last executing test programs:

15.652108306s ago: executing program 3 (id=4):
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffff, 0x5, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
move_mount(r3, &(0x7f0000000080)='./file0/file0\x00', r3, &(0x7f0000000300)='./file0/../file0\x00', 0x0)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
creat(&(0x7f0000000100)='./file0\x00', 0xc9028ba210c11f88)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
syz_emit_ethernet(0x9e, &(0x7f0000000780)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x0, 0x0, @private=0xa010102, {0x1d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@rr={0x7, 0xb, 0x0, [@broadcast, @broadcast]}, @end, @timestamp={0x44, 0x28, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0x0, [{@broadcast}, {@local}, {@private}, {@multicast1}, {@remote}]}]}}}}}}}, 0x0)

15.386934583s ago: executing program 3 (id=6):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0x66b9, 0x4000000002, 0xff80000000000000, 0x2, 0x2, 0xfffffffffffffffd, 0x7, 0x8, 0x0, 0x0, 0x0, 0x80000001, 0x45f, 0x2e38e559, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x6, 0x3})
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x691]}}, 0x5c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)

13.245581199s ago: executing program 3 (id=20):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095", @ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc2dfe590433f74cd, 0x4008031, 0xffffffffffffffff, 0x58f6a000)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000)=0x4, 0x4)
unshare(0x6a040000)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000000)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963748638e4b7797b7708522c646973636161642c757466383d312c6e66732c616d653d77696e39352c73686f72746e616d653d6c6f776572"], 0xfd, 0x2a0, &(0x7f0000000540)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0xec, 0xc, 0xe6, 0x40, 0x4856, 0x91, 0x9c97, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x5, 0x9, 0x40, 0x8, [{{0x9, 0x4, 0xd5, 0x0, 0x1, 0xff, 0xff, 0xff, 0x7, [], [{{0x9, 0x5, 0xa, 0x8, 0x3ff, 0x3, 0xfb, 0x3}}]}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x3, 0x8, 0x3, 0xff, 0x2}, 0x28, &(0x7f00000002c0)={0x5, 0xf, 0x28, 0x2, [@ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x7, 0x5, 0x9, 0x0, 0x5, [0x1fe5f30, 0xff003f, 0xff0000, 0xc000, 0xc00f]}]}, 0x2, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x280a}}, {0xf6, &(0x7f0000000b00)=@string={0xf6, 0x3, "60639cf4c8d9322581e10e377b655775f436112bceef03a1588ba916710044471c52191e7dbaa8b17b6f27352fbd67f9f66f8ce732cc976bf7b91b50a4cb2baf26a0b4a1640232c45dcaed01373b5521a161d794858feb315609f2dfb328d40de7c65918d7ca61b3f6d02e4c0c6d29b352bb26781fffa4b3ad1e3047dd71a1a7dfeb623c9b4797a85ce5c20a658de8055f15f204f24a3c213f9684c0eb6fd7b9a58832fcb99c4b653b9ca921ce3701fdce21475da17cadf375ea3f2ec3c0f323d77e66ff6ecbef788e54473ba58839560b6e8e99e0c49e3f6c3f783a47d5697eee19ba44cfe42511cfec8fbaeb1f63987d9b6c0e"}}]})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)

13.245346239s ago: executing program 32 (id=20):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095", @ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc2dfe590433f74cd, 0x4008031, 0xffffffffffffffff, 0x58f6a000)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000)=0x4, 0x4)
unshare(0x6a040000)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000000)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963748638e4b7797b7708522c646973636161642c757466383d312c6e66732c616d653d77696e39352c73686f72746e616d653d6c6f776572"], 0xfd, 0x2a0, &(0x7f0000000540)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0xec, 0xc, 0xe6, 0x40, 0x4856, 0x91, 0x9c97, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x5, 0x9, 0x40, 0x8, [{{0x9, 0x4, 0xd5, 0x0, 0x1, 0xff, 0xff, 0xff, 0x7, [], [{{0x9, 0x5, 0xa, 0x8, 0x3ff, 0x3, 0xfb, 0x3}}]}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x3, 0x8, 0x3, 0xff, 0x2}, 0x28, &(0x7f00000002c0)={0x5, 0xf, 0x28, 0x2, [@ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x7, 0x5, 0x9, 0x0, 0x5, [0x1fe5f30, 0xff003f, 0xff0000, 0xc000, 0xc00f]}]}, 0x2, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x280a}}, {0xf6, &(0x7f0000000b00)=@string={0xf6, 0x3, "60639cf4c8d9322581e10e377b655775f436112bceef03a1588ba916710044471c52191e7dbaa8b17b6f27352fbd67f9f66f8ce732cc976bf7b91b50a4cb2baf26a0b4a1640232c45dcaed01373b5521a161d794858feb315609f2dfb328d40de7c65918d7ca61b3f6d02e4c0c6d29b352bb26781fffa4b3ad1e3047dd71a1a7dfeb623c9b4797a85ce5c20a658de8055f15f204f24a3c213f9684c0eb6fd7b9a58832fcb99c4b653b9ca921ce3701fdce21475da17cadf375ea3f2ec3c0f323d77e66ff6ecbef788e54473ba58839560b6e8e99e0c49e3f6c3f783a47d5697eee19ba44cfe42511cfec8fbaeb1f63987d9b6c0e"}}]})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)

10.867898622s ago: executing program 1 (id=57):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="020000000400000008"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
syz_emit_ethernet(0xbe, &(0x7f00000008c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x500, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @local}, {0x4e20, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "6fdfa0d2001efbb3e29a4ac275ca11b984ff5def6ed2e4ea9bc0eabdd34c732b", "df23520b57e4c98679c7795a27c7bf3e7d776b600ba8d82d6ba417e219edd86fb708441efcf75fe803412dae374281c2", "5df814aa2e34e4f8a759805b993e2d69a8f476de686861a9850edbe3", {"2cfee9b9d5b0b2b171b51f9174963b0c", "e40ca7e0a7b4bbc4bc9720c876a57954"}}}}}}}, 0x0)

10.820297442s ago: executing program 1 (id=58):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x200000, &(0x7f0000000800)={[{@jqfmt_vfsv1}, {@min_batch_time={'min_batch_time', 0x3d, 0xc0}}, {@delalloc}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7c}}, {@nouid32}, {@usrquota}, {@grpquota}, {@sysvgroups}]}, 0x1, 0x573, &(0x7f0000001140)="$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")
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108)
syz_mount_image$ext4(&(0x7f0000000540)='ext3\x00', &(0x7f00000001c0)='./file2\x00', 0x90000, &(0x7f00000016c0)={[{@nogrpid}, {@sysvgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}, {@nodelalloc}, {@journal_path={'journal_path', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}, {@bsdgroups}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10)
unlink(&(0x7f0000000180)='./file1\x00')
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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")
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@allocspi={0x114, 0x16, 0x1, 0x0, 0x8000, {{{@in6=@mcast1, @in=@private, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private0, 0x4d4, 0x33}, @in=@multicast2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, 0x0, 0x8}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @srcaddr={0x14, 0xd, @in=@remote}]}, 0x114}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fchown(r5, 0x0, 0x0)
link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents64(r6, &(0x7f0000001a80)=""/4096, 0x1000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

10.569839229s ago: executing program 1 (id=59):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001e00)={'vlan1\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000006c0)={r2, 0x3, 0x6, @local}, 0x10)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10)
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000080)={r2, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$unix(0x1, 0x2, 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001ac0)={0x1b, 0x0, 0x0, 0xa3, 0x0, 0xffffffffffffffff, 0x400, '\x00', r2, 0xffffffffffffffff, 0x3, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001b40)={{0x1, 0x1, 0x18, <r7=>r1, {0x2}}, '\xe9\x1fq\x89Y\x1e\x923aK\x00'})
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001b80)={0x1b, 0x0, 0x0, 0xfffffff9, 0x0, 0xffffffffffffffff, 0x4, '\x00', r2, 0xffffffffffffffff, 0x4, 0x402, 0x4, 0x0, @void, @value, @void, @value}, 0x50)
r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r10, &(0x7f0000000400)='\xe9\x1fq\x89Y\x1e\x923aK/file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40)
r11 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r11, 0x402, 0x5)
bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0xb, 0x13, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffd}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xa}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0x9, 0x1000, &(0x7f0000000700)=""/4096, 0x41100, 0x21, '\x00', r2, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x3, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000001c00)=[r6, r1, r7, r8, r9, r10, r11], &(0x7f0000001c40)=[{0x4, 0x3, 0x3, 0x9}], 0x10, 0x6, @void, @value}, 0x94)
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0)
ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r13 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r12, &(0x7f00000003c0)=ANY=[], 0xfdef)
bind$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r14 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r14, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg(r14, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
readv(r5, &(0x7f0000000000)=[{&(0x7f0000000200)=""/150, 0x96}], 0x1)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000000000000000000050037002f00000008000200", @ANYRES32=r4], 0x40}, 0x4, 0x700000002000000, 0x0, 0x4000050}, 0x0)

9.334571305s ago: executing program 1 (id=74):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
move_mount(r0, &(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000000300)='./file0/../file0\x00', 0x0)

9.257026674s ago: executing program 1 (id=76):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)

8.970033301s ago: executing program 1 (id=79):
syz_emit_ethernet(0xbe, &(0x7f00000008c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x500, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @local}, {0x4e20, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "6fdfa0d2001efbb3e29a4ac275ca11b984ff5def6ed2e4ea9bc0eabdd34c732b", "df23520b57e4c98679c7795a27c7bf3e7d776b600ba8d82d6ba417e219edd86fb708441efcf75fe803412dae374281c2", "5df814aa2e34e4f8a759805b993e2d69a8f476de686861a9850edbe3", {"2cfee9b9d5b0b2b171b51f9174963b0c", "e40ca7e0a7b4bbc4bc9720c876a57954"}}}}}}}, 0x0)

8.925275091s ago: executing program 33 (id=79):
syz_emit_ethernet(0xbe, &(0x7f00000008c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x500, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @local}, {0x4e20, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "6fdfa0d2001efbb3e29a4ac275ca11b984ff5def6ed2e4ea9bc0eabdd34c732b", "df23520b57e4c98679c7795a27c7bf3e7d776b600ba8d82d6ba417e219edd86fb708441efcf75fe803412dae374281c2", "5df814aa2e34e4f8a759805b993e2d69a8f476de686861a9850edbe3", {"2cfee9b9d5b0b2b171b51f9174963b0c", "e40ca7e0a7b4bbc4bc9720c876a57954"}}}}}}}, 0x0)

8.065375191s ago: executing program 5 (id=91):
unshare(0x24060400)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
rt_sigprocmask(0x0, 0x0, 0x0, 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00'}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="1809000000000000000000000000000038120000f8300d823b282e521b3652a2c556de12deffcd66b0ae43fbd5a69286068df6794c12cb6be13e0658403833aff053c5000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, &(0x7f0000000780)}, 0x20)
utime(&(0x7f00000004c0)='./bus\x00', &(0x7f0000000500)={0x0, 0x9})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='mm_page_alloc\x00', r1}, 0x10)
r6 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
fsetxattr$system_posix_acl(r6, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000"], 0xfe44, 0x0)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r7, 0x20, &(0x7f00000000c0)={&(0x7f0000000080)=""/13, 0xd, 0x0, &(0x7f0000000140)=""/131, 0x83}}, 0x10)
sendmsg$kcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)="012db52d6ba4307b1205414c9a8564ef7ea12fccef95fc7bc324e23dd949a202cd249a4c621c140a23ea33166e7866df4cba7314667a639ccfea6daad19f463834cf", 0x42}], 0x1}, 0x40)
ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000040)={0x80, 0x6, 0x301, 0x0, 0x1, 0xfe, 0x0})

7.679299096s ago: executing program 5 (id=94):
r0 = getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
syz_clone(0x5d000120, 0x0, 0x3, 0x0, 0x0, 0x0)

7.448425594s ago: executing program 5 (id=97):
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r2, @ANYBLOB="fd00000000000000300012800b00010065727370616e00002000028004001200"], 0x50}}, 0x0) (fail_nth: 3)

7.331409502s ago: executing program 5 (id=99):
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffff, 0x5, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
move_mount(r3, &(0x7f0000000080)='./file0/file0\x00', r3, &(0x7f0000000300)='./file0/../file0\x00', 0x0)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
creat(&(0x7f0000000100)='./file0\x00', 0xc9028ba210c11f88)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
syz_emit_ethernet(0x9e, &(0x7f0000000780)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x0, 0x0, @private=0xa010102, {0x1d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@rr={0x7, 0xb, 0x0, [@broadcast, @broadcast]}, @end, @timestamp={0x44, 0x28, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0x0, [{@broadcast}, {@local}, {@private}, {@multicast1}, {@remote}]}]}}}}}}}, 0x0)

7.221200751s ago: executing program 5 (id=101):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000280)=r1}, 0x20)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (fail_nth: 2)

7.062045169s ago: executing program 2 (id=103):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) (fail_nth: 12)

6.732314246s ago: executing program 2 (id=105):
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)
time(0x0)
openat$selinux_user(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x480, &(0x7f0000000180)={[{@oldalloc}, {@grpjquota}]}, 0x1, 0x765, &(0x7f0000000800)="$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")
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000b80), r2)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0100a3761757d5a29dec05"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040084)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r6, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0)
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, r6, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x45}, 0x4000001)
write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x38, r8, 0x100, 0x0, 0x0, {}, [@GTPA_TID={0xc, 0x3, 0xfffffffffffffffd}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0xfffffffffffffe2d, 0x6, 0x4}]}, 0xd}}, 0x4000000)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x280000a, 0x11, r4, 0x439fe000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

6.428416312s ago: executing program 2 (id=109):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x1c)
getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000001240)=""/158, &(0x7f0000000100)=0x9e)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000000)='./file1\x00', 0x2221844, &(0x7f0000000400)=ANY=[@ANYRES16], 0x1, 0x26b, &(0x7f0000000840)="$eJzs3b9LHGkYB/BHd93Ta1aOg4Pj4BaOg6sWFa73OO5ATu6OyBIMQbLGNYgrQgQhKdRUgVRpUqaUNIZAUqRL/odAmqQIaULK2KUIblhn2R9xJBp0N7ifTzMP+z7fmXfe0RksnL3008rywura4u7umxgeHojs5JW9Wm0gRmMwMpHYCgDgLHlfq8W7WqLXcwEAusPzHwD6z+ee/0PJ5v8uTwsAOEVf/vf/ndknr8qVyd+P0JpplS/mjj1FAOCEzcxe+Gfv6a8jU/HodsTKzfXSeinZJuN/LMZSVKMSY5GPDxG1pqT+e2r6r7FC3UhEaWWzkd9cL2U68+ORj9GI8/8ezI8XEp35ofi2PT8R+fi+dfx7uVZ+IjWfi99+acsXIx/PLsdqVGMh6tlWfmO8UPjzv+lP8t/s98V2pqfXBwAAAAAAAAAAAAAAAAAAAACAs6lYaBpNe39PsXjYeJI/+vuBWu/nubWfz8aP2bjR27MHAAAAAAAAAAAAAAAAAACAr8PatevL5Wq1crVZzJ9b+q7zk2ZRD6QMDaQ0Zxr7T91Pvxf1hTnFQ/ycfplOtHi4U3m+PXdxpveL2VnkGj93p3KI9FV90PNzn28UL1N6BiNiv/jh7mT58cbrtwd7YqvtdzmbrF+5mmxz7TeLQvfuSwAAAAAAAAAAAAAAAAAA0I9a/wZ8WEetuxMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgB5off//sYtc85OdkWRnhzQng/d7ep4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPS3jwEAAP//QHuhog==")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff8001, @void, @value}, 0x94)
r2 = socket(0x3, 0x5, 0x1)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000480)={0xffffff, 0x3, 0x4}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES16=r5, @ANYRES32=r4, @ANYRESHEX=r2], 0x34}}, 0x4c810)
write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000200)='vegas\x00', 0xb)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x40000}, 0x20)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x8000000, 0x3, 0x320, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0xffffff00], [], 'ip6tnl0\x00', 'nicvf0\x00', {}, {}, 0x3a}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380)
truncate(&(0x7f0000000040)='./file1\x00', 0x7fff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x20, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/60, 0x3c}}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)

6.280858261s ago: executing program 2 (id=111):
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffff, 0x5, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
move_mount(r3, &(0x7f0000000080)='./file0/file0\x00', r3, &(0x7f0000000300)='./file0/../file0\x00', 0x0)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
creat(&(0x7f0000000100)='./file0\x00', 0xc9028ba210c11f88)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
syz_emit_ethernet(0x9e, &(0x7f0000000780)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x0, 0x0, @private=0xa010102, {0x1d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@rr={0x7, 0xb, 0x0, [@broadcast, @broadcast]}, @end, @timestamp={0x44, 0x28, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0x0, [{@broadcast}, {@local}, {@private}, {@multicast1}, {@remote}]}]}}}}}}}, 0x0)

