.711470][ T2820] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.733915][   T29] audit: type=1326 audit(1762316248.662:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3504 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b44ebf6c9 code=0x7ffc0000
[   38.743816][ T3456] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.765575][   T29] audit: type=1326 audit(1762316248.662:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3504 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f8b44ebf6c9 code=0x7ffc0000
[   38.779749][ T3456] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.818960][ T3503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'.
[   38.838048][ T3456] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.849825][ T3503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'.
[   38.914527][ T3510] loop0: detected capacity change from 0 to 256
[   38.933222][ T3510] FAT-fs (loop0): Directory bread(block 64) failed
[   38.939793][ T3510] FAT-fs (loop0): Directory bread(block 65) failed
[   38.946521][ T3510] FAT-fs (loop0): Directory bread(block 66) failed
[   38.953087][ T3510] FAT-fs (loop0): Directory bread(block 67) failed
[   38.959698][ T3510] FAT-fs (loop0): Directory bread(block 68) failed
[   38.966238][ T3510] FAT-fs (loop0): Directory bread(block 69) failed
[   38.972828][ T3510] FAT-fs (loop0): Directory bread(block 70) failed
[   38.979373][ T3510] FAT-fs (loop0): Directory bread(block 71) failed
[   38.985951][ T3510] FAT-fs (loop0): Directory bread(block 72) failed
[   38.992520][ T3510] FAT-fs (loop0): Directory bread(block 73) failed
[   39.270501][ T3456] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.285859][ T3516] loop1: detected capacity change from 0 to 1024
[   39.292470][ T3516] =======================================================
[   39.292470][ T3516] WARNING: The mand mount option has been deprecated and
[   39.292470][ T3516]          and is ignored by this kernel. Remove the mand
[   39.292470][ T3516]          option from the mount to silence this warning.
[   39.292470][ T3516] =======================================================
[   39.348768][ T3516] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.463361][ T3517] SELinux: failed to load policy
[   39.524934][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.585109][ T3536] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   39.674648][ T3543] netlink: 112 bytes leftover after parsing attributes in process `syz.1.17'.
[   39.815651][ T3533] loop4: detected capacity change from 0 to 1024
[   39.826884][ T3533] EXT4-fs: Ignoring removed nobh option
[   39.832493][ T3533] EXT4-fs: Ignoring removed nobh option
[   39.925597][ T3554] loop3: detected capacity change from 0 to 1024
[   39.952044][ T3555] loop1: detected capacity change from 0 to 256
[   39.965794][ T3533] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[   39.989674][ T3555] FAT-fs (loop1): Directory bread(block 64) failed
[   39.996347][ T3555] FAT-fs (loop1): Directory bread(block 65) failed
[   40.002895][ T3555] FAT-fs (loop1): Directory bread(block 66) failed
[   40.009422][ T3555] FAT-fs (loop1): Directory bread(block 67) failed
[   40.016018][ T3555] FAT-fs (loop1): Directory bread(block 68) failed
[   40.022533][ T3555] FAT-fs (loop1): Directory bread(block 69) failed
[   40.029078][ T3555] FAT-fs (loop1): Directory bread(block 70) failed
[   40.035648][ T3555] FAT-fs (loop1): Directory bread(block 71) failed
[   40.042174][ T3555] FAT-fs (loop1): Directory bread(block 72) failed
[   40.048724][ T3555] FAT-fs (loop1): Directory bread(block 73) failed
[   40.141966][ T3554] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.190169][ T3533] EXT4-fs error (device loop4): ext4_get_journal_inode:5808: comm syz.4.15: inode #4294967295: comm syz.4.15: iget: illegal inode #
[   40.256171][ T3559] netlink: 'syz.2.22': attribute type 1 has an invalid length.
[   40.271966][ T3533] EXT4-fs (loop4): no journal found
[   40.277307][ T3533] EXT4-fs (loop4): can't get journal size
[   40.302837][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.316641][ T3533] EXT4-fs (loop4): failed to initialize system zone (-22)
[   40.317651][ T3559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22'.
[   40.341242][ T3533] EXT4-fs (loop4): mount failed
[   40.707376][ T3579] loop3: detected capacity change from 0 to 256
[   40.730357][ T3579] FAT-fs (loop3): Directory bread(block 64) failed
[   40.737036][ T3579] FAT-fs (loop3): Directory bread(block 65) failed
[   40.743613][ T3579] FAT-fs (loop3): Directory bread(block 66) failed
[   40.750207][ T3579] FAT-fs (loop3): Directory bread(block 67) failed
[   40.756754][ T3579] FAT-fs (loop3): Directory bread(block 68) failed
[   40.763368][ T3579] FAT-fs (loop3): Directory bread(block 69) failed
[   40.769982][ T3579] FAT-fs (loop3): Directory bread(block 70) failed
[   40.776518][ T3579] FAT-fs (loop3): Directory bread(block 71) failed
[   40.783207][ T3579] FAT-fs (loop3): Directory bread(block 72) failed
[   40.789733][ T3579] FAT-fs (loop3): Directory bread(block 73) failed
[   41.198596][ T3588] netlink: 112 bytes leftover after parsing attributes in process `syz.2.31'.
