last executing test programs:

1.519503438s ago: executing program 2 (id=98):
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x47c94)

1.504401408s ago: executing program 2 (id=99):
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={'bond_slave_1\x00', {0x2, 0x4e22, @loopback}})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75}, 0x38)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440))
r1 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0)
fallocate(r1, 0x0, 0x400000000000000, 0x2)

1.456228839s ago: executing program 2 (id=101):
bpf$PROG_LOAD(0x5, 0x0, 0xa9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18)
bind$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x4e21, 0xfffffe00, @private0, 0x10001}, 0x1c)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
unshare(0x64000600)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x2d0, 0x940c, 0x3002, 0x2d0, 0x2c0, 0x3e0, 0x3d8, 0x3d8, 0x3e0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2d0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x4}, {0x1, 0x0, 0x5}, {0xffffffffffffffff, 0x4}, 0x9, 0x7}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510)

1.262564402s ago: executing program 0 (id=105):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0xc51e000)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
bind$can_raw(0xffffffffffffffff, &(0x7f00000005c0), 0x10)
read(0xffffffffffffffff, 0x0, 0x0)
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0x10, &(0x7f0000000200)={&(0x7f00000007c0)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x0)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
accept(r2, 0x0, 0x0)
socket$inet(0x2, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r3, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00')
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000022c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0)
preadv(r4, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/65, 0x41}], 0x1, 0x1ef, 0x0)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000180)='hrtimer_start\x00', r6}, 0x18)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r2, @ANYRESHEX=r4, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

999.080076ms ago: executing program 3 (id=109):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x15, 0x6, 0x2c, &(0x7f00000004c0)})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)=0xfffffffe)

981.826146ms ago: executing program 0 (id=110):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x160, 0x160, 0x62020048, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback=0x7f008e04, @local, 0x0, 0x0, 'vlan0\x00', 'geneve1\x00'}, 0xb003, 0x130, 0x160, 0x8, {0xf400000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "4bc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a05050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x5a}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0xed030000}}, {0x28, '\x00', 0x4}}}}, 0x358)

979.437526ms ago: executing program 1 (id=111):
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={'bond_slave_1\x00', {0x2, 0x4e22, @loopback}})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75}, 0x38)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440))
r1 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0)
fallocate(r1, 0x0, 0x400000000000000, 0x2)

863.634188ms ago: executing program 1 (id=112):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000200)='kfree\x00', r3}, 0x18)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@delchain={0x48, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0x0, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x1c, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x7}, @TCA_U32_FLAGS={0x8, 0xb, 0x5}, @TCA_U32_FLAGS={0x8, 0xb, 0x5}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000001c80)='n', 0x1)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r1)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='syzkaller\x00', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f00000002c0)='\x04\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000000)="ad", 0x1)
close(r1)
getpgid(0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
getuid()
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x18)
link(&(0x7f0000000080)='./file0\x00', 0x0)