6.078324898s ago: executing program 2 (id=116):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x30, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x15001}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x4}}}]}, 0x30}}, 0x2400c080)

5.393004771s ago: executing program 2 (id=124):
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x1808002, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0xcd0}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=")
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
r0 = epoll_create1(0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) (async)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)) (async)
r2 = open(0x0, 0x14927e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffffe, 0x4002011, r2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r5}, 0x10) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r6}, 0x69)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r7 = socket$inet(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async, rerun: 64)
socket$key(0xf, 0x3, 0x2) (async, rerun: 64)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000300)=0xffffffffffffff40, 0x4) (async)
syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0)

5.35272968s ago: executing program 34 (id=124):
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x1808002, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0xcd0}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
r0 = epoll_create1(0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) (async)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)) (async)
r2 = open(0x0, 0x14927e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffffe, 0x4002011, r2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r5}, 0x10) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r6}, 0x69)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r7 = socket$inet(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async, rerun: 64)
socket$key(0xf, 0x3, 0x2) (async, rerun: 64)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000300)=0xffffffffffffff40, 0x4) (async)
syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0)

3.429099898s ago: executing program 7 (id=125):
r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001fe, 0x802)
r1 = dup(r0)
ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x12, 0x2, 0x0, 0x0, 0x0}) (fail_nth: 3)

3.145891035s ago: executing program 5 (id=152):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180100001c000000000000000000820045dfdbe86d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x8000000000000000}, 0x18)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x3000412, &(0x7f0000000100), 0xc, 0x549, &(0x7f0000000ac0)="$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")
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fc0f00000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x90}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x20044804}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x0, 0x138, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
sendto$inet6(r3, &(0x7f0000000c40)="15", 0x1, 0x51, &(0x7f0000000140)={0xa, 0x4e21, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1c)
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000380)={0x4, 0x3, 0xffff, 0x3, 0x0, 0x0, 0x0, 0x4000000036a, 0x20003f})
r9 = epoll_create1(0x0)
r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f00000000c0)={0xe000001a})
close(r10)
lsm_get_self_attr(0x0, &(0x7f0000000400)={0x0, 0x0, 0x37, 0x17, ""/23}, &(0x7f0000000440)=0x37, 0x1)
bind$xdp(r10, &(0x7f0000000340)={0x2c, 0x5, 0x0, 0x17}, 0x10)

3.074331935s ago: executing program 35 (id=152):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180100001c000000000000000000820045dfdbe86d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x8000000000000000}, 0x18)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x3000412, &(0x7f0000000100), 0xc, 0x549, &(0x7f0000000ac0)="$eJzs3c9vHFcdAPDvTLzxjzp1Cj0AAhpKIUVR1rHTRlU5kF5AqKqEqDhxSI29tSyvs5F/lO4SCfvIHYlKnOBP4MYBqScO3LjBjUs5IAWIQA0Sh0Hzo/Zm7Y3Xje3F3s9HGs+8N7P7fW83772dF69fACPrSkRsR8TFiHgnImaq/KTa4na55dd9/PD+4qOH9xeTyLK3/5EU5/O86HpM7pnqOSci4vvfifhRsj/uRruzutBsNtar9Ozm2r3ZjXbn+kpa5czfmrt147Wbr84fW11fWPvNg2+vvPmD3/32Sx/9cfsbP8mLNf2zS8W57nocp7LqtZjuyhuLiDdPItiQjFX/fjh78tb2mYh4sWj/M3GheDf7mezZAwBnUZbNRDbTnQYAzrv8/n86krRezQVMR5rW6+Uc3vMxlTZbG5vXZlpbd5eimMO6HLX03ZVm40Y1V3g5akmeniuO99LzPembEfFcRPx8fLJI1xdbzaVhfvABgBH2TM/4/+/xcvzv48KpFg4AODkTwy4AAHDqjP8AMHqM/wAweo4w/j/p24EAwBni/h8ARo/xHwBGz6Hj/87plAMAOBXfe+utfMseVX//eum99tY3p9+7vtTYWK2vbS3WF1vr9+rLrdZys1FfzLLDnq/Zat2be2U3udHu3Flrbd3dvLOytrDcuNOonXB9AIDDPffCh39OImL79clii2Ith6RcwAM419JhFwAYmiP9QT+/JwDniu/zwOgaYD7elD2ccwcs0fuYvh/9P7D4K5xVVz9/0Px/ycAP55v5fxhdg83/9/YS3zqRsgCny/w/jK4sSz7tmv9p8XAA4Mw50hy/1X/hXHqq//8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAETVdbElaL1b53c5/pvV6xKWIuBy15N2VZuNGRDwbEX8ar43n6blhFxoAeErp35Jq/a+rMy9N9569mPxnvNhHxI9/+fYv3l/Y3Fyfy/P/uZu/+UGVP39xGBUAALrd3p9VjtPVvutG/uOH9xc/2U6ziA/eKBcXzeM+qrbyzFiMFfuJqEXE1L+SKl1Kjmk54u2diPjcXv3f74owXcyBlCuf9sbPY186gfh7r39v/PSx+GlxLt/Xitfis8dQFhg1H75R9pNV28ubWNX+0rhS7A9u/xNFD/X0Pun/Hu3r/9Ld/u/CvvhJ0eav7KafXJIHr/z+u/sys5ny3E7EF8YOip/sxk/69L8vDVjHv3zxyy/2O5f9KuJqHBy/tFZ0s7Oba/dmN9qd6ytrC8uN5cbd+flbc7duvHbz1fnZYo66/PmHyLLspz0x/v76tWcfz9nZe212Iqb6xJ84pP5fG7D+v/7vOz/8Sp9zefyXv9oTv7iNTuP5J8TPx8SvDxh/Yep23+W78/hLfep/2Pt/bcD4H/21szTgpQDAKdhod1YXms3G+iEHV8qPHINdvNBsvnyUi4/9YGfgejlod2I7orG+9bTv19Sne3hy+DXZzP/HC3WSB7V+jTHZPtLzJMdRnsnVheaweybgpO01+mGXBAAAAAAAAAAAAAAA6Gej3Vkdj+P+MlNc7sqZHHYdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOL/+FwAA///b6Mcl")
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fc0f00000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x90}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x20044804}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x0, 0x138, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
sendto$inet6(r3, &(0x7f0000000c40)="15", 0x1, 0x51, &(0x7f0000000140)={0xa, 0x4e21, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1c)
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000380)={0x4, 0x3, 0xffff, 0x3, 0x0, 0x0, 0x0, 0x4000000036a, 0x20003f})
r9 = epoll_create1(0x0)
r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f00000000c0)={0xe000001a})
close(r10)
lsm_get_self_attr(0x0, &(0x7f0000000400)={0x0, 0x0, 0x37, 0x17, ""/23}, &(0x7f0000000440)=0x37, 0x1)
bind$xdp(r10, &(0x7f0000000340)={0x2c, 0x5, 0x0, 0x17}, 0x10)

2.803941822s ago: executing program 4 (id=158):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8ecc7bb5352776725e104757e7dc25c6519a85ef828f711330ff2bb17b5508", "dc5db43f"}, 0x38) (fail_nth: 3)

2.775859671s ago: executing program 7 (id=125):
r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001fe, 0x802)
r1 = dup(r0)
ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x12, 0x2, 0x0, 0x0, 0x0}) (fail_nth: 3)

2.66982448s ago: executing program 4 (id=160):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000300)="d0c6", 0x2}])
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file0\x00'})
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x1, 0xc, 0x8, 0x4}, {0x7b7, 0x2, 0x77, 0x6}, {0xd6ba, 0x0, 0x9, 0x1}]})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_int(r1, 0x1, 0x5, 0x0, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080))
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000004800)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xe, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x80, 0xfffffffd, 0x7f2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x207fff]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa369, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5f5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7e2, 0x0, 0x0, 0xd5, 0xa, 0x96e4, 0x0, 0x0, 0xa, 0x0, 0x3, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10001, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xe2f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6, 0x80, 0x0, 0x2000000, 0x0, 0x0, 0xfffffffd, 0xfff, 0x0, 0x0, 0x0, 0x1ff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x3, 0x4, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x1ff}, {0xd, 0x2, 0x0, 0x80, 0x0, 0x2}, 0x2}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x890)
syz_open_dev$loop(&(0x7f0000001180), 0x81, 0x103801)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
syz_open_dev$loop(&(0x7f0000000300), 0x7, 0x210800)
r6 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x3472, 0x80}, &(0x7f0000000580)=<r7=>0x0, &(0x7f0000000240)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0)
pause()
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e00000000000040070000000800000000000200", @ANYRES32=0x1, @ANYBLOB="f8ffffff00"/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0000000a000000000000000000000000cf61fc000000000000000000"], 0x50)

2.63868824s ago: executing program 6 (id=161):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
time(0x0)
openat$selinux_user(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x480, &(0x7f0000000180)={[{@oldalloc}, {@grpjquota}]}, 0x1, 0x765, &(0x7f0000000800)="$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")
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000b80), r2)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0100a3761757d5a29dec05"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040084)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r6, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0)
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, r6, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x45}, 0x4000001)
write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x38, r8, 0x100, 0x0, 0x0, {}, [@GTPA_TID={0xc, 0x3, 0xfffffffffffffffd}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0xfffffffffffffe2d, 0x6, 0x4}]}, 0xd}}, 0x4000000)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x280000a, 0x11, r4, 0x439fe000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

2.615909359s ago: executing program 8 (id=154):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddb357f7adf97affffffff7d1800"})
r3 = syz_open_pts(r2, 0x0)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x0)
dup3(r2, r3, 0x0)
ioctl$TCSETA(r3, 0x5406, &(0x7f0000000000)={0x0, 0x9, 0x0, 0x0, 0x11, '\x00\x00\x00\x00 #\x00'})
ioctl$TIOCGPTPEER(r2, 0x5441, 0x0)
syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x3000006, &(0x7f00000004c0)={[{@discard}, {@abort}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@usrjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@nobh}, {@dioread_nolock}, {@orlov}, {@user_xattr}, {@init_itable_val={'init_itable', 0x3d, 0x400}}]}, 0x1, 0x556, &(0x7f0000001100)="$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")
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r4 = socket(0x28, 0x5, 0x0)
r5 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r5, 0x0)
connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
write$binfmt_elf64(r4, 0x0, 0x40000)

2.325316026s ago: executing program 6 (id=165):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f0000000400)=0x13)
ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x3d17, 0xffffffff, 0x1, 0x8, 0xff, "7e12105588e633bbb1df022dace17a32d211ee"})
ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000006c0)=0xa) (fail_nth: 1)

2.292803026s ago: executing program 7 (id=125):
r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001fe, 0x802)
r1 = dup(r0)
ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x12, 0x2, 0x0, 0x0, 0x0}) (fail_nth: 3)

1.935760912s ago: executing program 6 (id=167):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000023ed0000180100002820702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ")
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
keyctl$session_to_parent(0x12)
r1 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$selinux_context(r1, &(0x7f0000000100)='system_u:object_r:nvram_device_t:s0\x00', 0x24)
open(&(0x7f0000000240)='./file2\x00', 0x145142, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r2, @ANYRES64=0x0, @ANYBLOB="ed"], 0x20)

1.931490492s ago: executing program 8 (id=154):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddb357f7adf97affffffff7d1800"})
r3 = syz_open_pts(r2, 0x0)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x0)
dup3(r2, r3, 0x0)
ioctl$TCSETA(r3, 0x5406, &(0x7f0000000000)={0x0, 0x9, 0x0, 0x0, 0x11, '\x00\x00\x00\x00 #\x00'})
ioctl$TIOCGPTPEER(r2, 0x5441, 0x0)
syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x3000006, &(0x7f00000004c0)={[{@discard}, {@abort}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@usrjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@nobh}, {@dioread_nolock}, {@orlov}, {@user_xattr}, {@init_itable_val={'init_itable', 0x3d, 0x400}}]}, 0x1, 0x556, &(0x7f0000001100)="$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")
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r4 = socket(0x28, 0x5, 0x0)
r5 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r5, 0x0)
connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
write$binfmt_elf64(r4, 0x0, 0x40000)