[   41.371057][ T3601] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   41.875579][ T3614] bridge1: entered promiscuous mode
[   41.880854][ T3614] bridge1: entered allmulticast mode
[   41.977976][ T3614] team0: Port device bridge1 added
[   42.066570][ T3618] bridge0: port 3(team0) entered blocking state
[   42.072994][ T3618] bridge0: port 3(team0) entered disabled state
[   42.096328][ T3618] team0: entered allmulticast mode
[   42.101563][ T3618] team_slave_0: entered allmulticast mode
[   42.107367][ T3618] team_slave_1: entered allmulticast mode
[   42.130778][ T3618] team0: entered promiscuous mode
[   42.135872][ T3618] team_slave_0: entered promiscuous mode
[   42.141685][ T3618] team_slave_1: entered promiscuous mode
[   42.172894][ T3618] bridge0: port 3(team0) entered blocking state
[   42.179315][ T3618] bridge0: port 3(team0) entered forwarding state
[   42.488569][ T3630] loop4: detected capacity change from 0 to 256
[   42.621792][ T3630] FAT-fs (loop4): Directory bread(block 64) failed
[   42.680160][ T3630] FAT-fs (loop4): Directory bread(block 65) failed
[   42.730207][ T3630] FAT-fs (loop4): Directory bread(block 66) failed
[   42.750016][ T3641] loop1: detected capacity change from 0 to 256
[   42.777095][ T3630] FAT-fs (loop4): Directory bread(block 67) failed
[   42.918741][ T3630] FAT-fs (loop4): Directory bread(block 68) failed
[   42.925349][ T3630] FAT-fs (loop4): Directory bread(block 69) failed
[   42.932015][ T3630] FAT-fs (loop4): Directory bread(block 70) failed
[   42.938610][ T3630] FAT-fs (loop4): Directory bread(block 71) failed
[   42.950739][ T3630] FAT-fs (loop4): Directory bread(block 72) failed
[   43.015673][ T3650] loop0: detected capacity change from 0 to 512
[   43.037560][ T3650] EXT4-fs (loop0): external journal device major/minor numbers have changed
[   43.046405][ T3650] EXT4-fs (loop0): failed to open journal device unknown-block(8,0) -16
[   43.057958][ T3630] FAT-fs (loop4): Directory bread(block 73) failed
[   43.080391][ T3652] netlink: 112 bytes leftover after parsing attributes in process `syz.2.50'.
[   43.094866][ T3641] syz.1.46: attempt to access beyond end of device
[   43.094866][ T3641] loop1: rw=2049, sector=256, nr_sectors = 68 limit=256
[   43.200322][ T3654] syz.1.46: attempt to access beyond end of device
[   43.200322][ T3654] loop1: rw=2049, sector=260, nr_sectors = 4 limit=256
[   43.214053][ T3654] Buffer I/O error on dev loop1, logical block 65, lost async page write
[   43.334833][ T3654] syz.1.46: attempt to access beyond end of device
[   43.334833][ T3654] loop1: rw=2049, sector=264, nr_sectors = 32 limit=256
[   45.124968][ T3732] loop0: detected capacity change from 0 to 512
[   45.135757][ T3732] EXT4-fs (loop0): external journal device major/minor numbers have changed
[   45.147288][ T3732] EXT4-fs (loop0): failed to open journal device unknown-block(8,0) -16
[   47.071790][   T37] team_slave_0 (unregistering): left promiscuous mode
[   47.078739][   T37] team_slave_0 (unregistering): left allmulticast mode
[   47.102992][   T37] team0: Port device team_slave_0 removed
[   47.238507][   T29] kauditd_printk_skb: 158 callbacks suppressed
[   47.238549][   T29] audit: type=1326 audit(1762316257.372:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.0.103" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b44ebf6c9 code=0x0
[   48.727417][   T29] audit: type=1326 audit(1762316258.862:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3889 comm="syz.1.131" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e1db1f6c9 code=0x0
[   49.256319][ T3917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.139'.
[   50.302382][   T29] audit: type=1326 audit(1762316260.392:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3979 comm="syz.2.159" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe803df6c9 code=0x0
[   51.864963][ T4038] loop2: detected capacity change from 0 to 512
[   51.884158][ T4038] EXT4-fs (loop2): external journal device major/minor numbers have changed
[   51.892902][ T4038] EXT4-fs (loop2): failed to open journal device unknown-block(8,0) -16
[   52.154326][   T29] audit: type=1326 audit(1762316262.292:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4047 comm="syz.3.182" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2a9e5f6c9 code=0x0
[   52.236101][ T4055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.185'.
[   53.450782][ T4095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.197'.
[   53.527511][ T4097] loop3: detected capacity change from 0 to 512
[   53.535276][ T4097] EXT4-fs (loop3): external journal device major/minor numbers have changed
[   53.544094][ T4097] EXT4-fs (loop3): failed to open journal device unknown-block(8,0) -16
[   53.693329][   T29] audit: type=1326 audit(1762316263.782:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4099 comm="syz.4.199" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f47484bf6c9 code=0x0
[   53.871712][ T4106] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   54.082710][   T29] audit: type=1326 audit(1762316264.192:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4111 comm="syz.2.203" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe803df6c9 code=0x0
[   55.414386][   T29] audit: type=1326 audit(1762316265.552:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4170 comm="syz.1.220" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e1db1f6c9 code=0x0
[   55.531393][ T4177] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   56.129697][   T29] audit: type=1326 audit(1762316266.222:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4186 comm="syz.2.226" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe803df6c9 code=0x0
[   57.154354][   T29] audit: type=1326 audit(1762316267.292:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4245 comm="syz.2.244" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe803df6c9 code=0x0
[   57.179919][   T29] audit: type=1326 audit(1762316267.312:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4242 comm="syz.4.243" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f47484bf6c9 code=0x0
[   57.271400][ T4251] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   57.946850][ T4280] netlink: 'syz.4.254': attribute type 1 has an invalid length.