781.694819ms ago: executing program 3 (id=113):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x0)
fchdir(r1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
r2 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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")
r3 = creat(&(0x7f0000000300)='./bus\x00', 0xcb)
r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x7610, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff})
fcntl$lock(r5, 0x7, &(0x7f0000000340)={0x2, 0x0, 0x8})
mprotect(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0)
rt_tgsigqueueinfo(0x0, 0x0, 0xc, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
utimes(&(0x7f0000000000)='./cgroup\x00', 0x0)
r7 = dup2(r4, r3)
io_submit(0x0, 0x3, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0xe, r6, &(0x7f0000000100)="33c273a96d68fb00cfd717d2ea17c1f113950f399be48a026bd36852f15ea55276274f57da34e084363f6e5e9fdb8e1bb0ea05c876ec7c5ca5db420610eaac22d234689a11c018fb3ae3ce4bea77bf4aff4bbc688c4684758f65e231f3a520839b07e4fd0502cadcd3187119e1be4f4d75", 0x71, 0x1, 0x0, 0x1, r7}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x800, r2, &(0x7f00000004c0)="e7a44828c6c0fc6d2b7031489be4b0ff9e20fdf6986c2e0ecb5036ecb64efa4da40ff8d2b14ab77bd008dfeac9d750b6f786c00fe7fd072622ea339b82a4c22111f27201feb636d08e6fea665e40dda02d31897454beceac0d65363b1ae845b9742f7d2064606b62c79d2d1c04f9f4e02d6478957efad8895907ddb76c72c58424924dcbe489f8e075758c1baab5ae036e9a0b68f10374113119d8e250cd2794981af526197862018e491bddd49a3818e7406b941cebf36bb5ff79d152fa5ba40989f647dc6a069993b889367e294599ce900dfca303b58f3d0222fe315ecb3bb077482a", 0xe4, 0x3, 0x0, 0xcdc1d10399fb2391}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0xff, r3, &(0x7f00000005c0)="bb897647fb119b9ab8130ebcabcba83fc8ba085ea3f6349ba6d97512bce85e1f9f9ba0444957310d9689f76a9837389b3171e1e645a9dfe3daba769eeede478337c5416c5fadd07323702823057ed08b2ea14c5cb949a27805af9e5c71003fd571b427bd800d914f0b7742f1bb03cb75d910f31d43e61b3cf1ccf17606900ed8d1f26c19e166d4b72555cb47918ffccc3f007982f4ff38a32b77700f6a076416a1f0a09debfb7b7ef5e5ab4e25", 0xad, 0x6, 0x0, 0x4, r3}])

702.17004ms ago: executing program 0 (id=115):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='rpc_call_rpcerror\x00', r0}, 0x18)
r1 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_buf(r1, 0x29, 0x39, 0x0, 0x0)

633.929291ms ago: executing program 0 (id=116):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x20000}, 0x18)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@nolazytime}, {@jqfmt_vfsold}, {@journal_path={'journal_path', 0x3d, './file0/../file0'}}, {@noquota}, {@nodioread_nolock}, {@journal_checksum}, {@data_err_abort}], [{@seclabel}]}, 0x3, 0x473, &(0x7f0000000640)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
r6 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_user(r6, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27)
splice(r1, 0x0, r2, 0x0, 0x100000004, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0))
r7 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000005c0)={r8, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}})
r9 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000)
ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000001280)={r7, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffff, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000000000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40601000061ac00", "90be8b1c55f96400", [0x800]}})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB], 0x30}}, 0x0)

633.417841ms ago: executing program 4 (id=117):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r3, r2}, 0x40)
syz_emit_ethernet(0xfdef, &(0x7f0000000380)=ANY=[], 0x0)

609.727501ms ago: executing program 4 (id=118):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0x8e)

571.998012ms ago: executing program 1 (id=119):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r3}, 0x38)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001300)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x3, 0x0, 0x0, 0x8000002, 0x6, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x2, 0x10000000, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x404, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x401, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x562e, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0xfffffffd, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0xb2e, 0x1, 0xfffffffe, 0x6, 0x0, 0x2, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x4006, 0x800, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x20000007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x5, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x7, 0x400000b2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0xffffffff, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffe, 0x800, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x800001, 0x2, 0x5aa, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x3, 0x0, 0x0, 0x2, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x1, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030c000000000700000000000002ee080010000000e92500000000000003000600000000000000000080000000000000000000000000000000000d00000000030005000000000002000000ac141400"/96], 0x60}, 0x1, 0x7}, 0x0)
ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x5, 0x14a, 0x0, 0x4}})

571.462652ms ago: executing program 4 (id=120):
r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x10)
accept$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev}, &(0x7f0000000140)=0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
mbind(&(0x7f00004a9000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
getdents64(r2, 0x0, 0x0)
ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000240)={0x2, 0x10})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="01ac79cac185964f518a48a9e1fa814e695a6143dd8e9f6a53a9ef704c99a9b13c93564b87d0c58fb05c736e6769d6dfe584b583137cea563108f9c9ad8d3643b492efb618db2675aea3205e5caf1138dd23be005c2fd0fa9d119e1a5ac4c82be0ba7192fe99111df127f8f30bedfcf0abe9274b56501fe66187e7de727a692b8345733f2399f1f7b549c059eb77fa0e35b610d7bd846c5e82118e9083cb8096942c64f6830b9dd98106d89805c90b30b7850abdb55156bc1b914fd58f97b767de1a51583eec6c5728ace320cf", @ANYRES16=r4, @ANYBLOB="010700000000000000002e000000"], 0x14}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010)
set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0)