1.817965761s ago: executing program 4 (id=169):
r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@bh}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") (async)
setgroups(0x0, 0x0) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001040)='.\x00', 0x0, 0x0)
quotactl_fd$Q_GETQUOTA(r1, 0xffffffff80000701, 0xee01, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0}) (async)
r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async)
socket$inet(0x2, 0x2, 0xe88b) (async)
r4 = fsmount(r3, 0x0, 0x0)
openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'wg2\x00', <r5=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000940)={'syztnl0\x00', &(0x7f00000008c0)={'syztnl2\x00', <r6=>0x0, 0x2f, 0x1, 0x1, 0x9, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xf}, 0x40, 0x8000, 0x10001, 0x1}}) (async)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$tipc(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1428437b3c8026bdfeb6db4ee9bcb25b1811d40a203bf40b3a7da5a8a64db04ed6dd26eea2a37229c339b1f91201c2796", 0x3d}], 0x1}, 0x0) (async)
recvmsg(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) (async)
close(r7)
sendmmsg$inet6(r4, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="b8d8521d80ad680efc2dd49651b9d3330475e08809a0f6a67f6ed4a9a591a1a3b4e3d655d5071a1ccfacd6e310d1d91bd1765e80b8e37ba2c568f682352a4ad1beed9ef95c793ba0475c2b68429f1050212793e5957fe3f303c2d6cdc9c4a8d29672e95a2905208a3b0379de7cbc18140282d78b41317f7f012524f0fb4d48c452a3cc45541263", 0x87}], 0x1, &(0x7f0000000240)=[@flowinfo={{0x14, 0x29, 0xb, 0x3}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x2f, 0x0, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}]}}}, @dstopts_2292={{0x108, 0x29, 0x4, {0x73, 0x1d, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0xb, 0xcc, "b037f45662e7a8ddee6bc9250befdcc5562bbb81f33bc3d8859fb87f9af97d1a4afd0b922e12f81f9671f609e9d113b147b54f6b75a4f01ca901721ca38144e4c1b14fe4b2313e8a4c322ab8eb6e304d6f77a9fcbb34d208b04bc20b5e99b0d3b291f4b6c3f8d11536edd2c88d8641212e7895b51d3d8f240274599270a2ee8544f35b97e1b69be4ee8c7bde859d7eaba2533f45a4fc1c274c0e2d580d25c36cf6bdf4c1a32462e4d79fcd7e22a48a5dde1ef0645e4028333e4fd6cabcbd5a60304b24a4a0aafb1482fce8d5"}, @calipso={0x7, 0x18, {0x0, 0x4, 0xff, 0x2, [0x4, 0x4]}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffff7}}, @rthdr_2292={{0x18, 0x29, 0x39, {0x2f, 0x0, 0x0, 0x79}}}, @rthdrdstopts={{0x50, 0x29, 0x37, {0xb8, 0x6, '\x00', [@jumbo, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xffffff7b}, @enc_lim={0x4, 0x1, 0xe}, @padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0xdae}, @calipso={0x7, 0x10, {0x1, 0x2, 0xf, 0x5, [0x6]}}]}}}, @dstopts={{0xa8, 0x29, 0x37, {0x2b, 0x11, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @enc_lim={0x4, 0x1, 0x3}, @calipso={0x7, 0x50, {0x1, 0x12, 0xff, 0x4, [0x2, 0xe, 0x4, 0x2, 0x4, 0x5, 0x4, 0x7f, 0x100]}}, @pad1, @hao={0xc9, 0x10, @mcast2}, @jumbo={0xc2, 0x4, 0x3}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @enc_lim={0x4, 0x1, 0x5}, @ra={0x5, 0x2, 0xe}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}], 0x280}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0xffffffff, @private2, 0x8}, 0x1c, &(0x7f0000000840)=[{&(0x7f00000004c0)="47558ed16a570402f2acb0d156a4f31eb7846343bd99a31221a885518d694e84db042a1735aa682f5a13762ea66a64ad4ecbb02d38ea090695b118149b1326bc55fbd961a4352479ed52ec66381016aefdc42d739dfcadcfdbcf0f6c3f1300a80027f597c15ffd622a0b6b46f4663d0de26f5cac4d8fcb91404477c860a5548744fc2bcb847471c86ba3938032e8e8b13b6f7a2b8983f3145d0adb819484034e3882e56c3993164dae1a275fb716be7d0b90ed51e2559d171a6abef40f988c52b19dd45dc4", 0xc5}, {&(0x7f00000005c0)="bf89980e12c1ffcb68abac11501579a3cd55e417f2e4fd1666e8e37da4cbe80be2a940b7019104ba11197133a2d420d9bcce4001d78ae5f6022886b87d15db606f5fc17022656dbe7ce3397c5de6368aa07158522596ea981bd3acb051ebf1b137e4157c0e812af1a83ee801b702288bd3e571544c97cfc2ed77ffef7c0fb4c6c3ef114960bfb7c766500f5c5e8c0b017ee9c580887eacc99be3010e34357c8feb36da4290791e46e479634386b41ac97c2c49940b9164e8967cc2b0376f3179e87f12c22a7429b8eebc4638eaddd788b158fc28dac8d2ab5cd88136a7d8dfc2fea559f434f4c1d8a003fef057393e94", 0xf0}, {&(0x7f00000006c0)="54c3501240a90927cc10922484bdb90a3acf22caed9d2d2e39f7dddd72b78f848ca06115c568a5c966df5a83a7b9f8beae994de1bc234d82be1357808617f6624be4508a9b88cb8ad0c7d01d77e669288921b59692adb6eabfccca521f14bbc0348c3b9bdbe04001233d15445a2248ec925280c70073e82cb58efe33ea1e3d55b2c90599734da5f3eb5a0338b5aaa6446584255b6724a380bb386cdc2503ef1e1b1e3d85ff1cf5217ab4628efdae2ebb1c257c9d634dff26bea7d7489e3871", 0xbf}, {&(0x7f0000000780)="defdfa4a0e9198eeeee375ddf25aeffe6f3fb2b346a9fa9b4176c72b0194aed650307eb3c81eea6d0e57c4da9dbe3539f176d0708a4c1f3255a7ba910d119908359cc100959ac050559c689f76f3b3ba015ef4af06b6755cdb2464c835826be023a90eeac8f9b3ad69a649164b0fb67489135135e3d152ead36fe0b2957953329d9c1a3f08babc522aa52fa13e551a61a3cd952c761c6d2565e838e2a55e3722ae0748308213af6bfdba11a9", 0xac}], 0x4, &(0x7f0000000980)=[@rthdr={{0x78, 0x29, 0x39, {0x62, 0xc, 0x2, 0x2, 0x0, [@private2, @mcast2, @empty, @loopback, @empty, @dev={0xfe, 0x80, '\x00', 0x2e}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2, r5}}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @pktinfo={{0x24, 0x29, 0x32, {@private2, r6}}}, @tclass={{0x14, 0x29, 0x43, 0x7f}}], 0x108}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000ac0)="0aff441ee9f47072b6eee58d550ce4dbf7acdf09dc98cb3001e39084f258a11374ea7e46347029b619792bc9956d850b89ae48f3763c1d3df911f691beb0dc6093186b73e3779e54422dff4ae9a5f2ede02d59ed9ca5765ebb0b8d496f72a02d386a330b5170a850f231acbc5e72096eb5f82c580bba7b6b16792801fd210cf6a9d9a7ce69477617909f67ddf1c45fac74c9d086fdc9147a6a28c72233e00844f9ec7d1c66dc41e478af95a4440f775b99d3617a0f88a164af3e76dd82a7bdd800b79b82491e4b2c1e6a4cd4cc245e9fb5cbcce23557d1aa6e6e91e6760c29d6596832f28d348cf0", 0xe8}, {&(0x7f0000000bc0)="0577be0469bd43c350490811d9303f589d4d1d0578d3fc801021c590ccfdc80f58e0fc0befd8096f84d19d3b1a6c522f5b55810e788acdfd10888f60e91b6ef1e849cdf66048addbf516a4fa75d64bced384277a97a591e3e4b576d2b8fd496693fa5d26d0134d1ac968937d55c99e0824aeb2da7458c15102fc866e6f116875339285beafe3adf3465d86537aa3dd051b9c100783c2e896c9724ac3352868a3ce309e5f61100b7c746495bd9285b6054f16d36abde39777d8cf2d4b2829d6268234dc8cd217ef78851fed689436b2664db6f416d63a1022f8a8f8df07352f", 0xdf}], 0x2, &(0x7f0000000d00)=[@rthdr_2292={{0x48, 0x29, 0x39, {0x1d, 0x6, 0x0, 0xe, 0x0, [@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @dstopts={{0x20, 0x29, 0x37, {0x5c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x7}]}}}, @tclass={{0x14, 0x29, 0x43, 0x6}}, @rthdr={{0x58, 0x29, 0x39, {0x6, 0x8, 0x1, 0xfe, 0x0, [@private1, @dev={0xfe, 0x80, '\x00', 0x15}, @private1, @remote]}}}], 0xd8}}], 0x3, 0x80d) (async)
r9 = signalfd4(r3, &(0x7f0000000ec0)={[0x9]}, 0x8, 0x80000)
bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@base={0xa, 0x0, 0x0, 0xe, 0x82, r1, 0x4, '\x00', 0x0, r9, 0x3, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000001000)=@raw=[@call={0x85, 0x0, 0x0, 0x57}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x6}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x62, &(0x7f0000000100)=""/98, 0x41000, 0x21, '\x00', r2, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x4, 0x8, 0x2, 0x800}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[r1, r0, r1, r1, r1, r1, r1, r1, r4, r1], &(0x7f0000000f80)=[{0x3, 0x5, 0x6}, {0x5, 0x2, 0x5, 0x4}, {0x1, 0x5, 0x1, 0x3}, {0x1, 0x5, 0xf, 0x1}, {0x2, 0x3, 0x0, 0x6}], 0x10, 0x3, @void, @value}, 0x94)

1.729709089s ago: executing program 4 (id=170):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
connect$x25(r0, &(0x7f0000001ec0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x3c)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000023ed0000180100002820702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r3 = socket$kcm(0x2b, 0x1, 0x0)
vmsplice(r2, &(0x7f0000000540)=[{&(0x7f0000000380)="a6aa864f37fcd2ae67777f8bbbdd3bf92647a6ebd287cc27e674d7c516020c2f8a118a4fad1dd36cdaed159cc56c9c059a8b30a6d6c019d929b134eaf5cd69286fc013b69c26f0845a4ab1a4a25818e577523c4af2c5df325d05422ec1a0a1b5a493bff88caa426ca6aaf64fb0cdbdb243874941d08466861b6c909a8bba65a0", 0x80}, {&(0x7f0000000400)="d603505c098a9aa8d563ff12bb3bc2d89e7043d69ecb1717b7960913b2468900eaf9a88067d3009ec897fc4ed2e34e577f08", 0x32}, {&(0x7f0000000440)="55f78aec21927383e0047548f9406b2a99d930051c3e3b7d266bca4e579309de922ed9a5767cbd8955697714df2628614c7809c108252782c07223ea8a962f6773f2f308cfaddf2639de2a5df7ca388d3b68e76206d003389d95eb4ee3ea0d731a06d1a4c508b21dd2fdd03815e215fc6be9ccff2d41c47d3fe16edf17ae518f2d8cecc768aa42603794b2cf3d84c7f93e6db02da34f394120651834c7b28b", 0x9f}], 0x3, 0x0)
close(r3)
socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f00000001c0), 0x45)
close(r3)
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x80000, &(0x7f00000001c0), 0x5, 0x4bc, &(0x7f0000000a40)="$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")
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
keyctl$session_to_parent(0x12)
r4 = socket$inet6(0xa, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES16=r1, @ANYBLOB="0b120500592400001868457ecc0001006970697000000000080002800400130018ce5c9a60a4729300f7f8c23ab2c8206bb0b11ada8be3337e6821948ce385681e94f9be2209c1f4ebc9a2c30229b35cda941169af65da04072aca8f77797f032327512293174d629d18e328415b170d09d73039ef3bed184b6b02227f8cba00f208cf43be59ad22a1888d01a9f77b1e0993f18cbc495905d55f504d2065c3b7db245c437078a5c25e15cd86c05e55c3e9ea9503d1481b2d8d31917d1198c46abad7fb327228d6bf6f2d2a9874709031375934"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000005c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xa6, 0x0, 0x7ffc1ff9}]})
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000680)='qdisc_create\x00', r8}, 0x18)
iopl(0x3)
futex(&(0x7f0000000080), 0x100, 0x1, &(0x7f0000000340)={0x77359400}, 0x0, 0x2)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200)={<r9=>0x0, 0xc3, 0x9, [0x7, 0x5, 0x6896, 0x9, 0x7, 0x2, 0x7f, 0x3c, 0x7]}, &(0x7f0000000280)=0x1a)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000002c0)={r9, 0x7e, 0x20, 0x0, 0x100000001}, &(0x7f0000000300)=0x18)
r10 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$selinux_context(r10, &(0x7f0000000100)='system_u:object_r:nvram_device_t:s0\x00', 0x24)
open(&(0x7f0000000240)='./file2\x00', 0x111000, 0x4)

1.72761582s ago: executing program 6 (id=171):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX, @ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x18}, 0x18)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x70)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x7e)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x1000)=nil)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil)
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r5}, 0x10)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x4000000)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0)
r8 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSF2(r8, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, "4a349800000000806913220909000909000a48"})
ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000040)=0x7f)
ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000002880)=0x9)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

1.581990198s ago: executing program 0 (id=173):
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0)
r1 = syz_io_uring_setup(0x3bc1, &(0x7f0000000780)={0x0, 0x942e, 0x10100}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1})
r5 = getpid()
syz_pidfd_open(r5, 0x0)
syz_clone3(&(0x7f00000008c0)={0x15340180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r5], 0x1}, 0x58)
ptrace$setregs(0xf, r5, 0x951, &(0x7f0000000240)="94fc611d0c1e61552d8a26a85c1e17136679bd08bd601991e91b17677e19c5bc92f924ea45dfef2021a93c070b4ae7adda23407acae092093b1b3935071e6dce4b44ab339be90d2953028663e9e62126d043b5c2a60d690c74e635b7cdd30a3c67c05665c6058833e16c2ccaecbb1700fc642a49ca242063b5892a8c71f39b8ed2553f3c53c336c7995ffbd2e919b49812c8a8ded85a448dadb0b016aaf9a9ab6927feabed1dd0e3dbea2786f36c1c074f29aed3a1a1d82aaeecf9db1e4ad86524fb9cdaea5f22a47b0d01af3e1e65f12e4ddf7d58c5fe50a1ba5c884079")
io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0)

1.556391137s ago: executing program 7 (id=125):
r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001fe, 0x802)
r1 = dup(r0)
ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x12, 0x2, 0x0, 0x0, 0x0}) (fail_nth: 3)

1.537756837s ago: executing program 0 (id=174):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x15)
r2 = dup(r1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
mount$9p_fd(0x2000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}})

1.533382977s ago: executing program 4 (id=175):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x2}]})
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

1.346040175s ago: executing program 0 (id=176):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x2}]})
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0) (fail_nth: 1)

1.344284295s ago: executing program 8 (id=154):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddb357f7adf97affffffff7d1800"})
r3 = syz_open_pts(r2, 0x0)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x0)
dup3(r2, r3, 0x0)
ioctl$TCSETA(r3, 0x5406, &(0x7f0000000000)={0x0, 0x9, 0x0, 0x0, 0x11, '\x00\x00\x00\x00 #\x00'})
ioctl$TIOCGPTPEER(r2, 0x5441, 0x0)
syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x3000006, &(0x7f00000004c0)={[{@discard}, {@abort}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@usrjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@nobh}, {@dioread_nolock}, {@orlov}, {@user_xattr}, {@init_itable_val={'init_itable', 0x3d, 0x400}}]}, 0x1, 0x556, &(0x7f0000001100)="$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")
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r4 = socket(0x28, 0x5, 0x0)
r5 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r5, 0x0)
connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
write$binfmt_elf64(r4, 0x0, 0x40000)

1.036995341s ago: executing program 0 (id=177):
r0 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x3, 0x0, 0xce})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @empty}}, 0xeea, 0x2, 0xc33, 0x2, 0x2, 0x10, 0x8}, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$packet(0x11, 0x2, 0x300)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r9=>0x0})
bind$packet(r7, &(0x7f00000000c0)={0x11, 0xf8, r9, 0x1, 0x0, 0x6, @local}, 0x14)
r10 = socket$xdp(0x2c, 0x3, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r11}, 0x10)
setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xffffffffdfffffff, 0x1000}, 0x20)
madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x14)
bind$packet(r8, &(0x7f0000000100)={0x11, 0x4, r9}, 0x14)
syz_emit_ethernet(0x11, &(0x7f0000001f00)=ANY=[], 0x0)
r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r12, 0x1, 0x123, 0x5, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0)
ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={0x0, @hci={0x1f, 0x3, 0x3}, @in={0x2, 0x4e24, @multicast2}, @nfc={0x27, 0x0, 0xffffffffffffffff, 0x4}, 0x7, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000180)='veth0_to_bond\x00', 0x7, 0xe53, 0x4})
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020002010000008500000086000000955bb08c06d3474d336bfccd2eed4184e39fe2705f670131599b6e9c7fd0ff2fd28af33e9e6483b9ac6d4e98fd3a8e133b493c4d902d7bf2129493ee70ca901477a5add341be7e3f4ae1bc902948d3adc0aa5718b6d820a2db7dc09cf07b9930b0bba945"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r13}, 0x10)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040))
fremovexattr(r13, &(0x7f00000003c0)=ANY=[@ANYBLOB="62747266732eaaaaaa8fec3cd522585c445baaaa"])

930.57376ms ago: executing program 7 (id=125):
r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001fe, 0x802)
r1 = dup(r0)
ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x12, 0x2, 0x0, 0x0, 0x0}) (fail_nth: 3)

896.86117ms ago: executing program 0 (id=178):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4cb, &(0x7f0000000700)="$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") (async, rerun: 32)
prlimit64(0x0, 0x8, &(0x7f0000000140)={0xc, 0xfffffffffffff001}, 0x0) (async, rerun: 32)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
prctl$PR_SET_IO_FLUSHER(0x39, 0x1)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0xc01c2, 0x1fe)
write$binfmt_script(r1, 0x0, 0x0) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffae) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) (async)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x6, <r2=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2161712a72d79e6f, 0x2, 0x0, 0x0, 0xffffff86, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000, @void, @value}, 0x94) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$lock(r3, 0x26, &(0x7f00000031c0))
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x200006, 0xc, 0xb, 0x59c, 0xffffffffffffffff}) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) (async, rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r5=>0xffffffffffffffff}) (rerun: 64)
getsockopt$sock_buf(r5, 0x1, 0x1f, 0x0, &(0x7f00000002c0))
syz_open_dev$tty20(0xc, 0x4, 0x1) (async, rerun: 32)
open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) (rerun: 32)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff"], 0x48)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

789.897159ms ago: executing program 0 (id=179):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000300)="d0c6", 0x2}])
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file0\x00'})
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x1, 0xc, 0x8, 0x4}, {0x7b7, 0x2, 0x77, 0x6}, {0xd6ba, 0x0, 0x9, 0x1}]})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_int(r1, 0x1, 0x5, 0x0, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080))
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000004800)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xe, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x80, 0xfffffffd, 0x7f2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x207fff]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa369, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5f5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7e2, 0x0, 0x0, 0xd5, 0xa, 0x96e4, 0x0, 0x0, 0xa, 0x0, 0x3, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10001, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xe2f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6, 0x80, 0x0, 0x2000000, 0x0, 0x0, 0xfffffffd, 0xfff, 0x0, 0x0, 0x0, 0x1ff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x3, 0x4, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x1ff}, {0xd, 0x2, 0x0, 0x80, 0x0, 0x2}, 0x2}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x890)
syz_open_dev$loop(&(0x7f0000001180), 0x81, 0x103801)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
syz_open_dev$loop(&(0x7f0000000300), 0x7, 0x210800)
r6 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x3472, 0x80}, &(0x7f0000000580)=<r7=>0x0, &(0x7f0000000240)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0)
pause()
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e00000000000040070000000800000000000200", @ANYRES32=0x1, @ANYBLOB="f8ffffff00"/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0000000a000000000000000000000000cf61fc000000000000000000"], 0x50)

789.359669ms ago: executing program 8 (id=154):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddb357f7adf97affffffff7d1800"})
r3 = syz_open_pts(r2, 0x0)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x0)
dup3(r2, r3, 0x0)
ioctl$TCSETA(r3, 0x5406, &(0x7f0000000000)={0x0, 0x9, 0x0, 0x0, 0x11, '\x00\x00\x00\x00 #\x00'})
ioctl$TIOCGPTPEER(r2, 0x5441, 0x0)
syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x3000006, &(0x7f00000004c0)={[{@discard}, {@abort}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@usrjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@nobh}, {@dioread_nolock}, {@orlov}, {@user_xattr}, {@init_itable_val={'init_itable', 0x3d, 0x400}}]}, 0x1, 0x556, &(0x7f0000001100)="$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")
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r4 = socket(0x28, 0x5, 0x0)
r5 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r5, 0x0)
connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
write$binfmt_elf64(r4, 0x0, 0x40000)