[   57.990616][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv1
[   58.006063][ T4280] bond1: (slave batadv1): making interface the new active one
[   58.016374][ T4280] bond1: (slave batadv1): Enslaving as an active interface with an up link
[   58.055278][ T4280] netlink: 12 bytes leftover after parsing attributes in process `syz.4.254'.
[   58.095378][ T4280] bond1 (unregistering): (slave batadv1): Releasing active interface
[   58.105975][ T4280] bond1 (unregistering): Released all slaves
[   58.905146][   T29] audit: type=1326 audit(1762316269.032:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4326 comm="syz.4.265" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f47484bf6c9 code=0x0
[   59.388245][   T29] audit: type=1326 audit(1762316269.522:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4348 comm="syz.1.271" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e1db1f6c9 code=0x0
[   59.523422][ T4352] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   59.716567][ T4370] netlink: 'syz.2.276': attribute type 1 has an invalid length.
[   59.743710][ T4370] 8021q: adding VLAN 0 to HW filter on device batadv2
[   59.752122][ T4370] bond1: (slave batadv2): making interface the new active one
[   59.765096][ T4370] bond1: (slave batadv2): Enslaving as an active interface with an up link
[   59.778003][ T4370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.276'.
[   59.796301][ T4370] bond1 (unregistering): (slave batadv2): Releasing active interface
[   59.807518][ T4370] bond1 (unregistering): Released all slaves
[   60.443576][   T29] audit: type=1326 audit(1762316270.582:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4404 comm="syz.1.284" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e1db1f6c9 code=0x0
[   60.854428][ T4416] loop3: detected capacity change from 0 to 1024
[   60.884913][ T4416] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   60.926631][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.644640][ T4469] loop4: detected capacity change from 0 to 1024
[   61.682523][ T4469] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   61.735820][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.837324][   T29] audit: type=1400 audit(1762316272.312:292): avc:  denied  { write } for  pid=4474 comm="syz.0.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   63.482694][   T29] audit: type=1326 audit(1762316273.612:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4510 comm="syz.1.307" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e1db1f6c9 code=0x0
[   64.440123][ T4534] loop1: detected capacity change from 0 to 1024
[   64.878827][ T4534] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   65.484927][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.885840][   T29] audit: type=1326 audit(1762316276.022:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4563 comm="syz.3.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a9e5f6c9 code=0x7ffc0000
[   65.909892][   T29] audit: type=1326 audit(1762316276.022:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4563 comm="syz.3.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2a9e5f6c9 code=0x7ffc0000
[   65.933291][   T29] audit: type=1326 audit(1762316276.022:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4563 comm="syz.3.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a9e5f6c9 code=0x7ffc0000
[   65.956555][   T29] audit: type=1326 audit(1762316276.022:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4563 comm="syz.3.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7ff2a9e5f6c9 code=0x7ffc0000
[   65.979926][   T29] audit: type=1326 audit(1762316276.022:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4563 comm="syz.3.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a9e5f6c9 code=0x7ffc0000
[   66.003184][   T29] audit: type=1326 audit(1762316276.022:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4563 comm="syz.3.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7ff2a9e5f6c9 code=0x7ffc0000
[   66.026523][   T29] audit: type=1326 audit(1762316276.022:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4563 comm="syz.3.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a9e5f6c9 code=0x7ffc0000
[   66.049856][   T29] audit: type=1326 audit(1762316276.022:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4563 comm="syz.3.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a9e5f6c9 code=0x7ffc0000
[   66.073135][   T29] audit: type=1326 audit(1762316276.042:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4563 comm="syz.3.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff2a9e5f6c9 code=0x7ffc0000
[   66.096663][   T29] audit: type=1326 audit(1762316276.042:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4563 comm="syz.3.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a9e5f6c9 code=0x7ffc0000
[   66.234009][ T4573] loop3: detected capacity change from 0 to 256
[   66.653990][ T4573] FAT-fs (loop3): Directory bread(block 64) failed
[   66.660572][ T4573] FAT-fs (loop3): Directory bread(block 65) failed
[   66.667211][ T4573] FAT-fs (loop3): Directory bread(block 66) failed
[   66.673812][ T4573] FAT-fs (loop3): Directory bread(block 67) failed
[   66.680390][ T4573] FAT-fs (loop3): Directory bread(block 68) failed
[   66.686957][ T4573] FAT-fs (loop3): Directory bread(block 69) failed
[   66.693503][ T4573] FAT-fs (loop3): Directory bread(block 70) failed
[   66.700053][ T4573] FAT-fs (loop3): Directory bread(block 71) failed
[   66.706589][ T4573] FAT-fs (loop3): Directory bread(block 72) failed
[   66.713171][ T4573] FAT-fs (loop3): Directory bread(block 73) failed
[   67.075225][ T4581] loop3: detected capacity change from 0 to 1024
[   67.977321][ T4581] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.042042][ T4597] loop0: detected capacity change from 0 to 1024
[   68.109989][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.293943][ T4597] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.482138][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.600628][ T4620] netlink: 'syz.2.335': attribute type 1 has an invalid length.