509.348583ms ago: executing program 3 (id=121):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0)
close(r2)
ioperm(0x0, 0xd, 0x4000000000000020)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioperm(0x2, 0x40, 0x4000000000000040)

508.443503ms ago: executing program 1 (id=122):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x6, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x101041, 0x0)
r5 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=<r6=>0x0, &(0x7f00000007c0)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x38}, {0x0}], 0x2})
io_uring_enter(r5, 0x4d10, 0x2, 0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r4}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000000c0)='io_uring_create\x00', r1}, 0x18)
io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6})

505.088043ms ago: executing program 0 (id=123):
ioprio_set$pid(0x1, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05cefeb4ee6d5ae1071124b2c2fb684f5c7ac05000000c7880f67e775c748f6381a3e01e7f93330b30b90bbb4d2b697899a16f2df4fa2a8f06ac2c5352ddcae2b83672ef3d9f532e55f4e798924ac6332751e737383f6890d2dcfcbdbd41940a64c7b4374674e7bb6dd0d1b8d3d62f6d77b0282e166e2ce4c353d2d4d315a81146bf46a1508ef0d2ddc7d0b447fe17b85b292d13cea2256a16cab12d75a852bc680da7ea837480feb2e1e0000000000003bc18c52d0351cd285197b0641569048b5b416ba1c570000000000100083794afff0a9eed63b1226b18c4b455ab222d7ae1be52a22e8ec8bf2c0c7d99770415863f50aa18bcb66061a29bc55105f3482ed752f882d224a386b51836c1b437036b677156e22e174ff516dbab0b2cdf52bee43c4ffffffffffffffffd9487b8663a339b98df63b4bf3e97f02d6f1e7e65f968dd90841506355d9ac40f1b434c8a9b5bd91a70c53a5aadbebd9ed9d0a55bd47a967163e0c02753f8895bfbf1b41b5490667c241068d59983ae1d0f03e650f5357425284b76d793e25a2558fa437e38b8200000000630000000000000000000000000000000000000000000000e911000000000066e073c14bb74617079e0b6ecfc830db14244567fd8f4e4e5903eaf983786e28295783f130b95dc37f59a658000e88047db7783ce8a9cba6c255902cfb83946ea3f5f7a8cee911b2b37ae4b01e65ea86d5ea7ae17b2a9bc250c9b8fc9fbc04617939bdd13457954172d18701768f8a461bee740f2d82ae566d2e30a93ad2b201a6d16a93c75a950cc437e7f25d3aadddb8edd028d84490b6bafd636aa4fb482a8a4b3987dafe58e742448c4b36b03790090198145dee533257bb9050554f8cace210a5bc5c768f83e99019f7c00ff9ca679768dbba3f7d21c545c99c2f7688f7030fe37121d625d1f81018feb74c9d48eebdf1702550b097271ab9bd38c62f4b31fd9482c05ba064dfa60bd7fafb3c22dc057e6f9e2a5eb144290afe5369110a71d4b7fc5937a32e213c443f3b9e506b25cf9e2520999b330fc9e86bde8c8ec78f67c0c7f24db0000000", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000000)=0x7ffffffffe, 0xfffffffffffffe96)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000200001e8d63250000000000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x8, 0xff3, &(0x7f0000001e00)=""/4083, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xaf, @void, @value}, 0x94)