503.804785ms ago: executing program 6 (id=180):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0xffffffffffffffb6) (fail_nth: 7)

503.605986ms ago: executing program 7 (id=125):
r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001fe, 0x802)
r1 = dup(r0)
ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x12, 0x2, 0x0, 0x0, 0x0}) (fail_nth: 3)

422.32µs ago: executing program 4 (id=181):
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000180)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@minixdf}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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")
chdir(0x0)
add_key(0x0, 0x0, &(0x7f0000000100)="01000000020000000000006b", 0xc, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet(0x2, 0x5, 0x1)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c)
listen(r1, 0x20000005)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)

234.28µs ago: executing program 6 (id=182):
unshare(0x62040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000080)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0)
connect$unix(r1, &(0x7f0000000100)=@abs, 0x6e)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010300000100fddbdf2526"], 0x14}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="3000000020000100000000000000000002"], 0x30}}, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_buf(r5, 0x6, 0xe, &(0x7f0000000180)="4854d5bb685a3d8d913d249916f494d747bee7bc1f1781665c524ea96cbaecfe3bb61c18dd1935cac27a13224614c89c5e396fd7614b8d835f0a53daf615d079c2bf62494964d8d1ff48015b478f113b71658faa26971f4a1456ed09db9b729e6326baf79cb65965c4749d2e590a3ff941d6dc8daaa2b5739002ec51554246bde5d09fef0b04b7b00a490d68d2d15f8364bc6a90ab48922906b889", 0x9b)

0s ago: executing program 8 (id=154):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddb357f7adf97affffffff7d1800"})
r3 = syz_open_pts(r2, 0x0)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x0)
dup3(r2, r3, 0x0)
ioctl$TCSETA(r3, 0x5406, &(0x7f0000000000)={0x0, 0x9, 0x0, 0x0, 0x11, '\x00\x00\x00\x00 #\x00'})
ioctl$TIOCGPTPEER(r2, 0x5441, 0x0)
syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x3000006, &(0x7f00000004c0)={[{@discard}, {@abort}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@usrjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@nobh}, {@dioread_nolock}, {@orlov}, {@user_xattr}, {@init_itable_val={'init_itable', 0x3d, 0x400}}]}, 0x1, 0x556, &(0x7f0000001100)="$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")
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r4 = socket(0x28, 0x5, 0x0)
r5 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r5, 0x0)
connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
write$binfmt_elf64(r4, 0x0, 0x40000)

kernel console output (not intermixed with test programs):