[   68.713208][ T4622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.335'.
[   68.887848][ T4622] bond1 (unregistering): Released all slaves
[   68.992653][ T4634] loop0: detected capacity change from 0 to 256
[   69.136991][ T4634] FAT-fs (loop0): Directory bread(block 64) failed
[   69.143570][ T4634] FAT-fs (loop0): Directory bread(block 65) failed
[   69.150200][ T4634] FAT-fs (loop0): Directory bread(block 66) failed
[   69.156745][ T4634] FAT-fs (loop0): Directory bread(block 67) failed
[   69.163365][ T4634] FAT-fs (loop0): Directory bread(block 68) failed
[   69.169953][ T4634] FAT-fs (loop0): Directory bread(block 69) failed
[   69.176563][ T4634] FAT-fs (loop0): Directory bread(block 70) failed
[   69.183100][ T4634] FAT-fs (loop0): Directory bread(block 71) failed
[   69.189659][ T4634] FAT-fs (loop0): Directory bread(block 72) failed
[   69.196268][ T4634] FAT-fs (loop0): Directory bread(block 73) failed
[   69.528634][ T4635] loop4: detected capacity change from 0 to 256
[   69.591433][ T4635] FAT-fs (loop4): Directory bread(block 64) failed
[   69.651171][ T4635] FAT-fs (loop4): Directory bread(block 65) failed
[   69.710005][ T4635] FAT-fs (loop4): Directory bread(block 66) failed
[   69.865441][ T4635] FAT-fs (loop4): Directory bread(block 67) failed
[   70.591087][ T4635] FAT-fs (loop4): Directory bread(block 68) failed
[   70.741370][ T4635] FAT-fs (loop4): Directory bread(block 69) failed
[   70.748195][ T4635] FAT-fs (loop4): Directory bread(block 70) failed
[   70.756346][ T4635] FAT-fs (loop4): Directory bread(block 71) failed
[   70.763171][ T4635] FAT-fs (loop4): Directory bread(block 72) failed
[   70.769810][ T4635] FAT-fs (loop4): Directory bread(block 73) failed
[   71.266560][   T29] kauditd_printk_skb: 64 callbacks suppressed
[   71.266574][   T29] audit: type=1326 audit(1762316281.402:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4663 comm="syz.0.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b44ebf6c9 code=0x7ffc0000
[   71.512223][ T4666] loop0: detected capacity change from 0 to 256
[   71.531647][ T4666] FAT-fs (loop0): Directory bread(block 64) failed
[   71.538291][ T4666] FAT-fs (loop0): Directory bread(block 65) failed
[   71.544861][ T4666] FAT-fs (loop0): Directory bread(block 66) failed
[   71.551443][ T4666] FAT-fs (loop0): Directory bread(block 67) failed
[   71.558033][ T4666] FAT-fs (loop0): Directory bread(block 68) failed
[   71.564580][ T4666] FAT-fs (loop0): Directory bread(block 69) failed
[   71.571136][ T4666] FAT-fs (loop0): Directory bread(block 70) failed
[   71.577672][ T4666] FAT-fs (loop0): Directory bread(block 71) failed
[   71.584276][ T4666] FAT-fs (loop0): Directory bread(block 72) failed
[   71.590812][ T4666] FAT-fs (loop0): Directory bread(block 73) failed
[   71.773563][   T29] audit: type=1326 audit(1762316281.432:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4663 comm="syz.0.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b44ebf6c9 code=0x7ffc0000
[   71.796908][   T29] audit: type=1326 audit(1762316281.432:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4663 comm="syz.0.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b44ebf6c9 code=0x7ffc0000
[   71.821058][   T29] audit: type=1326 audit(1762316281.442:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4663 comm="syz.0.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f8b44ebf6c9 code=0x7ffc0000
[   71.844606][   T29] audit: type=1326 audit(1762316281.442:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4663 comm="syz.0.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b44ebf6c9 code=0x7ffc0000
[   71.868089][   T29] audit: type=1326 audit(1762316281.442:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4663 comm="syz.0.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f8b44ebf6c9 code=0x7ffc0000
[   71.884610][ T4668] loop2: detected capacity change from 0 to 1024
[   71.891455][   T29] audit: type=1326 audit(1762316281.442:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4663 comm="syz.0.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b44ebf6c9 code=0x7ffc0000
[   71.921210][   T29] audit: type=1326 audit(1762316281.442:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4663 comm="syz.0.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b44ebf6c9 code=0x7ffc0000
[   71.944549][   T29] audit: type=1326 audit(1762316281.442:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4663 comm="syz.0.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8b44ebf6c9 code=0x7ffc0000
[   71.967718][   T29] audit: type=1326 audit(1762316281.442:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4663 comm="syz.0.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b44ebf6c9 code=0x7ffc0000
[   72.017573][ T4668] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.060387][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.153847][ T4677] loop2: detected capacity change from 0 to 1024
[   72.193868][ T4677] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.324881][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.367050][ T4684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.349'.