504.450662ms ago: executing program 2 (id=124):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x20000}, 0x18)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@nolazytime}, {@jqfmt_vfsold}, {@journal_path={'journal_path', 0x3d, './file0/../file0'}}, {@noquota}, {@nodioread_nolock}, {@journal_checksum}, {@data_err_abort}], [{@seclabel}]}, 0x3, 0x473, &(0x7f0000000640)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
r6 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_user(r6, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27)
splice(r1, 0x0, r2, 0x0, 0x100000004, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0))
r7 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000005c0)={r8, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}})
r9 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000)
ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000001280)={r7, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffff, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000000000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40601000061ac00", "90be8b1c55f96400", [0x800]}})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[], 0x30}}, 0x0)

440.593234ms ago: executing program 3 (id=125):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$kcm(0xa, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)

439.980334ms ago: executing program 3 (id=126):
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x47c94)

343.724055ms ago: executing program 4 (id=127):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2, 0x0)

343.346425ms ago: executing program 1 (id=128):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000007a"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r3, r2}, 0x40)
syz_emit_ethernet(0xfdef, &(0x7f0000000380)=ANY=[], 0x0)

314.052006ms ago: executing program 4 (id=129):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x61680, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
open_tree(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x1100)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='sys_enter\x00', r1, 0x0, 0xfffffffffffff2f6}, 0x18)
sysinfo(&(0x7f0000000900)=""/198)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000080), &(0x7f0000000180)='%-010d \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000003c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0006}]})
socket$packet(0x11, 0xa, 0x300)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000013c0)={{0x0, 0xea8f, 0x4, 0x965, 0x7c26, 0x3, 0x8, 0x3, 0xff, 0x8001, 0x0, 0xc0b6, 0xaa, 0xb135, 0xfff}})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'ip6tnl0\x00', &(0x7f0000000080)=@ethtool_wolinfo={0x11, 0xb3, 0x2, "0a08cf38c194"}})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4, <r6=>0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r7, 0x2)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r9 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000e8800529d749f99aed3f2dea4aa000000ffffffff000000000000000000000000000018000000000000000000fd00000000000000000000000000000000000000fcffffff00100000"]}, 0x116)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10)

311.794106ms ago: executing program 3 (id=130):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
r0 = socket$netlink(0x10, 0x3, 0xf)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x40, &(0x7f0000000040), 0xfe, 0x4f2, &(0x7f0000000b00)="$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")
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0)

299.069006ms ago: executing program 1 (id=131):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r3}, 0x10)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000900)}], 0x1}}], 0x1, 0x2000c000)
socket$kcm(0x29, 0x0, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
bind$xdp(r4, &(0x7f00000002c0)={0x2c, 0x4, r6}, 0x10)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0xc, &(0x7f0000000080)=@ccm_128={{0x303}, "4e88050000007e71", "75074d596815464b70011d8227435c79", "cc630475", "242e2bda3ab0c11e"}, 0x28)

285.430956ms ago: executing program 2 (id=132):
r0 = socket$kcm(0x21, 0x2, 0xa)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x41}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x47c94)

263.490556ms ago: executing program 0 (id=133):
r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000)
r1 = fcntl$dupfd(r0, 0x0, r0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1695458af2ac700, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x18, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='scsi_dispatch_cmd_start\x00', r2}, 0x18)
r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x2, 0xb, 0x88}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
unshare(0x64000600)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r5}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'erspan0\x00', <r7=>0x0})
sendto$packet(r6, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14)
r8 = socket$netlink(0x10, 0x3, 0x0)
read(r1, &(0x7f00000003c0)=""/201, 0xc9)
sendmsg(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001900)="5500000018007f5f00fe01b2a4a2809302060000ff41fc01040400000a00120002002800000019002d4400009b84136ef75afb83de066a5b00e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r8)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x30, r9, 0x200, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x6, 0x8000, 0x8a}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x10)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32], 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000", @ANYRES32=r1, @ANYBLOB="0500"/20, @ANYRES32=r7, @ANYRES32=r1, @ANYBLOB="01000000020000000500"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
fcntl$addseals(r11, 0x409, 0x1)