[   21.512991][   T29] audit: type=1400 audit(1733937231.069:81): avc:  denied  { read } for  pid=2981 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
Warning: Permanently added '10.128.10.30' (ED25519) to the list of known hosts.
[   27.526846][   T29] audit: type=1400 audit(1733937237.089:82): avc:  denied  { mounton } for  pid=3287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   27.528152][ T3287] cgroup: Unknown subsys name 'net'
[   27.549586][   T29] audit: type=1400 audit(1733937237.089:83): avc:  denied  { mount } for  pid=3287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   27.577008][   T29] audit: type=1400 audit(1733937237.109:84): avc:  denied  { unmount } for  pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   27.716771][ T3287] cgroup: Unknown subsys name 'cpuset'
[   27.722926][ T3287] cgroup: Unknown subsys name 'rlimit'
[   27.873861][   T29] audit: type=1400 audit(1733937237.429:85): avc:  denied  { setattr } for  pid=3287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   27.897213][   T29] audit: type=1400 audit(1733937237.429:86): avc:  denied  { create } for  pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   27.917757][   T29] audit: type=1400 audit(1733937237.429:87): avc:  denied  { write } for  pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   27.938245][   T29] audit: type=1400 audit(1733937237.429:88): avc:  denied  { read } for  pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   27.958573][   T29] audit: type=1400 audit(1733937237.439:89): avc:  denied  { mounton } for  pid=3287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   27.967225][ T3290] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   27.983352][   T29] audit: type=1400 audit(1733937237.439:90): avc:  denied  { mount } for  pid=3287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   28.015464][   T29] audit: type=1400 audit(1733937237.549:91): avc:  denied  { relabelto } for  pid=3290 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   28.045251][ T3287] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   29.187954][ T3297] chnl_net:caif_netlink_parms(): no params data found
[   29.247613][ T3296] chnl_net:caif_netlink_parms(): no params data found
[   29.278105][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.285291][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.292663][ T3297] bridge_slave_0: entered allmulticast mode
[   29.299229][ T3297] bridge_slave_0: entered promiscuous mode
[   29.306909][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.314153][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.321429][ T3297] bridge_slave_1: entered allmulticast mode
[   29.327818][ T3297] bridge_slave_1: entered promiscuous mode
[   29.370235][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.382779][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.422927][ T3302] chnl_net:caif_netlink_parms(): no params data found
[   29.454528][ T3297] team0: Port device team_slave_0 added
[   29.474443][ T3297] team0: Port device team_slave_1 added
[   29.497452][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.504546][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.511928][ T3296] bridge_slave_0: entered allmulticast mode
[   29.518532][ T3296] bridge_slave_0: entered promiscuous mode
[   29.528969][ T3305] chnl_net:caif_netlink_parms(): no params data found
[   29.544491][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.551670][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.558862][ T3296] bridge_slave_1: entered allmulticast mode
[   29.565184][ T3296] bridge_slave_1: entered promiscuous mode
[   29.571440][ T3304] chnl_net:caif_netlink_parms(): no params data found
[   29.585108][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.592196][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.618120][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.658000][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.665012][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.691011][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.725096][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.749212][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.756335][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.763543][ T3302] bridge_slave_0: entered allmulticast mode
[   29.769938][ T3302] bridge_slave_0: entered promiscuous mode
[   29.776684][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.783821][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.791130][ T3302] bridge_slave_1: entered allmulticast mode
[   29.797654][ T3302] bridge_slave_1: entered promiscuous mode
[   29.804748][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.868172][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.878025][ T3296] team0: Port device team_slave_0 added
[   29.884621][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.893899][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.901018][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.908195][ T3305] bridge_slave_0: entered allmulticast mode
[   29.914669][ T3305] bridge_slave_0: entered promiscuous mode
[   29.921046][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.928146][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.935327][ T3304] bridge_slave_0: entered allmulticast mode
[   29.941627][ T3304] bridge_slave_0: entered promiscuous mode
[   29.950117][ T3297] hsr_slave_0: entered promiscuous mode
[   29.956277][ T3297] hsr_slave_1: entered promiscuous mode
[   29.968118][ T3296] team0: Port device team_slave_1 added
[   29.973969][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.981052][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.988246][ T3305] bridge_slave_1: entered allmulticast mode
[   29.994622][ T3305] bridge_slave_1: entered promiscuous mode
[   30.001086][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.008224][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.015404][ T3304] bridge_slave_1: entered allmulticast mode
[   30.022228][ T3304] bridge_slave_1: entered promiscuous mode
[   30.063075][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.072929][ T3302] team0: Port device team_slave_0 added
[   30.079613][ T3302] team0: Port device team_slave_1 added
[   30.090123][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.097170][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.123289][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.143987][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.157951][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.165097][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.191036][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.205190][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.227102][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.234076][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.260032][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.280002][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.298236][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.305245][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.331185][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.350947][ T3296] hsr_slave_0: entered promiscuous mode
[   30.357106][ T3296] hsr_slave_1: entered promiscuous mode
[   30.362922][ T3296] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   30.370621][ T3296] Cannot create hsr debugfs directory
[   30.376674][ T3304] team0: Port device team_slave_0 added
[   30.401305][ T3304] team0: Port device team_slave_1 added
[   30.408359][ T3305] team0: Port device team_slave_0 added
[   30.434834][ T3305] team0: Port device team_slave_1 added
[   30.457564][ T3302] hsr_slave_0: entered promiscuous mode
[   30.463705][ T3302] hsr_slave_1: entered promiscuous mode
[   30.469827][ T3302] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   30.477433][ T3302] Cannot create hsr debugfs directory
[   30.494215][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.501464][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.527523][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.538764][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.545710][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.571720][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.600902][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.607970][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.633929][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.662229][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.669249][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.695179][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.741619][ T3305] hsr_slave_0: entered promiscuous mode
[   30.747702][ T3305] hsr_slave_1: entered promiscuous mode
[   30.753522][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   30.761114][ T3305] Cannot create hsr debugfs directory
[   30.768550][ T3304] hsr_slave_0: entered promiscuous mode
[   30.774740][ T3304] hsr_slave_1: entered promiscuous mode
[   30.780713][ T3304] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   30.788336][ T3304] Cannot create hsr debugfs directory
[   30.830920][ T3297] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   30.854988][ T3297] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   30.876709][ T3297] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   30.896814][ T3297] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   30.944497][ T3296] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   30.955425][ T3296] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   30.974211][ T3296] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   30.987686][ T3302] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   30.996793][ T3296] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   31.008196][ T3302] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   31.017164][ T3302] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   31.026423][ T3302] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   31.064588][ T3305] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   31.074596][ T3305] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   31.090365][ T3305] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   31.101556][ T3305] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   31.146013][ T3304] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   31.166081][ T3304] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   31.178474][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.196252][ T3304] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   31.214718][ T3304] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   31.225480][ T3296] 8021q: adding VLAN 0 to HW filter on device team0
[   31.237293][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.248387][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.256830][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.263891][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.282645][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.289819][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.306386][ T3302] 8021q: adding VLAN 0 to HW filter on device team0
[   31.332491][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.345618][ T3297] 8021q: adding VLAN 0 to HW filter on device team0
[   31.354887][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.362116][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.371316][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.378444][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.395378][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.402540][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.417598][ T3305] 8021q: adding VLAN 0 to HW filter on device team0
[   31.432574][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.439680][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.457039][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.464148][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.479395][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.486617][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.500600][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.516968][ T3296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.552497][ T3304] 8021q: adding VLAN 0 to HW filter on device team0
[   31.569382][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.600138][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.607287][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.641626][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.652974][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.660139][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.702336][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.712518][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.785709][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.811683][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.828189][ T3302] veth0_vlan: entered promiscuous mode
[   31.848368][ T3302] veth1_vlan: entered promiscuous mode
[   31.888763][ T3302] veth0_macvtap: entered promiscuous mode
[   31.900473][ T3302] veth1_macvtap: entered promiscuous mode
[   31.923056][ T3305] veth0_vlan: entered promiscuous mode
[   31.931176][ T3296] veth0_vlan: entered promiscuous mode
[   31.940116][ T3296] veth1_vlan: entered promiscuous mode
[   31.955579][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.964784][ T3305] veth1_vlan: entered promiscuous mode
[   31.978136][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.997064][ T3302] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.006046][ T3302] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.014772][ T3302] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.023566][ T3302] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.035245][ T3305] veth0_macvtap: entered promiscuous mode
[   32.051924][ T3297] veth0_vlan: entered promiscuous mode
[   32.058159][ T3305] veth1_macvtap: entered promiscuous mode
[   32.069114][ T3296] veth0_macvtap: entered promiscuous mode
[   32.086919][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.097511][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.108259][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.122021][ T3296] veth1_macvtap: entered promiscuous mode
[   32.129712][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.140228][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.151895][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.165139][ T3297] veth1_vlan: entered promiscuous mode
[   32.178005][ T3302] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   32.183113][ T3304] veth0_vlan: entered promiscuous mode
[   32.199485][ T3305] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.208275][ T3305] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.217163][ T3305] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.226005][ T3305] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.257092][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.267692][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.277632][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.288202][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.300935][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.311769][ T3437] =======================================================
[   32.311769][ T3437] WARNING: The mand mount option has been deprecated and
[   32.311769][ T3437]          and is ignored by this kernel. Remove the mand
[   32.311769][ T3437]          option from the mount to silence this warning.
[   32.311769][ T3437] =======================================================
[   32.322115][ T3297] veth0_macvtap: entered promiscuous mode
[   32.353700][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.364295][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.374240][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.384696][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.387361][ T3437] dccp_v4_rcv: dropped packet with invalid checksum
[   32.398610][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.415668][ T3296] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.424471][ T3296] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.433315][ T3296] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.442124][ T3296] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.453775][ T3297] veth1_macvtap: entered promiscuous mode
[   32.460316][ T3304] veth1_vlan: entered promiscuous mode
[   32.477004][ T3304] veth0_macvtap: entered promiscuous mode
[   32.485497][ T3304] veth1_macvtap: entered promiscuous mode
[   32.512395][ T3440] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   32.530811][ T3440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'.
[   32.550702][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.561270][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.571155][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.581773][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.591706][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.602178][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.614572][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.621947][ T3440] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   32.629750][ T3440] batman_adv: batadv0: Removing interface: batadv_slave_0
[   32.637673][ T3440] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   32.645061][ T3440] batman_adv: batadv0: Removing interface: batadv_slave_1
[   32.655383][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.666048][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.675931][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.686436][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.696292][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.706739][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.717148][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.727189][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.737781][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.747664][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.758143][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.769001][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.783602][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.794311][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.804213][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.806416][   T29] kauditd_printk_skb: 42 callbacks suppressed
[   32.806485][   T29] audit: type=1400 audit(1733937242.339:134): avc:  denied  { create } for  pid=3442 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   32.814652][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.850492][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.861022][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.872056][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.880332][ T3297] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[   32.897391][ T3304] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[   32.920045][ T3297] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[   32.949077][ T3304] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[   32.969079][ T3304] wireguard: wg0: Could not create IPv4 socket
[   32.976614][ T3297] wireguard: wg0: Could not create IPv4 socket
[   32.984278][ T3304] wireguard: wg1: Could not create IPv4 socket
[   32.995649][ T3304] wireguard: wg2: Could not create IPv4 socket
[   33.003118][ T3297] wireguard: wg1: Could not create IPv4 socket
[   33.012069][ T3297] wireguard: wg2: Could not create IPv4 socket
[   33.090669][ T3450] Failed to initialize the IGMP autojoin socket (err -2)
[   33.094808][ T3448] loop4: detected capacity change from 0 to 2048
[   33.104690][ T3448] EXT4-fs: Ignoring removed oldalloc option
[   33.129810][ T3448] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   33.146048][   T29] audit: type=1400 audit(1733937242.699:135): avc:  denied  { mount } for  pid=3447 comm="syz.4.5" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   33.167566][   T29] audit: type=1400 audit(1733937242.699:136): avc:  denied  { write } for  pid=3447 comm="syz.4.5" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   33.188930][   T29] audit: type=1400 audit(1733937242.699:137): avc:  denied  { add_name } for  pid=3447 comm="syz.4.5" name="blkio.bfq.avg_queue_size" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   33.211003][   T29] audit: type=1400 audit(1733937242.699:138): avc:  denied  { create } for  pid=3447 comm="syz.4.5" name="blkio.bfq.avg_queue_size" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   33.234302][   T29] audit: type=1400 audit(1733937242.709:139): avc:  denied  { read append open } for  pid=3447 comm="syz.4.5" path="/0/file0/blkio.bfq.avg_queue_size" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   33.259278][   T29] audit: type=1400 audit(1733937242.709:140): avc:  denied  { read } for  pid=3447 comm="syz.4.5" dev="nsfs" ino=4026532794 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   33.280441][   T29] audit: type=1400 audit(1733937242.709:141): avc:  denied  { open } for  pid=3447 comm="syz.4.5" path="net:[4026532794]" dev="nsfs" ino=4026532794 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   33.304199][   T29] audit: type=1400 audit(1733937242.789:142): avc:  denied  { map } for  pid=3447 comm="syz.4.5" path="/0/file0/blkio.bfq.avg_queue_size" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   33.328117][   T29] audit: type=1400 audit(1733937242.789:143): avc:  denied  { write } for  pid=3447 comm="syz.4.5" path="/0/file0/blkio.bfq.avg_queue_size" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   33.384543][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.514374][ T3461] Failed to initialize the IGMP autojoin socket (err -2)
[   33.537878][ T3459] Failed to initialize the IGMP autojoin socket (err -2)
[   33.692910][ T3458] Failed to initialize the IGMP autojoin socket (err -2)
[   33.919998][ T3464] loop4: detected capacity change from 0 to 2048
[   33.927995][ T3464] EXT4-fs: Ignoring removed oldalloc option
[   33.944751][ T3464] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.021432][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.048310][ T3468] syz.4.11[3468] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   34.048451][ T3468] syz.4.11[3468] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   34.060005][ T3468] syz.4.11[3468] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   34.155278][ T3470] loop4: detected capacity change from 0 to 2048
[   34.173836][ T3470] EXT4-fs: Ignoring removed oldalloc option