[   73.269202][ T4706] netlink: 'syz.0.355': attribute type 1 has an invalid length.
[   73.309429][ T4706] 8021q: adding VLAN 0 to HW filter on device batadv1
[   73.366936][ T4711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.355'.
[   73.412584][ T4706] bond1: (slave batadv1): making interface the new active one
[   73.444513][ T4706] bond1: (slave batadv1): Enslaving as an active interface with an up link
[   73.602567][ T4712] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   73.621113][ T4711] bond1 (unregistering): (slave batadv1): Releasing active interface
[   73.631022][ T4711] bond1 (unregistering): Released all slaves
[   73.684827][ T4706] syz.0.355 (4706) used greatest stack depth: 10680 bytes left
[   73.753907][ T4727] netlink: 12 bytes leftover after parsing attributes in process `syz.0.359'.
[   73.822841][ T4730] netlink: 'syz.0.360': attribute type 1 has an invalid length.
[   73.835499][ T4730] netlink: 12 bytes leftover after parsing attributes in process `syz.0.360'.
[   73.919234][ T4734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.361'.
[   74.788519][ T4754] loop4: detected capacity change from 0 to 1024
[   74.797682][ T4754] EXT4-fs: Ignoring removed nobh option
[   74.803392][ T4754] EXT4-fs: Ignoring removed nobh option
[   74.819958][ T4754] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[   74.972220][ T4754] EXT4-fs error (device loop4): ext4_get_journal_inode:5808: comm syz.4.368: inode #4294967295: comm syz.4.368: iget: illegal inode #
[   75.006043][ T4754] EXT4-fs (loop4): no journal found
[   75.011267][ T4754] EXT4-fs (loop4): can't get journal size
[   75.110407][ T4764] netlink: 'syz.2.370': attribute type 1 has an invalid length.
[   75.275759][ T4754] EXT4-fs (loop4): failed to initialize system zone (-22)
[   75.283548][ T4767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.370'.
[   75.332451][ T4754] EXT4-fs (loop4): mount failed
[   75.430027][ T4767] bond1 (unregistering): Released all slaves
[   75.527726][ T4771] netlink: 'syz.3.371': attribute type 1 has an invalid length.
[   75.586804][ T4771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.371'.
[   75.602687][ T4773] netlink: 12 bytes leftover after parsing attributes in process `syz.4.372'.
[   75.687079][ T4783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.374'.
[   75.797609][ T4789] loop4: detected capacity change from 0 to 1024
[   75.895452][ T4789] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   75.989546][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.228346][ T4815] loop1: detected capacity change from 0 to 1024
[   76.235326][ T4815] EXT4-fs: Ignoring removed nobh option
[   76.240974][ T4815] EXT4-fs: Ignoring removed nobh option
[   76.280488][   T29] kauditd_printk_skb: 241 callbacks suppressed
[   76.280505][   T29] audit: type=1326 audit(1762316286.412:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4792 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efe803d6567 code=0x7ffc0000
[   76.309990][   T29] audit: type=1326 audit(1762316286.412:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4792 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efe8037b779 code=0x7ffc0000
[   76.333212][   T29] audit: type=1326 audit(1762316286.412:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4792 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7efe803df6c9 code=0x7ffc0000
[   76.423338][ T4815] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[   76.467594][ T4815] EXT4-fs error (device loop1): ext4_get_journal_inode:5808: comm syz.1.383: inode #4294967295: comm syz.1.383: iget: illegal inode #
[   76.538399][ T4815] EXT4-fs (loop1): no journal found
[   76.543678][ T4815] EXT4-fs (loop1): can't get journal size
[   76.554300][   T29] audit: type=1326 audit(1762316286.502:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4792 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efe803d6567 code=0x7ffc0000
[   76.577581][   T29] audit: type=1326 audit(1762316286.502:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4792 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efe8037b779 code=0x7ffc0000
[   76.600721][   T29] audit: type=1326 audit(1762316286.502:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4792 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7efe803df6c9 code=0x7ffc0000
[   76.623800][   T29] audit: type=1326 audit(1762316286.502:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4792 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efe803d6567 code=0x7ffc0000
[   76.647014][   T29] audit: type=1326 audit(1762316286.502:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4792 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efe8037b779 code=0x7ffc0000
[   76.670171][   T29] audit: type=1326 audit(1762316286.502:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4792 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7efe803df6c9 code=0x7ffc0000
[   76.693239][   T29] audit: type=1326 audit(1762316286.502:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4794 comm="syz.3.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff2a9e56567 code=0x7ffc0000
[   76.942197][ T4815] EXT4-fs (loop1): failed to initialize system zone (-22)
[   76.977304][ T4815] EXT4-fs (loop1): mount failed
[   76.993276][ T4825] netlink: 'syz.0.385': attribute type 1 has an invalid length.
[   77.001622][ T4824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.384'.
[   77.142413][ T4832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.387'.
[   77.174049][ T4825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.385'.
[   77.230502][ T4829] 8021q: adding VLAN 0 to HW filter on device batadv4
[   77.344232][ T4839] netlink: 'syz.1.389': attribute type 1 has an invalid length.