71.444569ms ago: executing program 2 (id=134):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x20000}, 0x18)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@nolazytime}, {@jqfmt_vfsold}, {@journal_path={'journal_path', 0x3d, './file0/../file0'}}, {@noquota}, {@nodioread_nolock}, {@journal_checksum}, {@data_err_abort}], [{@seclabel}]}, 0x3, 0x473, &(0x7f0000000640)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
r6 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_user(r6, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27)
splice(r1, 0x0, r2, 0x0, 0x100000004, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0))
r7 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000005c0)={r8, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}})
r9 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000)
ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000001280)={r7, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffff, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000000000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40601000061ac00", "90be8b1c55f96400", [0x800]}})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB], 0x30}}, 0x0)

0s ago: executing program 4 (id=135):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002300)=@newtfilter={0x488, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x450, 0x2, [@TCA_BASIC_POLICE={0x44c, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0xfffffffe, 0xfffffffa, 0xffffffe5, 0x1, 0x1, 0xfffffffc, 0x9, 0x1, 0x1, 0x6, 0x4, 0xfffffff0, 0x4, 0x3ff, 0x0, 0x37, 0x0, 0xb2c0, 0x4, 0x7, 0x4, 0xc, 0x6, 0x9, 0x9, 0x400, 0x60da5daa, 0x9, 0x1, 0x0, 0xfff, 0x4, 0x8, 0x0, 0x9, 0x4, 0x9, 0x4, 0xf09, 0x8, 0x19, 0xd9f8, 0x400, 0x7, 0xfffffffb, 0x24800, 0xfcb1, 0x4, 0x8, 0x8001, 0x6, 0xb, 0xebd1, 0xd24, 0x4, 0x1, 0x5, 0xb, 0x8, 0x5, 0xf80, 0xaef9, 0x1, 0x1, 0x3, 0x9, 0x4, 0x1, 0x3ff, 0x5, 0xfffffffc, 0x3, 0x68, 0x3, 0x4, 0xfffffffa, 0xffff, 0xe, 0x0, 0x1, 0x1, 0x0, 0x9, 0xffffffff, 0x2, 0xd, 0xfe1, 0x1, 0x3, 0x1, 0x4, 0x400, 0x3113, 0x3, 0x6, 0x669, 0x6, 0x0, 0xfffffff9, 0x6, 0x7fffffff, 0xffffff80, 0x7740, 0x3, 0x3, 0x6, 0x4, 0x6, 0x200, 0x6, 0x3, 0x6d45, 0xfda, 0x9, 0x0, 0x3ff, 0x6, 0x1a, 0xfff, 0x2, 0x2, 0x2, 0x4, 0xffffffff, 0x8, 0x3, 0x7f, 0x3ff, 0x8, 0x6, 0xfffffffa, 0x4, 0x3, 0x80000001, 0x4fcb, 0x10000, 0x80000000, 0x8, 0x42, 0x1, 0x8, 0x101, 0x1, 0x6, 0x1, 0x1, 0x400, 0x4, 0x2, 0x7, 0x5, 0x0, 0x400, 0x9, 0x3d, 0x100, 0xffffffda, 0x5, 0x6, 0x3, 0x8, 0x6, 0x6, 0x1a2000, 0x40, 0x7, 0x0, 0xa358, 0x80000001, 0x2, 0x7, 0x44, 0xe, 0xfffffff3, 0x3, 0x5, 0x2, 0xe00000, 0x336, 0x80000000, 0x0, 0x1, 0x0, 0xffffff4d, 0x8, 0x1, 0x2, 0x5a5, 0x8, 0x101, 0x2, 0x9, 0x1, 0x1, 0xfffffff7, 0x73, 0x3ff, 0xc0, 0x946, 0xbd4, 0xb, 0xfbcc, 0x4739, 0x0, 0x9, 0x238b724d, 0x9, 0x0, 0xb358, 0xfffffffd, 0x6, 0xffff, 0x77e, 0x5, 0x7, 0x2, 0x6, 0x9, 0x6, 0x4, 0x5, 0x9, 0x8001, 0x46, 0xe, 0x7f, 0x1, 0x9, 0x3ff, 0x7, 0x8, 0x15, 0xb, 0x9, 0x4, 0x3, 0x1, 0x7fffffff, 0x100, 0xa6f, 0x4, 0x9, 0x1000, 0x27, 0x800, 0x800, 0x9, 0x9, 0x7ff, 0x0, 0x7ff, 0x8, 0x6]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1c4c, 0x6, 0x3, 0x5, 0xfffffd86, {0x9, 0x2, 0x9, 0x8, 0x2, 0x1a9aed07}, {0x10, 0x1, 0x2, 0x4, 0x73, 0xffff}, 0xa341, 0x7, 0x1}}]}]}}, @TCA_RATE={0x6, 0x5, {0xd, 0x8}}]}, 0x488}, 0x1, 0x0, 0x0, 0x4}, 0x4000800)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.217' (ED25519) to the list of known hosts.
[   27.170799][   T29] audit: type=1400 audit(1749893652.992:62): avc:  denied  { mounton } for  pid=3295 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   27.172002][ T3295] cgroup: Unknown subsys name 'net'
[   27.193728][   T29] audit: type=1400 audit(1749893652.992:63): avc:  denied  { mount } for  pid=3295 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   27.221155][   T29] audit: type=1400 audit(1749893653.012:64): avc:  denied  { unmount } for  pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   27.361181][ T3295] cgroup: Unknown subsys name 'cpuset'
[   27.367513][ T3295] cgroup: Unknown subsys name 'rlimit'
[   27.499010][   T29] audit: type=1400 audit(1749893653.312:65): avc:  denied  { setattr } for  pid=3295 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   27.524736][   T29] audit: type=1400 audit(1749893653.312:66): avc:  denied  { create } for  pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   27.545233][   T29] audit: type=1400 audit(1749893653.312:67): avc:  denied  { write } for  pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   27.565663][   T29] audit: type=1400 audit(1749893653.322:68): avc:  denied  { read } for  pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   27.585972][   T29] audit: type=1400 audit(1749893653.322:69): avc:  denied  { mounton } for  pid=3295 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   27.595133][ T3299] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   27.610952][   T29] audit: type=1400 audit(1749893653.322:70): avc:  denied  { mount } for  pid=3295 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   27.642866][   T29] audit: type=1400 audit(1749893653.442:71): avc:  denied  { relabelto } for  pid=3299 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   27.683009][ T3295] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   28.920908][ T3306] chnl_net:caif_netlink_parms(): no params data found