[   34.201089][ T3470] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.312672][ T3477] capability: warning: `syz.1.14' uses deprecated v2 capabilities in a way that may be insecure
[   34.342598][ T3472] Failed to initialize the IGMP autojoin socket (err -2)
[   34.371232][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.393195][ T3482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15'.
[   34.459882][ T3488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18'.
[   34.466409][ T3475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   34.482081][ T3488] Failed to initialize the IGMP autojoin socket (err -2)
[   34.483750][ T3475] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   34.529254][ T3488] loop4: detected capacity change from 0 to 128
[   34.543658][ T3488] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   34.557793][ T3488] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   34.569086][ T3488] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   34.599457][   T56] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   34.752072][ T3498] Failed to initialize the IGMP autojoin socket (err -2)
[   34.774430][ T3510] Failed to initialize the IGMP autojoin socket (err -2)
[   34.866495][ T3498] chnl_net:caif_netlink_parms(): no params data found
[   34.964124][ T3532] loop4: detected capacity change from 0 to 2048
[   34.970889][ T3532] EXT4-fs: Ignoring removed oldalloc option
[   34.994209][ T3532] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   35.014976][ T3498] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.022167][ T3498] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.031770][ T3498] bridge_slave_0: entered allmulticast mode
[   35.038529][ T3498] bridge_slave_0: entered promiscuous mode
[   35.045494][ T3498] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.052622][ T3498] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.060047][ T3498] bridge_slave_1: entered allmulticast mode
[   35.067035][ T3498] bridge_slave_1: entered promiscuous mode
[   35.111864][ T3498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   35.127124][ T3498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   35.165432][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.198370][ T3498] team0: Port device team_slave_0 added
[   35.216347][ T3498] team0: Port device team_slave_1 added
[   35.263485][ T3498] batman_adv: batadv0: Adding interface: batadv_slave_0
[   35.270616][ T3498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   35.296784][ T3498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   35.311619][ T3498] batman_adv: batadv0: Adding interface: batadv_slave_1
[   35.319101][ T3498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   35.345467][ T3498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   35.356595][ T3550] netlink: 'syz.1.29': attribute type 4 has an invalid length.
[   35.364291][ T3550] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.29'.
[   35.413160][ T3561] 9pnet_fd: Insufficient options for proto=fd
[   35.487414][ T3498] hsr_slave_0: entered promiscuous mode
[   35.505574][ T3498] hsr_slave_1: entered promiscuous mode
[   35.511556][ T3575] loop2: detected capacity change from 0 to 256
[   35.522800][ T3498] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   35.543697][ T3498] Cannot create hsr debugfs directory
[   35.551374][ T3577] loop0: detected capacity change from 0 to 2048
[   35.572939][ T3577] EXT4-fs: Ignoring removed oldalloc option
[   35.591537][ T3584] syz.1.37[3584] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   35.591596][ T3584] syz.1.37[3584] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   35.603251][ T3584] syz.1.37[3584] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   35.640046][ T3577] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   35.675596][ T3594] FAULT_INJECTION: forcing a failure.
[   35.675596][ T3594] name failslab, interval 1, probability 0, space 0, times 1
[   35.688340][ T3594] CPU: 1 UID: 0 PID: 3594 Comm: syz.2.39 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0
[   35.698879][ T3594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   35.709135][ T3594] Call Trace:
[   35.712478][ T3594]  <TASK>
[   35.715521][ T3594]  dump_stack_lvl+0xf2/0x150
[   35.720127][ T3594]  dump_stack+0x15/0x1a
[   35.724331][ T3594]  should_fail_ex+0x223/0x230
[   35.729015][ T3594]  should_failslab+0x8f/0xb0
[   35.733651][ T3594]  kmem_cache_alloc_node_noprof+0x59/0x320
[   35.739488][ T3594]  ? __alloc_skb+0x10b/0x310
[   35.744108][ T3594]  __alloc_skb+0x10b/0x310
[   35.748569][ T3594]  alloc_skb_with_frags+0x80/0x450
[   35.753716][ T3594]  ? search_extable+0x54/0x80
[   35.758424][ T3594]  ? rep_movs_alternative+0x15/0x70
[   35.763683][ T3594]  ? __rcu_read_unlock+0x4e/0x70
[   35.768776][ T3594]  ? ref_tracker_alloc+0x1f5/0x2f0
[   35.773892][ T3594]  sock_alloc_send_pskb+0x435/0x4f0
[   35.779110][ T3594]  ? __rcu_read_unlock+0x4e/0x70
[   35.784070][ T3594]  raw_sendmsg+0x15c/0x950
[   35.788604][ T3594]  ? __pfx_raw_sendmsg+0x10/0x10
[   35.793583][ T3594]  __sock_sendmsg+0x140/0x180
[   35.798272][ T3594]  ____sys_sendmsg+0x312/0x410
[   35.803182][ T3594]  __sys_sendmsg+0x19d/0x230
[   35.807785][ T3594]  __x64_sys_sendmsg+0x46/0x50
[   35.812568][ T3594]  x64_sys_call+0x2734/0x2dc0
[   35.817350][ T3594]  do_syscall_64+0xc9/0x1c0
[   35.821883][ T3594]  ? clear_bhb_loop+0x55/0xb0
[   35.826626][ T3594]  ? clear_bhb_loop+0x55/0xb0
[   35.831312][ T3594]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   35.837237][ T3594] RIP: 0033:0x7fa495fbff19
[   35.841659][ T3594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   35.861312][ T3594] RSP: 002b:00007fa494637058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   35.869734][ T3594] RAX: ffffffffffffffda RBX: 00007fa496185fa0 RCX: 00007fa495fbff19
[   35.877705][ T3594] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003
[   35.885703][ T3594] RBP: 00007fa4946370a0 R08: 0000000000000000 R09: 0000000000000000
[   35.893689][ T3594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   35.901671][ T3594] R13: 0000000000000000 R14: 00007fa496185fa0 R15: 00007ffef2712c58
[   35.909689][ T3594]  </TASK>
[   35.951894][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.062679][ T3608] Failed to initialize the IGMP autojoin socket (err -2)
[   36.149213][ T3615] FAULT_INJECTION: forcing a failure.
[   36.149213][ T3615] name failslab, interval 1, probability 0, space 0, times 0
[   36.161992][ T3615] CPU: 1 UID: 0 PID: 3615 Comm: syz.2.47 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0
[   36.165104][ T3498] netdevsim netdevsim5 netdevsim0: renamed from eth1
[   36.172504][ T3615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   36.172520][ T3615] Call Trace:
[   36.192569][ T3615]  <TASK>
[   36.195559][ T3615]  dump_stack_lvl+0xf2/0x150
[   36.200217][ T3615]  dump_stack+0x15/0x1a
[   36.204462][ T3615]  should_fail_ex+0x223/0x230
[   36.209252][ T3615]  should_failslab+0x8f/0xb0
[   36.213997][ T3615]  kmem_cache_alloc_noprof+0x52/0x320
[   36.219446][ T3615]  ? posix_lock_inode+0x156/0x2470
[   36.224629][ T3615]  posix_lock_inode+0x156/0x2470
[   36.229627][ T3615]  ? file_has_perm+0x329/0x370
[   36.234417][ T3615]  fcntl_setlk+0x686/0x980
[   36.238858][ T3615]  do_fcntl+0x58b/0xe10
[   36.243028][ T3615]  __se_sys_fcntl+0xbd/0x1b0
[   36.247683][ T3615]  __x64_sys_fcntl+0x43/0x50
[   36.252369][ T3615]  x64_sys_call+0x2129/0x2dc0
[   36.257057][ T3615]  do_syscall_64+0xc9/0x1c0
[   36.261566][ T3615]  ? clear_bhb_loop+0x55/0xb0
[   36.266249][ T3615]  ? clear_bhb_loop+0x55/0xb0
[   36.270960][ T3615]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   36.276905][ T3615] RIP: 0033:0x7fa495fbff19
[   36.281362][ T3615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   36.301064][ T3615] RSP: 002b:00007fa494637058 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[   36.309534][ T3615] RAX: ffffffffffffffda RBX: 00007fa496185fa0 RCX: 00007fa495fbff19
[   36.317525][ T3615] RDX: 0000000020000180 RSI: 0000000000000025 RDI: 0000000000000003
[   36.325499][ T3615] RBP: 00007fa4946370a0 R08: 0000000000000000 R09: 0000000000000000
[   36.333476][ T3615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   36.341454][ T3615] R13: 0000000000000000 R14: 00007fa496185fa0 R15: 00007ffef2712c58
[   36.349438][ T3615]  </TASK>
[   36.404878][ T3498] netdevsim netdevsim5 netdevsim1: renamed from eth2
[   36.443849][ T3498] netdevsim netdevsim5 netdevsim2: renamed from eth3
[   36.492387][ T3634] loop4: detected capacity change from 0 to 2048
[   36.505404][ T3634] EXT4-fs: Ignoring removed oldalloc option
[   36.518107][ T3498] netdevsim netdevsim5 netdevsim3: renamed from eth4
[   36.525223][ T3637] FAULT_INJECTION: forcing a failure.
[   36.525223][ T3637] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   36.538436][ T3637] CPU: 1 UID: 0 PID: 3637 Comm: syz.1.52 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0
[   36.543949][ T3629] mmap: syz.0.51 (3629) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   36.548943][ T3637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   36.548961][ T3637] Call Trace:
[   36.548970][ T3637]  <TASK>
[   36.548986][ T3637]  dump_stack_lvl+0xf2/0x150
[   36.574958][ T3634] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.577103][ T3637]  dump_stack+0x15/0x1a
[   36.597961][ T3637]  should_fail_ex+0x223/0x230
[   36.598004][ T3637]  should_fail+0xb/0x10
[   36.598032][ T3637]  should_fail_usercopy+0x1a/0x20
[   36.598094][ T3637]  _copy_to_user+0x20/0xa0
[   36.598129][ T3637]  simple_read_from_buffer+0xa0/0x110
[   36.598165][ T3637]  proc_fail_nth_read+0xf9/0x140
[   36.598200][ T3637]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   36.598278][ T3637]  vfs_read+0x1a2/0x700
[   36.598308][ T3637]  ? __rcu_read_unlock+0x4e/0x70
[   36.598356][ T3637]  ? __fget_files+0x17c/0x1c0
[   36.598399][ T3637]  ksys_read+0xe8/0x1b0
[   36.598431][ T3637]  __x64_sys_read+0x42/0x50
[   36.598462][ T3637]  x64_sys_call+0x2874/0x2dc0
[   36.598567][ T3637]  do_syscall_64+0xc9/0x1c0
[   36.598586][ T3637]  ? clear_bhb_loop+0x55/0xb0
[   36.598609][ T3637]  ? clear_bhb_loop+0x55/0xb0
[   36.598632][ T3637]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   36.598814][ T3637] RIP: 0033:0x7f95b311e92c
[   36.598833][ T3637] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   36.598856][ T3637] RSP: 002b:00007f95b1776050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   36.598912][ T3637] RAX: ffffffffffffffda RBX: 00007f95b32e6080 RCX: 00007f95b311e92c
[   36.598928][ T3637] RDX: 000000000000000f RSI: 00007f95b17760b0 RDI: 0000000000000008
[   36.598944][ T3637] RBP: 00007f95b17760a0 R08: 0000000000000000 R09: 0000000000000000
[   36.598958][ T3637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   36.598974][ T3637] R13: 0000000000000001 R14: 00007f95b32e6080 R15: 00007ffcb1fac668
[   36.599057][ T3637]  </TASK>
[   36.772120][ T3631] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   36.800909][   T56] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   36.824218][ T3631] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   36.840717][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.863685][   T56] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   36.893131][ T3631] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   36.967813][   T56] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   36.998876][ T3631] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   37.096944][ T3631] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   37.116694][ T3631] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   37.147781][ T3498] 8021q: adding VLAN 0 to HW filter on device team0
[   37.161334][ T3657] loop1: detected capacity change from 0 to 1024
[   37.164642][   T56] bridge_slave_1: left allmulticast mode
[   37.173445][   T56] bridge_slave_1: left promiscuous mode
[   37.179215][   T56] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.189651][   T56] bridge_slave_0: left allmulticast mode
[   37.195374][   T56] bridge_slave_0: left promiscuous mode
[   37.201177][   T56] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.220619][ T3657] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.250498][ T3657] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   37.285618][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.359628][   T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   37.369700][   T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   37.380691][   T56] bond0 (unregistering): Released all slaves
[   37.404526][ T3631] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   37.408372][ T3664] loop0: detected capacity change from 0 to 1024
[   37.416943][ T3631] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   37.429497][ T3664] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.449553][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.456681][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.467135][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.474285][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.484832][ T3662] vlan1: entered promiscuous mode
[   37.488934][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.515713][ T3661] syz.1.59 uses obsolete (PF_INET,SOCK_PACKET)
[   37.522239][ T3498] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   37.532721][ T3498] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   37.533115][ T3631] syz.2.53 (3631) used greatest stack depth: 10648 bytes left
[   37.589026][   T56] hsr_slave_0: left promiscuous mode
[   37.600322][   T56] hsr_slave_1: left promiscuous mode
[   37.603060][ T3674] Failed to initialize the IGMP autojoin socket (err -2)
[   37.613186][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   37.620756][   T56] batman_adv: batadv0: Removing interface: batadv_slave_0
[   37.628194][ T3676] loop2: detected capacity change from 0 to 2048
[   37.634956][ T3676] EXT4-fs: Ignoring removed oldalloc option
[   37.643056][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   37.647532][ T3676] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.650948][   T56] batman_adv: batadv0: Removing interface: batadv_slave_1
[   37.671549][   T56] veth1_macvtap: left promiscuous mode
[   37.677157][   T56] veth0_macvtap: left promiscuous mode
[   37.682744][   T56] veth1_vlan: left promiscuous mode
[   37.688102][   T56] veth0_vlan: left promiscuous mode
[   37.759464][ T3681] loop4: detected capacity change from 0 to 512
[   37.775614][   T56] team0 (unregistering): Port device team_slave_1 removed
[   37.784391][ T3681] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.797798][ T3681] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   37.798500][   T56] team0 (unregistering): Port device team_slave_0 removed
[   37.842927][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.865428][ T3687] loop4: detected capacity change from 0 to 512
[   37.872893][ T3687] EXT4-fs: Ignoring removed mblk_io_submit option
[   37.879894][ T3687] EXT4-fs: Ignoring removed bh option
[   37.920476][ T3687] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   37.923458][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.933604][ T3687] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   37.949632][ T3498] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.970759][ T3687] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal
[   38.092354][ T3705] loop2: detected capacity change from 0 to 128
[   38.103600][ T3705] EXT4-fs: Ignoring removed nobh option
[   38.145700][   T29] kauditd_printk_skb: 134 callbacks suppressed
[   38.145717][   T29] audit: type=1400 audit(1733937247.699:278): avc:  denied  { write } for  pid=3711 comm="syz.0.71" name="001" dev="devtmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   38.146487][ T3705] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   38.199980][ T3705] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   38.200385][ T3712] usb usb4: usbfs: process 3712 (syz.0.71) did not claim interface 0 before use
[   38.236940][ T3705] tipc: Started in network mode
[   38.241932][ T3705] tipc: Node identity ac14140f, cluster identity 4711
[   38.249057][ T3705] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   38.267055][ T3660] vlan1: left promiscuous mode
[   38.277427][   T29] audit: type=1326 audit(1733937247.839:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3711 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d7feff19 code=0x7ffc0000
[   38.300658][   T29] audit: type=1326 audit(1733937247.839:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3711 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d7feff19 code=0x7ffc0000
[   38.323923][   T29] audit: type=1326 audit(1733937247.839:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3711 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fd4d7feff19 code=0x7ffc0000
[   38.348948][   T29] audit: type=1326 audit(1733937247.839:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3711 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d7feff19 code=0x7ffc0000
[   38.372301][   T29] audit: type=1326 audit(1733937247.839:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3711 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4d7feff19 code=0x7ffc0000
[   38.375069][ T3296] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   38.395788][   T29] audit: type=1326 audit(1733937247.839:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3711 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d7feff19 code=0x7ffc0000
[   38.429068][   T29] audit: type=1326 audit(1733937247.839:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3711 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4d7feff19 code=0x7ffc0000
[   38.433312][ T3498] veth0_vlan: entered promiscuous mode
[   38.452252][   T29] audit: type=1326 audit(1733937247.839:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3711 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d7feff19 code=0x7ffc0000
[   38.480858][   T29] audit: type=1326 audit(1733937247.839:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3711 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4d7feff19 code=0x7ffc0000
[   38.524141][ T3498] veth1_vlan: entered promiscuous mode
[   38.552325][ T3498] veth0_macvtap: entered promiscuous mode
[   38.562184][ T3725] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in;
[   38.562184][ T3725]    program syz.4.73 not setting count and/or reply_len properly
[   38.584868][ T3498] veth1_macvtap: entered promiscuous mode
[   38.625390][ T3729] loop2: detected capacity change from 0 to 2048
[   38.636442][ T3729] EXT4-fs: Ignoring removed oldalloc option
[   38.650863][ T3729] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.663189][ T3498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.673733][ T3498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.683658][ T3498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.694216][ T3498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.704075][ T3498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.714583][ T3498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.732452][ T3498] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.780580][ T3498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.791193][ T3498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.801096][ T3498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.811543][ T3498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.821377][ T3498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.831817][ T3498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.843961][ T3498] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.856106][ T3498] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[   38.874094][ T3498] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[   38.892130][ T3498] wireguard: wg0: Could not create IPv4 socket
[   38.899198][ T3498] wireguard: wg1: Could not create IPv4 socket
[   38.908186][ T3498] wireguard: wg2: Could not create IPv4 socket
[   38.961294][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.013734][ T3740] loop4: detected capacity change from 0 to 512
[   39.043848][ T3744] Failed to initialize the IGMP autojoin socket (err -2)
[   39.075462][ T3740] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   39.089053][ T3740] EXT4-fs (loop4): 1 truncate cleaned up
[   39.095102][ T3740] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.226299][ T2079] bridge_slave_1: left allmulticast mode
[   39.232021][ T2079] bridge_slave_1: left promiscuous mode
[   39.237755][ T2079] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.277113][ T3763] FAULT_INJECTION: forcing a failure.
[   39.277113][ T3763] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   39.281279][ T3740] EXT4-fs error (device loop4): ext4_xattr_inode_iget:440: comm syz.4.78: inode #1073372648: comm syz.4.78: iget: illegal inode #
[   39.290299][ T3763] CPU: 1 UID: 0 PID: 3763 Comm: syz.5.85 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0
[   39.290332][ T3763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   39.304979][ T3740] EXT4-fs error (device loop4): ext4_xattr_inode_iget:445: comm syz.4.78: error while reading EA inode 1073372648 err=-117
[   39.314165][ T3763] Call Trace:
[   39.314175][ T3763]  <TASK>
[   39.314184][ T3763]  dump_stack_lvl+0xf2/0x150
[   39.314226][ T3763]  dump_stack+0x15/0x1a
[   39.325504][ T3740] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #15: comm syz.4.78: corrupted xattr block 33: invalid header
[   39.337033][ T3763]  should_fail_ex+0x223/0x230
[   39.337074][ T3763]  should_fail+0xb/0x10
[   39.340659][ T3740] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117)
[   39.343293][ T3763]  should_fail_usercopy+0x1a/0x20
[   39.388501][ T3763]  strncpy_from_user+0x25/0x210
[   39.393526][ T3763]  ? kmem_cache_alloc_noprof+0x18e/0x320
[   39.399232][ T3763]  ? getname_flags+0x81/0x3b0
[   39.403958][ T3763]  getname_flags+0xb0/0x3b0
[   39.405092][ T3748] Failed to initialize the IGMP autojoin socket (err -2)
[   39.408469][ T3763]  user_path_at+0x26/0x120
[   39.420102][ T3763]  __se_sys_move_mount+0xfd/0x730
[   39.425181][ T3763]  ? fput+0x1c4/0x200
[   39.429261][ T3763]  __x64_sys_move_mount+0x67/0x80
[   39.434346][ T3763]  x64_sys_call+0x2608/0x2dc0
[   39.439078][ T3763]  do_syscall_64+0xc9/0x1c0
[   39.443620][ T3763]  ? clear_bhb_loop+0x55/0xb0
[   39.448469][ T3763]  ? clear_bhb_loop+0x55/0xb0
[   39.453157][ T3763]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   39.459078][ T3763] RIP: 0033:0x7fcc18ceff19
[   39.463540][ T3763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   39.483315][ T3763] RSP: 002b:00007fcc17367058 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad
[   39.491804][ T3763] RAX: ffffffffffffffda RBX: 00007fcc18eb5fa0 RCX: 00007fcc18ceff19
[   39.499883][ T3763] RDX: ffffffffffffff9c RSI: 0000000020000140 RDI: 0000000000000004
[   39.507887][ T3763] RBP: 00007fcc173670a0 R08: 0000000000000000 R09: 0000000000000000
[   39.515943][ T3763] R10: 0000000020000300 R11: 0000000000000246 R12: 0000000000000001
[   39.521419][ T3764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   39.523947][ T3763] R13: 0000000000000000 R14: 00007fcc18eb5fa0 R15: 00007ffd7e286588
[   39.523976][ T3763]  </TASK>
[   39.534307][ T3764] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   39.551331][ T2079] bridge_slave_0: left allmulticast mode
[   39.557099][ T2079] bridge_slave_0: left promiscuous mode
[   39.562809][ T2079] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.643388][ T3771] Failed to initialize the IGMP autojoin socket (err -2)
[   39.677883][ T2079] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   39.687843][ T2079] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   39.697378][ T2079] bond0 (unregistering): Released all slaves
[   39.744427][ T2079] hsr_slave_0: left promiscuous mode
[   39.751540][ T2079] hsr_slave_1: left promiscuous mode
[   39.778713][ T2079] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   39.786212][ T2079] batman_adv: batadv0: Removing interface: batadv_slave_0
[   39.807345][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.823805][ T3778] loop0: detected capacity change from 0 to 2048
[   39.833072][ T2079] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   39.840612][ T2079] batman_adv: batadv0: Removing interface: batadv_slave_1
[   39.854926][ T3778] EXT4-fs: Ignoring removed oldalloc option
[   39.858350][ T3791] syz.5.91[3791] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   39.865934][ T3791] syz.5.91[3791] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   39.883847][ T3793] FAULT_INJECTION: forcing a failure.
[   39.883847][ T3793] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   39.901144][ T3791] syz.5.91[3791] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   39.908238][ T3793] CPU: 1 UID: 0 PID: 3793 Comm: syz.4.90 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0
[   39.929878][ T3793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   39.939967][ T3793] Call Trace:
[   39.943273][ T3793]  <TASK>
[   39.946224][ T3793]  dump_stack_lvl+0xf2/0x150
[   39.950844][ T3793]  dump_stack+0x15/0x1a
[   39.955031][ T3793]  should_fail_ex+0x223/0x230
[   39.959763][ T3793]  should_fail+0xb/0x10
[   39.963972][ T3793]  should_fail_usercopy+0x1a/0x20
[   39.969014][ T3793]  _copy_from_user+0x1e/0xb0
[   39.973625][ T3793]  usbdev_ioctl+0x1674/0x3e00
[   39.978328][ T3793]  ? do_vfs_ioctl+0x96e/0x1530
[   39.983109][ T3793]  ? selinux_file_ioctl+0x2f7/0x380
[   39.988330][ T3793]  ? __pfx_usbdev_ioctl+0x10/0x10
[   39.993385][ T3793]  __se_sys_ioctl+0xc9/0x140
[   39.998108][ T3793]  __x64_sys_ioctl+0x43/0x50
[   40.002713][ T3793]  x64_sys_call+0x1690/0x2dc0
[   40.007408][ T3793]  do_syscall_64+0xc9/0x1c0
[   40.012060][ T3793]  ? clear_bhb_loop+0x55/0xb0
[   40.016752][ T3793]  ? clear_bhb_loop+0x55/0xb0
[   40.021443][ T3793]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   40.027525][ T3793] RIP: 0033:0x7f38b77cff19
[   40.031946][ T3793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   40.051621][ T3793] RSP: 002b:00007f38b5e41058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   40.060041][ T3793] RAX: ffffffffffffffda RBX: 00007f38b7995fa0 RCX: 00007f38b77cff19
[   40.068017][ T3793] RDX: 0000000020000040 RSI: 00000000c0105500 RDI: 0000000000000003
[   40.075991][ T3793] RBP: 00007f38b5e410a0 R08: 0000000000000000 R09: 0000000000000000
[   40.083988][ T3793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   40.091984][ T3793] R13: 0000000000000000 R14: 00007f38b7995fa0 R15: 00007ffd134099b8
[   40.099991][ T3793]  </TASK>
[   40.119952][ T2079] veth1_macvtap: left promiscuous mode
[   40.125485][ T2079] veth0_macvtap: left promiscuous mode
[   40.131098][ T2079] veth1_vlan: left promiscuous mode
[   40.136381][ T2079] veth0_vlan: left promiscuous mode
[   40.201935][ T3778] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.231559][ T2079] team0 (unregistering): Port device team_slave_1 removed
[   40.245975][ T2079] team0 (unregistering): Port device team_slave_0 removed
[   40.247930][ T3807] Failed to initialize the IGMP autojoin socket (err -2)
[   40.349661][ T3752] Failed to initialize the IGMP autojoin socket (err -2)
[   40.359689][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.529709][ T3845] loop0: detected capacity change from 0 to 128
[   40.543324][ T3845] FAT-fs (loop0): invalid media value (0x00)
[   40.549417][ T3845] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   40.558758][ T3845] FAT-fs (loop0): Can't find a valid FAT filesystem
[   40.582208][ T3846] dccp_v4_rcv: dropped packet with invalid checksum
[   40.629005][ T3832] loop0: detected capacity change from 0 to 1024
[   40.662649][ T3832] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.717915][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.806054][ T3869] loop0: detected capacity change from 0 to 2048
[   40.812596][ T3875] FAULT_INJECTION: forcing a failure.
[   40.812596][ T3875] name failslab, interval 1, probability 0, space 0, times 0
[   40.823108][ T3852] Failed to initialize the IGMP autojoin socket (err -2)
[   40.825253][ T3875] CPU: 0 UID: 0 PID: 3875 Comm: syz.2.103 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0
[   40.842831][ T3875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   40.853054][ T3875] Call Trace:
[   40.856341][ T3875]  <TASK>
[   40.859279][ T3875]  dump_stack_lvl+0xf2/0x150
[   40.863923][ T3875]  dump_stack+0x15/0x1a
[   40.868096][ T3875]  should_fail_ex+0x223/0x230
[   40.872839][ T3875]  should_failslab+0x8f/0xb0
[   40.877527][ T3875]  kmem_cache_alloc_node_noprof+0x59/0x320
[   40.883342][ T3875]  ? __alloc_skb+0x10b/0x310
[   40.887972][ T3875]  __alloc_skb+0x10b/0x310
[   40.892400][ T3875]  netlink_ack+0xef/0x4f0
[   40.896926][ T3875]  nfnetlink_rcv+0x1376/0x15d0
[   40.901704][ T3875]  ? kmem_cache_free+0xdc/0x2d0
[   40.906632][ T3875]  netlink_unicast+0x599/0x670
[   40.911467][ T3875]  netlink_sendmsg+0x5cc/0x6e0
[   40.916270][ T3875]  ? __pfx_netlink_sendmsg+0x10/0x10
[   40.921565][ T3875]  __sock_sendmsg+0x140/0x180
[   40.926266][ T3875]  ____sys_sendmsg+0x312/0x410
[   40.931338][ T3875]  __sys_sendmsg+0x19d/0x230
[   40.936053][ T3875]  __x64_sys_sendmsg+0x46/0x50
[   40.940980][ T3875]  x64_sys_call+0x2734/0x2dc0
[   40.945677][ T3875]  do_syscall_64+0xc9/0x1c0
[   40.950200][ T3875]  ? clear_bhb_loop+0x55/0xb0
[   40.955039][ T3875]  ? clear_bhb_loop+0x55/0xb0
[   40.959786][ T3875]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   40.965701][ T3875] RIP: 0033:0x7fa495fbff19
[   40.970184][ T3875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   40.989814][ T3875] RSP: 002b:00007fa494637058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   40.998286][ T3875] RAX: ffffffffffffffda RBX: 00007fa496185fa0 RCX: 00007fa495fbff19
[   41.006263][ T3875] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003
[   41.014264][ T3875] RBP: 00007fa4946370a0 R08: 0000000000000000 R09: 0000000000000000
[   41.022311][ T3875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   41.030288][ T3875] R13: 0000000000000000 R14: 00007fa496185fa0 R15: 00007ffef2712c58
[   41.038287][ T3875]  </TASK>
[   41.103476][ T3869] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.114341][ T3885] loop4: detected capacity change from 0 to 1764
[   41.133228][ T3869] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   41.198330][ T3894] loop2: detected capacity change from 0 to 2048
[   41.205221][ T3894] EXT4-fs: Ignoring removed oldalloc option
[   41.299491][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.312443][ T3894] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.393744][ T3918] netlink: 16 bytes leftover after parsing attributes in process `syz.0.107'.
[   41.459411][ T3918] Failed to initialize the IGMP autojoin socket (err -2)
[   41.471571][ T3927] loop4: detected capacity change from 0 to 1024
[   41.477040][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.478857][ T3927] EXT4-fs: Ignoring removed nomblk_io_submit option
[   41.517574][ T3927] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.547249][ T3938] loop2: detected capacity change from 0 to 256
[   41.581369][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.645959][ T3951] dccp_v4_rcv: dropped packet with invalid checksum
[   41.696811][ T3852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.707323][ T3852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.717230][ T3852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.727686][ T3852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.738529][ T3852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.749009][ T3852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.758851][ T3852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.769339][ T3852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.792214][ T3852] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[   41.818282][ T3852] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[   41.839473][ T3852] wireguard: wg0: Could not create IPv4 socket
[   41.883921][ T3852] wireguard: wg1: Could not create IPv4 socket
[   41.894284][ T3852] wireguard: wg2: Could not create IPv4 socket
[   41.952465][ T3991] Failed to initialize the IGMP autojoin socket (err -2)
[   41.962523][ T3987] loop4: detected capacity change from 0 to 2048
[   42.007725][ T3987]  loop4: p1 < > p4
[   42.013108][ T3987] loop4: p4 size 8388608 extends beyond EOD, truncated
[   42.023718][ T2999]  loop4: p1 < > p4
[   42.028302][ T2999] loop4: p4 size 8388608 extends beyond EOD, truncated
[   42.100901][ T4010] loop6: detected capacity change from 0 to 2048
[   42.110712][ T4010] EXT4-fs: Ignoring removed oldalloc option
[   42.117822][ T2999]  loop4: p1 < > p4
[   42.122153][ T2999] loop4: p4 size 8388608 extends beyond EOD, truncated
[   42.142412][ T4010] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.169746][ T3513] udevd[3513]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[   42.181475][ T3517] udevd[3517]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[   42.267244][ T3852] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.304845][ T4042] loop6: detected capacity change from 0 to 512
[   42.314823][ T4042] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   42.328523][ T4042] EXT4-fs (loop6): 1 truncate cleaned up
[   42.339125][ T4042] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.383075][ T4042] EXT4-fs error (device loop6): ext4_xattr_inode_iget:440: comm syz.6.121: inode #1073372648: comm syz.6.121: iget: illegal inode #
[   42.407927][ T4042] EXT4-fs error (device loop6): ext4_xattr_inode_iget:445: comm syz.6.121: error while reading EA inode 1073372648 err=-117
[   42.431028][ T4042] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2977: inode #15: comm syz.6.121: corrupted xattr block 33: invalid header
[   42.457771][ T4042] EXT4-fs warning (device loop6): ext4_evict_inode:276: xattr delete (err -117)
[   42.514394][   T11] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.545482][ T3852] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.573565][ T4076] can0: slcan on pts0.
[   42.587124][   T11] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.606572][ T4076] loop4: detected capacity change from 0 to 1024
[   42.618863][ T4076] EXT4-fs: Ignoring removed nobh option
[   42.624974][ T4076] EXT4-fs: Ignoring removed orlov option
[   42.657302][   T11] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.686025][ T4087] netlink: 44 bytes leftover after parsing attributes in process `syz.6.128'.
[   42.697023][ T4076] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.712613][ T4076] netlink: 'syz.4.127': attribute type 1 has an invalid length.
[   42.724065][   T11] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.764959][ T4101] Failed to initialize the IGMP autojoin socket (err -2)
[   42.797828][ T4075] can0 (unregistered): slcan off pts0.
[   42.804678][   T11] bridge_slave_1: left allmulticast mode
[   42.810392][   T11] bridge_slave_1: left promiscuous mode
[   42.816187][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.833268][   T11] bridge_slave_0: left allmulticast mode
[   42.839210][   T11] bridge_slave_0: left promiscuous mode
[   42.845018][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.855670][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.959945][ T4118] loop4: detected capacity change from 0 to 2048
[   42.983767][ T4118] EXT4-fs: Ignoring removed oldalloc option
[   43.042134][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   43.051453][ T4118] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.056934][ T4141] FAULT_INJECTION: forcing a failure.
[   43.056934][ T4141] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   43.076794][ T4141] CPU: 0 UID: 0 PID: 4141 Comm: syz.0.133 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0
[   43.087961][ T4141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   43.098161][ T4141] Call Trace:
[   43.101462][ T4141]  <TASK>
[   43.104497][ T4141]  dump_stack_lvl+0xf2/0x150
[   43.106397][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   43.109109][ T4141]  dump_stack+0x15/0x1a
[   43.121779][ T4141]  should_fail_ex+0x223/0x230
[   43.126528][ T4141]  should_fail+0xb/0x10
[   43.130718][ T4141]  should_fail_usercopy+0x1a/0x20
[   43.135835][ T4141]  _copy_from_user+0x1e/0xb0
[   43.140478][ T4141]  snd_seq_ioctl+0x11b/0x2a0
[   43.145198][ T4141]  ? __pfx_snd_seq_ioctl+0x10/0x10
[   43.150353][ T4141]  __se_sys_ioctl+0xc9/0x140
[   43.154969][ T4141]  __x64_sys_ioctl+0x43/0x50
[   43.159794][ T4141]  x64_sys_call+0x1690/0x2dc0
[   43.164497][ T4141]  do_syscall_64+0xc9/0x1c0
[   43.168392][   T29] kauditd_printk_skb: 187 callbacks suppressed
[   43.168405][   T29] audit: type=1400 audit(1733937252.729:475): avc:  denied  { map } for  pid=4117 comm="syz.4.131" path="/41/file0/blkio.bfq.avg_queue_size" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   43.169073][ T4141]  ? clear_bhb_loop+0x55/0xb0
[   43.175252][   T29] audit: type=1400 audit(1733937252.729:476): avc:  denied  { write } for  pid=4117 comm="syz.4.131" path="/41/file0/blkio.bfq.avg_queue_size" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   43.199172][ T4141]  ? clear_bhb_loop+0x55/0xb0
[   43.199199][ T4141]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   43.199241][ T4141] RIP: 0033:0x7fd4d7feff19
[   43.243162][ T4141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   43.262811][ T4141] RSP: 002b:00007fd4d6667058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   43.271267][ T4141] RAX: ffffffffffffffda RBX: 00007fd4d81b5fa0 RCX: 00007fd4d7feff19
[   43.279270][ T4141] RDX: 0000000020000000 RSI: 0000000040a85321 RDI: 0000000000000003
[   43.287272][ T4141] RBP: 00007fd4d66670a0 R08: 0000000000000000 R09: 0000000000000000
[   43.295335][ T4141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   43.303328][ T4141] R13: 0000000000000000 R14: 00007fd4d81b5fa0 R15: 00007ffd125345d8
[   43.311367][ T4141]  </TASK>
[   43.324123][   T11] bond0 (unregistering): Released all slaves
[   43.378329][   T11] tipc: Left network mode
[   43.382829][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.394124][ T4081] Failed to initialize the IGMP autojoin socket (err -2)
[   43.405473][   T11] hsr_slave_0: left promiscuous mode
[   43.415024][   T29] audit: type=1400 audit(1733937252.969:477): avc:  denied  { append } for  pid=4169 comm="syz.0.136" name="001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   43.444961][ T4170] loop0: detected capacity change from 0 to 1024
[   43.451627][   T11] hsr_slave_1: left promiscuous mode
[   43.457718][ T4170] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   43.466817][ T4170] EXT4-fs (loop0): The Hurd can't support 64-bit file systems
[   43.467129][   T29] audit: type=1400 audit(1733937253.019:478): avc:  denied  { read } for  pid=2981 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   43.496343][   T29] audit: type=1400 audit(1733937253.019:479): avc:  denied  { search } for  pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   43.517842][   T29] audit: type=1400 audit(1733937253.019:480): avc:  denied  { open } for  pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   43.540443][   T29] audit: type=1400 audit(1733937253.019:481): avc:  denied  { getattr } for  pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   43.564003][   T29] audit: type=1400 audit(1733937253.029:482): avc:  denied  { read } for  pid=4169 comm="syz.0.136" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   43.588237][   T29] audit: type=1400 audit(1733937253.029:483): avc:  denied  { open } for  pid=4169 comm="syz.0.136" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   43.612816][   T29] audit: type=1400 audit(1733937253.079:484): avc:  denied  { prog_run } for  pid=4169 comm="syz.0.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   43.631810][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   43.639277][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[   43.651524][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   43.659026][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[   43.671238][   T11] veth1_macvtap: left promiscuous mode
[   43.676855][   T11] veth0_macvtap: left promiscuous mode
[   43.682368][   T11] veth1_vlan: left promiscuous mode
[   43.687652][   T11] veth0_vlan: left promiscuous mode
[   43.790841][   T11] team0 (unregistering): Port device team_slave_1 removed
[   43.801109][   T11] team0 (unregistering): Port device team_slave_0 removed
[   43.880002][ T4219] can0: slcan on pts0.
[   43.890407][ T4219] loop6: detected capacity change from 0 to 1024
[   43.905574][ T4219] EXT4-fs: Ignoring removed nobh option
[   43.911244][ T4219] EXT4-fs: Ignoring removed orlov option
[   43.957228][ T4219] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.065854][ T4217] can0 (unregistered): slcan off pts0.
[   44.161400][ T3852] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.302900][ T4260] loop6: detected capacity change from 0 to 2048
[   44.313866][ T4269] Failed to initialize the IGMP autojoin socket (err -2)
[   44.342873][ T4260] EXT4-fs: Ignoring removed oldalloc option
[   44.371108][ T4236] Failed to initialize the IGMP autojoin socket (err -2)
[   44.396786][ T4260] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.597551][ T4292] netlink: 3 bytes leftover after parsing attributes in process `syz.4.148'.
[   44.624243][ T3852] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.632805][ T4292] 0ªX¹¦À: renamed from caif0
[   44.661862][ T4292] 0ªX¹¦À: entered allmulticast mode
[   44.667320][ T4292] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[   44.707235][ T4304] process 'syz.0.151' launched '/dev/fd/3' with NULL argv: empty string added
[   44.780682][ T4297] Zero length message leads to an empty skb
[   44.913255][ T4326] Failed to initialize the IGMP autojoin socket (err -2)
[   45.001543][ T4305] Failed to initialize the IGMP autojoin socket (err -2)
[   45.127861][ T4332] Failed to initialize the IGMP autojoin socket (err -2)
[   45.151217][ T4334] Failed to initialize the IGMP autojoin socket (err -2)
[   45.323216][ T4370] loop6: detected capacity change from 0 to 2048
[   45.353586][ T4370] EXT4-fs: Ignoring removed oldalloc option
[   45.400251][ T4370] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.531869][ T4371] Failed to initialize the IGMP autojoin socket (err -2)
[   45.561657][ T4404] netlink: 12 bytes leftover after parsing attributes in process `syz.0.164'.
[   45.573590][ T3852] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.647249][ T4387] Failed to initialize the IGMP autojoin socket (err -2)
[   45.673493][ T4413] FAULT_INJECTION: forcing a failure.
[   45.673493][ T4413] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   45.686630][ T4413] CPU: 0 UID: 0 PID: 4413 Comm: syz.6.165 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0
[   45.697473][ T4413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   45.707553][ T4413] Call Trace:
[   45.710875][ T4413]  <TASK>
[   45.713824][ T4413]  dump_stack_lvl+0xf2/0x150
[   45.718461][ T4413]  dump_stack+0x15/0x1a
[   45.722680][ T4413]  should_fail_ex+0x223/0x230
[   45.727390][ T4413]  should_fail+0xb/0x10
[   45.731578][ T4413]  should_fail_usercopy+0x1a/0x20
[   45.736762][ T4413]  _copy_to_user+0x20/0xa0
[   45.741211][ T4413]  simple_read_from_buffer+0xa0/0x110
[   45.746615][ T4413]  proc_fail_nth_read+0xf9/0x140
[   45.751592][ T4413]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   45.757192][ T4413]  vfs_read+0x1a2/0x700
[   45.761469][ T4413]  ? ldsem_up_read+0x91/0xe0
[   45.766108][ T4413]  ? __rcu_read_unlock+0x4e/0x70
[   45.771155][ T4413]  ? __fget_files+0x17c/0x1c0
[   45.775887][ T4413]  ksys_read+0xe8/0x1b0
[   45.780098][ T4413]  __x64_sys_read+0x42/0x50
[   45.784703][ T4413]  x64_sys_call+0x2874/0x2dc0
[   45.789413][ T4413]  do_syscall_64+0xc9/0x1c0
[   45.793932][ T4413]  ? clear_bhb_loop+0x55/0xb0
[   45.798755][ T4413]  ? clear_bhb_loop+0x55/0xb0
[   45.803459][ T4413]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   45.809435][ T4413] RIP: 0033:0x7fa104d5e92c
[   45.814398][ T4413] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   45.834108][ T4413] RSP: 002b:00007fa1033d7050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   45.842548][ T4413] RAX: ffffffffffffffda RBX: 00007fa104f25fa0 RCX: 00007fa104d5e92c
[   45.850535][ T4413] RDX: 000000000000000f RSI: 00007fa1033d70b0 RDI: 0000000000000007
[   45.858643][ T4413] RBP: 00007fa1033d70a0 R08: 0000000000000000 R09: 0000000000000000
[   45.866635][ T4413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   45.874624][ T4413] R13: 0000000000000000 R14: 00007fa104f25fa0 R15: 00007ffd205ad348
[   45.882626][ T4413]  </TASK>
[   45.980835][ T4420] loop6: detected capacity change from 0 to 512
[   46.048697][ T4420] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.082476][ T4420] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   46.099611][ T4437] loop4: detected capacity change from 0 to 512
[   46.112166][ T4438] Failed to initialize the IGMP autojoin socket (err -2)
[   46.168247][ T3852] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.233289][ T4449] loop4: detected capacity change from 0 to 512