[   77.356624][ T4829] bond1: (slave batadv4): making interface the new active one
[   77.451785][ T4829] bond1: (slave batadv4): Enslaving as an active interface with an up link
[   77.560724][ T4825] bond1 (unregistering): (slave batadv4): Releasing active interface
[   77.581951][ T4825] bond1 (unregistering): Released all slaves
[   78.475242][ T4865] loop2: detected capacity change from 0 to 256
[   78.775195][ T4866] loop1: detected capacity change from 0 to 256
[   79.876854][ T4865] FAT-fs (loop2): Directory bread(block 64) failed
[   79.877399][ T4866] FAT-fs (loop1): Directory bread(block 64) failed
[   79.883499][ T4865] FAT-fs (loop2): Directory bread(block 65) failed
[   79.883534][ T4865] FAT-fs (loop2): Directory bread(block 66) failed
[   79.883555][ T4865] FAT-fs (loop2): Directory bread(block 67) failed
[   79.883583][ T4865] FAT-fs (loop2): Directory bread(block 68) failed
[   79.883639][ T4865] FAT-fs (loop2): Directory bread(block 69) failed
[   79.883670][ T4865] FAT-fs (loop2): Directory bread(block 70) failed
[   79.890168][ T4866] FAT-fs (loop1): Directory bread(block 65) failed
[   79.896701][ T4865] FAT-fs (loop2): Directory bread(block 71) failed
[   79.903221][ T4866] FAT-fs (loop1): Directory bread(block 66) failed
[   79.911680][ T4865] FAT-fs (loop2): Directory bread(block 72) failed
[   79.916224][ T4866] FAT-fs (loop1): Directory bread(block 67) failed
[   79.922964][ T4865] FAT-fs (loop2): Directory bread(block 73) failed
[   79.929243][ T4866] FAT-fs (loop1): Directory bread(block 68) failed
[   79.975180][ T4866] FAT-fs (loop1): Directory bread(block 69) failed
[   79.981714][ T4866] FAT-fs (loop1): Directory bread(block 70) failed
[   79.988269][ T4866] FAT-fs (loop1): Directory bread(block 71) failed
[   79.994875][ T4866] FAT-fs (loop1): Directory bread(block 72) failed
[   80.001394][ T4866] FAT-fs (loop1): Directory bread(block 73) failed
[   81.767678][   T29] kauditd_printk_skb: 158 callbacks suppressed
[   81.767698][   T29] audit: type=1326 audit(1762316291.882:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.2.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe803df6c9 code=0x7ffc0000
[   81.797277][   T29] audit: type=1326 audit(1762316291.882:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.2.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe803df6c9 code=0x7ffc0000
[   81.820611][   T29] audit: type=1326 audit(1762316291.882:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4887 comm="syz.2.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efe80411f85 code=0x7ffc0000
[   81.843928][   T29] audit: type=1326 audit(1762316291.882:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.2.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7efe803df6c9 code=0x7ffc0000
[   81.867288][   T29] audit: type=1326 audit(1762316291.882:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.2.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe803df6c9 code=0x7ffc0000
[   81.890544][   T29] audit: type=1326 audit(1762316291.882:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.2.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe803df6c9 code=0x7ffc0000
[   81.913911][   T29] audit: type=1326 audit(1762316291.892:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.2.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efe803df6c9 code=0x7ffc0000
[   81.937169][   T29] audit: type=1326 audit(1762316291.892:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.2.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe803df6c9 code=0x7ffc0000
[   81.941633][ T4891] __nla_validate_parse: 1 callbacks suppressed
[   81.941649][ T4891] netlink: 12 bytes leftover after parsing attributes in process `syz.0.401'.
[   81.960614][   T29] audit: type=1326 audit(1762316291.892:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.2.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe803df6c9 code=0x7ffc0000
[   81.998828][   T29] audit: type=1326 audit(1762316291.892:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.2.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7efe803df6c9 code=0x7ffc0000
[   82.386247][ T4899] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   82.468140][ T4903] netlink: 'syz.0.404': attribute type 1 has an invalid length.
[   82.520280][ T4907] loop1: detected capacity change from 0 to 1024
[   82.554960][ T4907] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.569998][ T4903] 8021q: adding VLAN 0 to HW filter on device batadv6
[   82.582413][ T4903] bond1: (slave batadv6): making interface the new active one
[   82.635050][ T4916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.404'.
[   82.671704][ T4903] bond1: (slave batadv6): Enslaving as an active interface with an up link
[   82.697030][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.754393][ T4916] bond1 (unregistering): (slave batadv6): Releasing active interface
[   82.771360][ T4916] bond1 (unregistering): Released all slaves
[   83.160171][ T4928] loop0: detected capacity change from 0 to 256
[   83.786172][ T4928] FAT-fs (loop0): Directory bread(block 64) failed
[   83.792828][ T4928] FAT-fs (loop0): Directory bread(block 65) failed
[   83.799367][ T4928] FAT-fs (loop0): Directory bread(block 66) failed
[   83.805925][ T4928] FAT-fs (loop0): Directory bread(block 67) failed
[   83.812452][ T4928] FAT-fs (loop0): Directory bread(block 68) failed
[   83.819001][ T4928] FAT-fs (loop0): Directory bread(block 69) failed
[   83.825669][ T4928] FAT-fs (loop0): Directory bread(block 70) failed
[   83.832192][ T4928] FAT-fs (loop0): Directory bread(block 71) failed
[   83.838746][ T4928] FAT-fs (loop0): Directory bread(block 72) failed
[   83.845301][ T4928] FAT-fs (loop0): Directory bread(block 73) failed
[   84.149213][ T4944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.415'.