[   28.936070][ T3313] chnl_net:caif_netlink_parms(): no params data found
[   28.983221][ T3311] chnl_net:caif_netlink_parms(): no params data found
[   29.058856][ T3315] chnl_net:caif_netlink_parms(): no params data found
[   29.083073][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.090184][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.097456][ T3306] bridge_slave_0: entered allmulticast mode
[   29.104066][ T3306] bridge_slave_0: entered promiscuous mode
[   29.122736][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.129954][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.137563][ T3311] bridge_slave_0: entered allmulticast mode
[   29.144131][ T3311] bridge_slave_0: entered promiscuous mode
[   29.150854][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.158058][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.165546][ T3313] bridge_slave_0: entered allmulticast mode
[   29.171945][ T3313] bridge_slave_0: entered promiscuous mode
[   29.178590][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.185736][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.193133][ T3306] bridge_slave_1: entered allmulticast mode
[   29.199534][ T3306] bridge_slave_1: entered promiscuous mode
[   29.213720][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.220837][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.227997][ T3311] bridge_slave_1: entered allmulticast mode
[   29.234431][ T3311] bridge_slave_1: entered promiscuous mode
[   29.241098][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.248359][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.255617][ T3313] bridge_slave_1: entered allmulticast mode
[   29.261981][ T3313] bridge_slave_1: entered promiscuous mode
[   29.292826][ T3307] chnl_net:caif_netlink_parms(): no params data found
[   29.303064][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.329306][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.353022][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.368484][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.379138][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.394259][ T3306] team0: Port device team_slave_0 added
[   29.408379][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.417580][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.424677][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.431901][ T3315] bridge_slave_0: entered allmulticast mode
[   29.438412][ T3315] bridge_slave_0: entered promiscuous mode
[   29.450462][ T3306] team0: Port device team_slave_1 added
[   29.462819][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.470140][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.477413][ T3315] bridge_slave_1: entered allmulticast mode
[   29.484035][ T3315] bridge_slave_1: entered promiscuous mode
[   29.512587][ T3313] team0: Port device team_slave_0 added
[   29.533796][ T3311] team0: Port device team_slave_0 added
[   29.545161][ T3313] team0: Port device team_slave_1 added
[   29.557381][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.571790][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.578766][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.605130][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.616547][ T3311] team0: Port device team_slave_1 added
[   29.627953][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.635101][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.642271][ T3307] bridge_slave_0: entered allmulticast mode
[   29.648668][ T3307] bridge_slave_0: entered promiscuous mode
[   29.656205][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.665999][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.673042][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.699185][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.710251][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.717312][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.743260][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.758682][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.765920][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.773125][ T3307] bridge_slave_1: entered allmulticast mode
[   29.779945][ T3307] bridge_slave_1: entered promiscuous mode
[   29.792238][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.799245][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.825242][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.839245][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.846273][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.872355][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.896513][ T3315] team0: Port device team_slave_0 added
[   29.903530][ T3315] team0: Port device team_slave_1 added
[   29.915638][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.922754][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.948797][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.987694][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.994745][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.020698][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.032866][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.049750][ T3306] hsr_slave_0: entered promiscuous mode
[   30.056294][ T3306] hsr_slave_1: entered promiscuous mode