[   46.255648][ T4428] Failed to initialize the IGMP autojoin socket (err -2)
[   46.276506][ T4449] netlink: 24 bytes leftover after parsing attributes in process `syz.4.170'.
[   46.382471][ T4431] Failed to initialize the IGMP autojoin socket (err -2)
[   46.606380][ T4460] netlink: 'syz.6.171': attribute type 21 has an invalid length.
[   46.643498][ T4497] FAULT_INJECTION: forcing a failure.
[   46.643498][ T4497] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   46.656807][ T4497] CPU: 0 UID: 0 PID: 4497 Comm: syz.0.176 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0
[   46.667468][ T4497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   46.677563][ T4497] Call Trace:
[   46.680867][ T4497]  <TASK>
[   46.683833][ T4497]  dump_stack_lvl+0xf2/0x150
[   46.688512][ T4497]  dump_stack+0x15/0x1a
[   46.692705][ T4497]  should_fail_ex+0x223/0x230
[   46.697413][ T4497]  should_fail_alloc_page+0xfd/0x110
[   46.702771][ T4497]  __alloc_pages_noprof+0x109/0x340
[   46.708016][ T4497]  alloc_pages_mpol_noprof+0xb1/0x1e0
[   46.713510][ T4497]  vma_alloc_folio_noprof+0x1a0/0x2f0
[   46.719114][ T4497]  handle_mm_fault+0xdd7/0x2ac0
[   46.724123][ T4497]  exc_page_fault+0x3b9/0x650
[   46.728935][ T4497]  asm_exc_page_fault+0x26/0x30
[   46.733824][ T4497] RIP: 0033:0x7fd4d7f9d54b
[   46.738269][ T4497] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01
[   46.738294][ T4497] RSP: 002b:00007fd4d6643e30 EFLAGS: 00010246
[   46.738326][ T4497] RAX: 00007fd4d6645f50 RBX: 00007fd4d818a620 RCX: 0000000000000000
[   46.738340][ T4497] RDX: 00007fd4d6645f98 RSI: 00007fd4d804ed78 RDI: 00007fd4d6643e50
[   46.738398][ T4497] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000
[   46.738412][ T4497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   46.738425][ T4497] R13: 0000000000000001 R14: 00007fd4d81b6080 R15: 00007ffd125345d8
[   46.738499][ T4497]  </TASK>
[   46.738599][ T4497] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[   46.886498][ T4491] Failed to initialize the IGMP autojoin socket (err -2)
[   46.942439][ T4492] Failed to initialize the IGMP autojoin socket (err -2)
[   47.274624][ T4541] Failed to initialize the IGMP autojoin socket (err -2)
[   47.413501][ T4569] FAULT_INJECTION: forcing a failure.
[   47.413501][ T4569] name failslab, interval 1, probability 0, space 0, times 0
[   47.426298][ T4569] CPU: 0 UID: 0 PID: 4569 Comm: syz.6.180 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0
[   47.436922][ T4569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   47.447012][ T4569] Call Trace:
[   47.450301][ T4569]  <TASK>
[   47.453239][ T4569]  dump_stack_lvl+0xf2/0x150
[   47.457905][ T4569]  dump_stack+0x15/0x1a
[   47.462183][ T4569]  should_fail_ex+0x223/0x230
[   47.467337][ T4569]  should_failslab+0x8f/0xb0
[   47.472027][ T4569]  __kmalloc_node_noprof+0xad/0x410
[   47.477260][ T4569]  ? __kvmalloc_node_noprof+0x72/0x170
[   47.482783][ T4569]  __kvmalloc_node_noprof+0x72/0x170
[   47.488178][ T4569]  sbitmap_init_node+0x1ce/0x370
[   47.493161][ T4569]  sbitmap_queue_init_node+0x3b/0x340
[   47.498572][ T4569]  blk_mq_init_tags+0xc2/0x1a0
[   47.503415][ T4569]  blk_mq_alloc_map_and_rqs+0x133/0x750
[   47.509047][ T4569]  ? kfree+0xd8/0x2f0
[   47.513066][ T4569]  blk_mq_alloc_set_map_and_rqs+0x126/0x4d0
[   47.519096][ T4569]  blk_mq_alloc_tag_set+0x42e/0x610
[   47.524349][ T4569]  loop_add+0x260/0x590
[   47.528539][ T4569]  ? ioctl_has_perm+0x286/0x2e0
[   47.533441][ T4569]  loop_control_ioctl+0xc8/0x440
[   47.538411][ T4569]  ? __pfx_loop_control_ioctl+0x10/0x10
[   47.544000][ T4569]  __se_sys_ioctl+0xc9/0x140
[   47.548644][ T4569]  __x64_sys_ioctl+0x43/0x50
[   47.553344][ T4569]  x64_sys_call+0x1690/0x2dc0
[   47.558045][ T4569]  do_syscall_64+0xc9/0x1c0
[   47.562642][ T4569]  ? clear_bhb_loop+0x55/0xb0
[   47.567339][ T4569]  ? clear_bhb_loop+0x55/0xb0
[   47.572119][ T4569]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   47.578229][ T4569] RIP: 0033:0x7fa104d5ff19
[   47.582680][ T4569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   47.602399][ T4569] RSP: 002b:00007fa1033d7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   47.610842][ T4569] RAX: ffffffffffffffda RBX: 00007fa104f25fa0 RCX: 00007fa104d5ff19
[   47.618849][ T4569] RDX: ffffffffffffffb6 RSI: 0000000000004c80 RDI: 0000000000000009
[   47.626845][ T4569] RBP: 00007fa1033d70a0 R08: 0000000000000000 R09: 0000000000000000
[   47.634926][ T4569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   47.642928][ T4569] R13: 0000000000000000 R14: 00007fa104f25fa0 R15: 00007ffd205ad348
[   47.651033][ T4569]  </TASK>
[   47.680723][ T4569] blk-mq: reduced tag depth (128 -> 64)
[   47.825406][ T4577] Failed to initialize the IGMP autojoin socket (err -2)
[   47.909200][ T4600] Failed to initialize the IGMP autojoin socket (err -2)
[   47.944384][ T4602] loop4: detected capacity change from 0 to 1024
[   47.965420][ T4602] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[   47.975293][ T4602] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[   48.018878][ T4600] netlink: 20 bytes leftover after parsing attributes in process `syz.6.182'.
[   48.029995][ T4602] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   48.057880][ T4602] EXT4-fs error (device loop4): ext4_get_journal_inode:5809: inode #5: comm syz.4.181: unexpected bad inode w/o EXT4_IGET_BAD
[   48.084140][ T4602] EXT4-fs (loop4): no journal found
[   48.089487][ T4602] EXT4-fs (loop4): can't get journal size
[   48.118904][ T4602] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   48.208338][   T29] kauditd_printk_skb: 160 callbacks suppressed
[   48.208408][   T29] audit: type=1400 audit(1733937257.769:645): avc:  denied  { create } for  pid=4599 comm="syz.4.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[   48.236407][ T4607] Failed to initialize the IGMP autojoin socket (err -2)
[   48.254161][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.361445][ T4636] FAULT_INJECTION: forcing a failure.
[   48.361445][ T4636] name failslab, interval 1, probability 0, space 0, times 0
[   48.363322][   T29] audit: type=1326 audit(1733937257.919:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4633 comm="syz.6.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa104d5ff19 code=0x7ffc0000
[   48.374178][ T4636] CPU: 1 UID: 0 PID: 4636 Comm: +}[@ Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0
[   48.397336][   T29] audit: type=1326 audit(1733937257.919:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4633 comm="syz.6.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa104d5ff19 code=0x7ffc0000
[   48.407494][ T4636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   48.407510][ T4636] Call Trace:
[   48.407519][ T4636]  <TASK>
[   48.407528][ T4636]  dump_stack_lvl+0xf2/0x150
[   48.430705][   T29] audit: type=1326 audit(1733937257.919:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4633 comm="syz.6.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa104d5ff19 code=0x7ffc0000
[   48.440731][ T4636]  dump_stack+0x15/0x1a
[   48.444014][   T29] audit: type=1326 audit(1733937257.919:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4633 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa104d5ff19 code=0x7ffc0000
[   48.446934][ T4636]  should_fail_ex+0x223/0x230
[   48.451517][   T29] audit: type=1326 audit(1733937257.919:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4633 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa104d5ff19 code=0x7ffc0000
[   48.474664][ T4636]  should_failslab+0x8f/0xb0
[   48.474704][ T4636]  kmem_cache_alloc_node_noprof+0x59/0x320
[   48.474752][ T4636]  ? __alloc_skb+0x10b/0x310
[   48.478934][   T29] audit: type=1326 audit(1733937257.919:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4633 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa104d5ff19 code=0x7ffc0000
[   48.501621][ T4636]  __alloc_skb+0x10b/0x310
[   48.501653][ T4636]  ? audit_log_start+0x34c/0x6b0
[   48.506322][   T29] audit: type=1326 audit(1733937257.919:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4633 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa104d5ff19 code=0x7ffc0000
[   48.506349][   T29] audit: type=1326 audit(1733937257.919:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4633 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa104d5ff19 code=0x7ffc0000
[   48.506428][   T29] audit: type=1326 audit(1733937257.919:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4633 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa104d5ff19 code=0x7ffc0000
[   48.529081][ T4636]  audit_log_start+0x368/0x6b0
[   48.535566][ T4635] Failed to initialize the IGMP autojoin socket (err -2)
[   48.539470][ T4636]  audit_seccomp+0x4b/0x130
[   48.539502][ T4636]  __seccomp_filter+0x6fa/0x1180
[   48.539540][ T4636]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   48.662674][ T4638] Failed to initialize the IGMP autojoin socket (err -2)
[   48.665757][ T4636]  ? vfs_write+0x596/0x920
[   48.683131][ T4636]  ? putname+0xcf/0xf0
[   48.687343][ T4636]  __secure_computing+0x9f/0x1c0
[   48.692398][ T4636]  syscall_trace_enter+0xd1/0x1f0
[   48.697471][ T4636]  ? fpregs_assert_state_consistent+0x83/0xa0
[   48.703658][ T4636]  do_syscall_64+0xaa/0x1c0
[   48.708198][ T4636]  ? clear_bhb_loop+0x55/0xb0
[   48.712905][ T4636]  ? clear_bhb_loop+0x55/0xb0
[   48.717621][ T4636]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   48.723646][ T4636] RIP: 0033:0x7fa104d5ff19
[   48.728110][ T4636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   48.747803][ T4636] RSP: 002b:00007fa1033d7058 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[   48.756239][ T4636] RAX: ffffffffffffffda RBX: 00007fa104f25fa0 RCX: 00007fa104d5ff19
[   48.764242][ T4636] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   48.772319][ T4636] RBP: 00007fa1033d70a0 R08: 0000000000000000 R09: 0000000000000000
[   48.780314][ T4636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   48.788316][ T4636] R13: 0000000000000000 R14: 00007fa104f25fa0 R15: 00007ffd205ad348
[   48.796391][ T4636]  </TASK>
[   49.274838][ T4686] Failed to initialize the IGMP autojoin socket (err -2)
[   49.407980][ T4712] FAULT_INJECTION: forcing a failure.
[   49.407980][ T4712] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   49.421113][ T4712] CPU: 0 UID: 0 PID: 4712 Comm: syz.6.188 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0
[   49.431847][ T4712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   49.442001][ T4712] Call Trace:
[   49.445302][ T4712]  <TASK>
[   49.448282][ T4712]  dump_stack_lvl+0xf2/0x150
[   49.452947][ T4712]  dump_stack+0x15/0x1a
[   49.457219][ T4712]  should_fail_ex+0x223/0x230
[   49.461927][ T4712]  should_fail+0xb/0x10
[   49.466161][ T4712]  should_fail_usercopy+0x1a/0x20
[   49.471229][ T4712]  _copy_from_user+0x1e/0xb0
[   49.475916][ T4712]  move_addr_to_kernel+0x82/0x120
[   49.481098][ T4712]  copy_msghdr_from_user+0x271/0x2a0
[   49.486469][ T4712]  __sys_sendmmsg+0x1e8/0x4b0
[   49.491225][ T4712]  __x64_sys_sendmmsg+0x57/0x70
[   49.496183][ T4712]  x64_sys_call+0x29aa/0x2dc0
[   49.500882][ T4712]  do_syscall_64+0xc9/0x1c0
[   49.505458][ T4712]  ? clear_bhb_loop+0x55/0xb0
[   49.510169][ T4712]  ? clear_bhb_loop+0x55/0xb0
[   49.514919][ T4712]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   49.520865][ T4712] RIP: 0033:0x7fa104d5ff19
[   49.525364][ T4712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   49.545064][ T4712] RSP: 002b:00007fa1033d7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   49.553505][ T4712] RAX: ffffffffffffffda RBX: 00007fa104f25fa0 RCX: 00007fa104d5ff19
[   49.561499][ T4712] RDX: 0000000000000001 RSI: 0000000020000440 RDI: 000000000000000b
[   49.569537][ T4712] RBP: 00007fa1033d70a0 R08: 0000000000000000 R09: 0000000000000000
[   49.577596][ T4712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   49.585582][ T4712] R13: 0000000000000000 R14: 00007fa104f25fa0 R15: 00007ffd205ad348
[   49.593598][ T4712]  </TASK>
[   49.749716][ T4715] Failed to initialize the IGMP autojoin socket (err -2)
[   49.859950][ T4736] loop6: detected capacity change from 0 to 1024
[   49.869149][ T4737] loop4: detected capacity change from 0 to 512
[   49.888450][ T4736] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[   49.898351][ T4736] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[   49.935499][ T4737] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.968488][ T4736] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   49.969646][ T4737] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   50.000283][ T4736] EXT4-fs error (device loop6): ext4_get_journal_inode:5809: inode #5: comm syz.6.191: unexpected bad inode w/o EXT4_IGET_BAD
[   50.009011][ T4750] loop0: detected capacity change from 0 to 2048
[   50.060149][ T4737] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[   50.068443][ T4737] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[   50.078113][ T4736] EXT4-fs (loop6): no journal found
[   50.081436][ T4750] ext4: Unknown parameter ''
[   50.083405][ T4736] EXT4-fs (loop6): can't get journal size
[   50.102149][ T4736] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   50.184564][ T4736] FAULT_INJECTION: forcing a failure.
[   50.184564][ T4736] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   50.197773][ T4736] CPU: 0 UID: 0 PID: 4736 Comm: syz.6.191 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0
[   50.208464][ T4736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   50.215290][ T4748] Failed to initialize the IGMP autojoin socket (err -2)
[   50.218520][ T4736] Call Trace:
[   50.218529][ T4736]  <TASK>
[   50.218537][ T4736]  dump_stack_lvl+0xf2/0x150
[   50.236456][ T4736]  dump_stack+0x15/0x1a
[   50.240667][ T4736]  should_fail_ex+0x223/0x230
[   50.245373][ T4736]  should_fail+0xb/0x10
[   50.249560][ T4736]  should_fail_usercopy+0x1a/0x20
[   50.254632][ T4736]  _copy_from_user+0x1e/0xb0
[   50.259258][ T4736]  kstrtouint_from_user+0x76/0xe0
[   50.264320][ T4736]  ? 0xffffffff81000000
[   50.268492][ T4736]  ? selinux_file_permission+0x22a/0x360
[   50.274197][ T4736]  proc_fail_nth_write+0x4f/0x150
[   50.279273][ T4736]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   50.284949][ T4736]  vfs_write+0x281/0x920
[   50.289229][ T4736]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   50.294928][ T4736]  ? __fget_files+0x17c/0x1c0
[   50.299755][ T4736]  ksys_write+0xe8/0x1b0
[   50.304071][ T4736]  __x64_sys_write+0x42/0x50
[   50.308696][ T4736]  x64_sys_call+0x287e/0x2dc0
[   50.313414][ T4736]  do_syscall_64+0xc9/0x1c0
[   50.317950][ T4736]  ? clear_bhb_loop+0x55/0xb0
[   50.322702][ T4736]  ? clear_bhb_loop+0x55/0xb0
[   50.327416][ T4736]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.333358][ T4736] RIP: 0033:0x7fa104d5e9cf
[   50.337795][ T4736] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[   50.357541][ T4736] RSP: 002b:00007fa1033d7050 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[   50.366021][ T4736] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa104d5e9cf
[   50.374112][ T4736] RDX: 0000000000000001 RSI: 00007fa1033d70b0 RDI: 0000000000000004
[   50.382128][ T4736] RBP: 00007fa1033d70a0 R08: 0000000000000000 R09: 0000000000000000
[   50.390122][ T4736] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[   50.398141][ T4736] R13: 0000000000000000 R14: 00007fa104f25fa0 R15: 00007ffd205ad348
[   50.406149][ T4736]  </TASK>
[   50.410586][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.451961][ T3852] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.676909][ T4787] Failed to initialize the IGMP autojoin socket (err -2)
[   50.945844][ T4811] Failed to initialize the IGMP autojoin socket (err -2)
[   51.232453][ T4842] Failed to initialize the IGMP autojoin socket (err -2)
[   51.517511][ T4873] Failed to initialize the IGMP autojoin socket (err -2)
[   51.827269][ T4909] Failed to initialize the IGMP autojoin socket (err -2)
[   52.084726][ T4937] Failed to initialize the IGMP autojoin socket (err -2)
[   52.390122][ T4967] Failed to initialize the IGMP autojoin socket (err -2)
[   52.705345][ T4997] Failed to initialize the IGMP autojoin socket (err -2)
[   53.014222][ T5037] Failed to initialize the IGMP autojoin socket (err -2)
[   53.289450][ T5072] Failed to initialize the IGMP autojoin socket (err -2)
[   53.623274][ T5102] Failed to initialize the IGMP autojoin socket (err -2)
[   53.929958][ T5132] Failed to initialize the IGMP autojoin socket (err -2)
[   54.196231][ T5159] Failed to initialize the IGMP autojoin socket (err -2)
[   54.505187][ T5193] Failed to initialize the IGMP autojoin socket (err -2)
[   54.632292][   T29] kauditd_printk_skb: 68 callbacks suppressed
[   54.632310][   T29] audit: type=1400 audit(1733937264.189:721): avc:  denied  { sys_chroot } for  pid=5218 comm="dhcpcd" capability=18  scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1
[   54.692664][   T29] audit: type=1400 audit(1733937264.219:722): avc:  denied  { setgid } for  pid=5218 comm="dhcpcd" capability=6  scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1
[   54.713571][   T29] audit: type=1400 audit(1733937264.219:723): avc:  denied  { setuid } for  pid=5218 comm="dhcpcd" capability=7  scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1
[   54.734497][   T29] audit: type=1400 audit(1733937264.219:724): avc:  denied  { setrlimit } for  pid=5218 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1
[   54.844223][ T5221] Failed to initialize the IGMP autojoin socket (err -2)
[   55.125831][ T5231] Failed to initialize the IGMP autojoin socket (err -2)
[   55.466379][ T5241] Failed to initialize the IGMP autojoin socket (err -2)
[   55.740229][ T5251] Failed to initialize the IGMP autojoin socket (err -2)
[   56.018871][ T5269] Failed to initialize the IGMP autojoin socket (err -2)
[   56.327700][ T5291] Failed to initialize the IGMP autojoin socket (err -2)
[   56.645001][ T5313] Failed to initialize the IGMP autojoin socket (err -2)
[   56.940750][ T5336] Failed to initialize the IGMP autojoin socket (err -2)
[   57.036616][   T29] audit: type=1400 audit(1733937266.589:725): avc:  denied  { write } for  pid=3287 comm="syz-executor" path="pipe:[1712]" dev="pipefs" ino=1712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   57.430688][ T4138] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.488873][ T4138] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.538732][ T4138] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.593060][ T4138] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.712448][ T4138] bridge_slave_1: left allmulticast mode
[   57.718285][ T4138] bridge_slave_1: left promiscuous mode
[   57.723953][ T4138] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.765384][ T4138] bridge_slave_0: left allmulticast mode
[   57.771353][ T4138] bridge_slave_0: left promiscuous mode
[   57.777041][ T4138] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.938026][ T4138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   57.956756][ T4138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   57.981042][ T4138] bond0 (unregistering): Released all slaves
[   58.058457][ T4138] hsr_slave_0: left promiscuous mode
[   58.072529][ T4138] hsr_slave_1: left promiscuous mode
[   58.091162][ T4138] veth1_macvtap: left promiscuous mode
[   58.097552][ T4138] veth0_macvtap: left promiscuous mode
[   58.103085][ T4138] veth1_vlan: left promiscuous mode
[   58.108422][ T4138] veth0_vlan: left promiscuous mode
[   58.296461][ T4138] team0 (unregistering): Port device team_slave_1 removed
[   58.318213][ T4138] team0 (unregistering): Port device team_slave_0 removed
[   65.690926][   T29] audit: type=1400 audit(1733937275.249:726): avc:  denied  { write } for  pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   65.712475][   T29] audit: type=1400 audit(1733937275.249:727): avc:  denied  { remove_name } for  pid=2981 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   65.735040][   T29] audit: type=1400 audit(1733937275.249:728): avc:  denied  { rename } for  pid=2981 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   65.757292][   T29] audit: type=1400 audit(1733937275.249:729): avc:  denied  { add_name } for  pid=2981 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   65.779897][   T29] audit: type=1400 audit(1733937275.249:730): avc:  denied  { unlink } for  pid=2981 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   65.802274][   T29] audit: type=1400 audit(1733937275.249:731): avc:  denied  { create } for  pid=2981 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  343.316845][ T1925] kworker/u8:5 (1925) used greatest stack depth: 10272 bytes left
[  349.135747][    C1] ==================================================================
[  349.143869][    C1] BUG: KCSAN: data-race in __tmigr_cpu_activate / tmigr_handle_remote
[  349.152122][    C1] 
[  349.154448][    C1] write to 0xffff888237c205dc of 1 bytes by task 0 on cpu 0:
[  349.161834][    C1]  __tmigr_cpu_activate+0x55/0x200
[  349.166993][    C1]  tmigr_cpu_activate+0x8a/0xc0
[  349.171880][    C1]  timer_clear_idle+0x28/0x100
[  349.176731][    C1]  tick_nohz_restart_sched_tick+0x22/0x110
[  349.182568][    C1]  tick_nohz_idle_exit+0xfe/0x1d0
[  349.187684][    C1]  do_idle+0x1eb/0x230
[  349.191773][    C1]  cpu_startup_entry+0x25/0x30
[  349.196557][    C1]  rest_init+0xef/0xf0
[  349.200641][    C1]  start_kernel+0x586/0x5e0
[  349.205143][    C1]  x86_64_start_reservations+0x2a/0x30
[  349.210606][    C1]  x86_64_start_kernel+0x9a/0xa0
[  349.215563][    C1]  common_startup_64+0x12c/0x137
[  349.220502][    C1] 
[  349.222831][    C1] read to 0xffff888237c205dc of 1 bytes by interrupt on cpu 1:
[  349.230381][    C1]  tmigr_handle_remote+0x26e/0x940
[  349.235491][    C1]  run_timer_softirq+0x5f/0x70
[  349.240253][    C1]  handle_softirqs+0xbf/0x280
[  349.244938][    C1]  __irq_exit_rcu+0x3a/0xc0
[  349.249444][    C1]  sysvec_apic_timer_interrupt+0x73/0x80
[  349.255082][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  349.261090][    C1]  kcsan_setup_watchpoint+0x404/0x410
[  349.266479][    C1]  smpboot_thread_fn+0x29b/0x4c0
[  349.271433][    C1]  kthread+0x1d1/0x210
[  349.275517][    C1]  ret_from_fork+0x4b/0x60
[  349.279930][    C1]  ret_from_fork_asm+0x1a/0x30
[  349.284703][    C1] 
[  349.287027][    C1] value changed: 0x00 -> 0x01
[  349.291693][    C1] 
[  349.294006][    C1] Reported by Kernel Concurrency Sanitizer on:
[  349.300157][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0
[  349.310740][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  349.320800][    C1] ==================================================================