[   84.260669][ T4946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.414'.
[   84.848934][ T4948] SELinux: failed to load policy
[   85.163139][ T4961] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   85.391428][ T4972] loop0: detected capacity change from 0 to 1024
[   85.398153][ T4972] EXT4-fs: Ignoring removed nobh option
[   85.403810][ T4972] EXT4-fs: Ignoring removed nobh option
[   85.416546][ T4972] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[   85.475196][ T4972] EXT4-fs error (device loop0): ext4_get_journal_inode:5808: comm syz.0.417: inode #4294967295: comm syz.0.417: iget: illegal inode #
[   85.513214][ T4972] EXT4-fs (loop0): no journal found
[   85.518452][ T4972] EXT4-fs (loop0): can't get journal size
[   85.537986][ T4972] EXT4-fs (loop0): failed to initialize system zone (-22)
[   85.553823][ T4972] EXT4-fs (loop0): mount failed
[   86.116832][ T4985] loop2: detected capacity change from 0 to 1024
[   86.184842][ T4985] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   86.271717][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.345189][ T5002] netlink: 12 bytes leftover after parsing attributes in process `syz.2.428'.
[   86.384714][ T5004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.429'.
[   86.492908][ T5009] loop2: detected capacity change from 0 to 1024
[   86.526980][ T5010] SELinux: failed to load policy
[   86.646648][ T5009] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   86.703916][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.738990][ T5016] loop0: detected capacity change from 0 to 256
[   86.757136][ T5016] FAT-fs (loop0): Directory bread(block 64) failed
[   86.763798][ T5016] FAT-fs (loop0): Directory bread(block 65) failed
[   86.770391][ T5016] FAT-fs (loop0): Directory bread(block 66) failed
[   86.776959][ T5016] FAT-fs (loop0): Directory bread(block 67) failed
[   86.783660][ T5016] FAT-fs (loop0): Directory bread(block 68) failed
[   86.790298][ T5016] FAT-fs (loop0): Directory bread(block 69) failed
[   86.796977][ T5016] FAT-fs (loop0): Directory bread(block 70) failed
[   86.803633][ T5016] FAT-fs (loop0): Directory bread(block 71) failed
[   86.810275][ T5016] FAT-fs (loop0): Directory bread(block 72) failed
[   86.816831][ T5016] FAT-fs (loop0): Directory bread(block 73) failed
[   86.899834][   T29] kauditd_printk_skb: 1258 callbacks suppressed
[   86.899851][   T29] audit: type=1326 audit(1762316297.032:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.4.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f47484b6567 code=0x7ffc0000
[   87.584575][   T29] audit: type=1326 audit(1762316297.072:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.4.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f474845b779 code=0x7ffc0000
[   87.607971][   T29] audit: type=1326 audit(1762316297.072:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.4.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f47484b6567 code=0x7ffc0000
[   87.631223][   T29] audit: type=1326 audit(1762316297.072:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.4.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f474845b779 code=0x7ffc0000
[   87.654550][   T29] audit: type=1326 audit(1762316297.072:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.4.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f47484b6567 code=0x7ffc0000
[   87.677847][   T29] audit: type=1326 audit(1762316297.072:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.4.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f474845b779 code=0x7ffc0000
[   87.701437][   T29] audit: type=1326 audit(1762316297.072:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.4.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f47484bf6c9 code=0x7ffc0000
[   87.724738][   T29] audit: type=1326 audit(1762316297.072:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.4.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f47484b6567 code=0x7ffc0000
[   87.748271][   T29] audit: type=1326 audit(1762316297.072:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.4.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f474845b779 code=0x7ffc0000
[   87.771557][   T29] audit: type=1326 audit(1762316297.072:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.4.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f47484bf6c9 code=0x7ffc0000
[   87.995574][ T5024] loop2: detected capacity change from 0 to 1024
[   88.740946][ T5024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   89.295714][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.567825][ T5049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.442'.
[   89.594673][ T5032] loop4: detected capacity change from 0 to 1024
[   89.614552][ T5032] EXT4-fs: Ignoring removed nobh option
[   89.620202][ T5032] EXT4-fs: Ignoring removed nobh option
[   89.662445][ T5032] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[   89.692889][ T5032] EXT4-fs error (device loop4): ext4_get_journal_inode:5808: comm syz.4.438: inode #4294967295: comm syz.4.438: iget: illegal inode #
[   89.732803][ T5032] EXT4-fs (loop4): no journal found
[   89.738087][ T5032] EXT4-fs (loop4): can't get journal size
[   89.770669][ T5052] netlink: 'syz.3.443': attribute type 1 has an invalid length.
[   89.789540][ T5032] EXT4-fs (loop4): failed to initialize system zone (-22)
[   89.804715][ T5032] EXT4-fs (loop4): mount failed
[   89.815856][ T5052] netlink: 12 bytes leftover after parsing attributes in process `syz.3.443'.