[   30.068987][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.076157][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.102106][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.113858][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.141045][ T3311] hsr_slave_0: entered promiscuous mode
[   30.147109][ T3311] hsr_slave_1: entered promiscuous mode
[   30.152918][ T3311] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   30.160529][ T3311] Cannot create hsr debugfs directory
[   30.175568][ T3313] hsr_slave_0: entered promiscuous mode
[   30.181708][ T3313] hsr_slave_1: entered promiscuous mode
[   30.187469][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   30.195097][ T3313] Cannot create hsr debugfs directory
[   30.224867][ T3307] team0: Port device team_slave_0 added
[   30.231613][ T3307] team0: Port device team_slave_1 added
[   30.273119][ T3315] hsr_slave_0: entered promiscuous mode
[   30.279204][ T3315] hsr_slave_1: entered promiscuous mode
[   30.285256][ T3315] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   30.292959][ T3315] Cannot create hsr debugfs directory
[   30.316580][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.323611][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.349621][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.362846][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.369940][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.395913][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.465492][ T3307] hsr_slave_0: entered promiscuous mode
[   30.471797][ T3307] hsr_slave_1: entered promiscuous mode
[   30.477567][ T3307] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   30.485231][ T3307] Cannot create hsr debugfs directory
[   30.584573][ T3306] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   30.595576][ T3306] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   30.612753][ T3306] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   30.626358][ T3306] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   30.665135][ T3313] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   30.674141][ T3313] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   30.683195][ T3313] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   30.699442][ T3311] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   30.708343][ T3311] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   30.717108][ T3313] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   30.729233][ T3311] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   30.738094][ T3311] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   30.781979][ T3315] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   30.793630][ T3315] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   30.802894][ T3315] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   30.812166][ T3315] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   30.828309][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.872034][ T3307] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   30.881757][ T3307] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   30.901157][ T3307] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   30.911254][ T3306] 8021q: adding VLAN 0 to HW filter on device team0
[   30.923405][ T3307] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   30.935126][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.942377][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.959902][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.968860][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.983547][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.990674][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.023073][ T3311] 8021q: adding VLAN 0 to HW filter on device team0
[   31.044606][ T3313] 8021q: adding VLAN 0 to HW filter on device team0
[   31.057829][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.073389][  T159] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.080583][  T159] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.089570][  T159] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.096690][  T159] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.107227][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.114397][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.134006][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.141170][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.160948][ T3315] 8021q: adding VLAN 0 to HW filter on device team0
[   31.182025][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.189135][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.206144][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.213306][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.224750][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.253424][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.263349][ T3307] 8021q: adding VLAN 0 to HW filter on device team0
[   31.288798][ T3315] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   31.299288][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.336293][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.350105][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.357290][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.366610][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.373709][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.439283][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.510146][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.528062][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.551590][ T3306] veth0_vlan: entered promiscuous mode