[   89.966309][ T5055] loop3: detected capacity change from 0 to 1024
[   90.004071][ T5055] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   90.096342][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.010707][ T5111] netlink: 'syz.1.454': attribute type 1 has an invalid length.
[   92.026072][ T5111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.454'.
[   92.104941][   T29] kauditd_printk_skb: 1154 callbacks suppressed
[   92.104956][   T29] audit: type=1326 audit(1762316301.372:3219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5075 comm="syz.2.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efe803d6567 code=0x7ffc0000
[   92.134593][   T29] audit: type=1326 audit(1762316301.372:3220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5075 comm="syz.2.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efe8037b779 code=0x7ffc0000
[   92.157949][   T29] audit: type=1326 audit(1762316301.372:3221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5075 comm="syz.2.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7efe803df6c9 code=0x7ffc0000
[   92.181128][   T29] audit: type=1326 audit(1762316301.382:3222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5075 comm="syz.2.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efe803d6567 code=0x7ffc0000
[   92.204541][   T29] audit: type=1326 audit(1762316301.382:3223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5075 comm="syz.2.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efe8037b779 code=0x7ffc0000
[   92.227886][   T29] audit: type=1326 audit(1762316301.382:3224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5075 comm="syz.2.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7efe803df6c9 code=0x7ffc0000
[   92.251070][   T29] audit: type=1326 audit(1762316301.392:3225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5075 comm="syz.2.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efe803d6567 code=0x7ffc0000
[   92.274415][   T29] audit: type=1326 audit(1762316301.392:3226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5075 comm="syz.2.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efe8037b779 code=0x7ffc0000
[   92.297724][   T29] audit: type=1326 audit(1762316301.392:3227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5075 comm="syz.2.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7efe803df6c9 code=0x7ffc0000
[   92.320984][   T29] audit: type=1326 audit(1762316301.402:3228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5075 comm="syz.2.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efe803d6567 code=0x7ffc0000
[   92.419074][ T5119] netlink: 28 bytes leftover after parsing attributes in process `syz.1.455'.
[   92.676525][ T5118] atomic_op ffff88811c691d28 conn xmit_atomic 0000000000000000
[   92.691801][ T5118] loop0: detected capacity change from 0 to 1024
[   92.735489][ T5118] EXT4-fs: Ignoring removed nobh option
[   92.741193][ T5118] EXT4-fs: Ignoring removed nobh option
[   92.772352][ T5118] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[   92.792306][ T5118] EXT4-fs error (device loop0): ext4_get_journal_inode:5808: comm syz.0.457: inode #4294967295: comm syz.0.457: iget: illegal inode #
[   92.824404][ T5118] EXT4-fs (loop0): no journal found
[   92.829668][ T5118] EXT4-fs (loop0): can't get journal size
[   92.908185][ T5118] EXT4-fs (loop0): failed to initialize system zone (-22)
[   92.928548][ T5118] EXT4-fs (loop0): mount failed
[   93.016342][ T5139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.461'.
[   95.515952][ T5221] loop0: detected capacity change from 0 to 1024
[   95.532049][ T3004] ==================================================================
[   95.540177][ T3004] BUG: KCSAN: data-race in dentry_unlink_inode / step_into
[   95.541342][ T5221] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   95.547407][ T3004] 
[   95.547416][ T3004] write to 0xffff888119d44630 of 8 bytes by task 3300 on cpu 1:
[   95.547435][ T3004]  dentry_unlink_inode+0x65/0x260
[   95.547460][ T3004]  d_delete+0x164/0x180
[   95.547480][ T3004]  d_delete_notify+0x32/0x100
[   95.583271][ T3004]  vfs_unlink+0x30b/0x420
[   95.587619][ T3004]  do_unlinkat+0x24e/0x480
[   95.592058][ T3004]  __x64_sys_unlink+0x2e/0x40
[   95.596749][ T3004]  x64_sys_call+0x2dcf/0x3000
[   95.601500][ T3004]  do_syscall_64+0xd2/0x200
[   95.606027][ T3004]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.611931][ T3004] 
[   95.614259][ T3004] read to 0xffff888119d44630 of 8 bytes by task 3004 on cpu 0:
[   95.621806][ T3004]  step_into+0x122/0x7f0
[   95.626062][ T3004]  walk_component+0x162/0x220
[   95.630758][ T3004]  path_lookupat+0xfe/0x2a0
[   95.635298][ T3004]  filename_lookup+0x147/0x340
[   95.640084][ T3004]  do_readlinkat+0x7d/0x320
[   95.644596][ T3004]  __x64_sys_readlink+0x47/0x60
[   95.649466][ T3004]  x64_sys_call+0x28de/0x3000
[   95.654147][ T3004]  do_syscall_64+0xd2/0x200
[   95.658660][ T3004]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.664561][ T3004] 
[   95.666884][ T3004] value changed: 0xffff888123ea1aa8 -> 0x0000000000000000
[   95.673989][ T3004] 
[   95.676318][ T3004] Reported by Kernel Concurrency Sanitizer on:
[   95.682480][ T3004] CPU: 0 UID: 0 PID: 3004 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) 
[   95.691847][ T3004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   95.701901][ T3004] ==================================================================
[   95.731836][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.