[   31.602059][ T3311] veth0_vlan: entered promiscuous mode
[   31.623297][ T3306] veth1_vlan: entered promiscuous mode
[   31.641993][ T3311] veth1_vlan: entered promiscuous mode
[   31.673422][ T3313] veth0_vlan: entered promiscuous mode
[   31.686530][ T3306] veth0_macvtap: entered promiscuous mode
[   31.702757][ T3307] veth0_vlan: entered promiscuous mode
[   31.709648][ T3306] veth1_macvtap: entered promiscuous mode
[   31.718812][ T3313] veth1_vlan: entered promiscuous mode
[   31.727030][ T3311] veth0_macvtap: entered promiscuous mode
[   31.735014][ T3311] veth1_macvtap: entered promiscuous mode
[   31.745905][ T3307] veth1_vlan: entered promiscuous mode
[   31.755240][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.772570][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.786408][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.795885][ T3306] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.804775][ T3306] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.813591][ T3306] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.822461][ T3306] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.848340][ T3307] veth0_macvtap: entered promiscuous mode
[   31.855484][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.867644][ T3313] veth0_macvtap: entered promiscuous mode
[   31.878077][ T3307] veth1_macvtap: entered promiscuous mode
[   31.885753][ T3311] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.894544][ T3311] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.903298][ T3311] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.912049][ T3311] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.923677][ T3315] veth0_vlan: entered promiscuous mode
[   31.936165][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.946061][ T3313] veth1_macvtap: entered promiscuous mode
[   31.958336][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.971505][ T3315] veth1_vlan: entered promiscuous mode
[   31.980125][ T3307] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.980182][ T3306] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   31.989084][ T3307] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.012410][ T3307] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.021231][ T3307] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.051870][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.064754][ T3315] veth0_macvtap: entered promiscuous mode
[   32.083782][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.101287][ T3313] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.110037][ T3313] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.118908][ T3313] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.127703][ T3313] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.138019][ T3315] veth1_macvtap: entered promiscuous mode
[   32.176462][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.185865][   T29] kauditd_printk_skb: 27 callbacks suppressed
[   32.185883][   T29] audit: type=1400 audit(1749893658.002:99): avc:  denied  { create } for  pid=3477 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   32.214359][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.223165][   T29] audit: type=1326 audit(1749893658.002:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3477 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07cd30e929 code=0x7ffc0000
[   32.246481][   T29] audit: type=1326 audit(1749893658.002:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3477 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07cd30e929 code=0x7ffc0000
[   32.269671][   T29] audit: type=1326 audit(1749893658.002:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3477 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f07cd30e929 code=0x7ffc0000
[   32.293012][   T29] audit: type=1326 audit(1749893658.002:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3477 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07cd30e929 code=0x7ffc0000
[   32.315984][   T29] audit: type=1326 audit(1749893658.002:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3477 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07cd30e929 code=0x7ffc0000
[   32.338971][   T29] audit: type=1326 audit(1749893658.012:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3477 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07cd30e929 code=0x7ffc0000
[   32.361883][   T29] audit: type=1326 audit(1749893658.012:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3477 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07cd30e929 code=0x7ffc0000
[   32.384921][   T29] audit: type=1326 audit(1749893658.012:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3477 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07cd30e929 code=0x7ffc0000
[   32.408446][ T3481] FAULT_INJECTION: forcing a failure.
[   32.408446][ T3481] name failslab, interval 1, probability 0, space 0, times 1
[   32.421256][ T3481] CPU: 1 UID: 0 PID: 3481 Comm: syz.1.6 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(voluntary) 
[   32.421322][ T3481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   32.421338][ T3481] Call Trace:
[   32.421346][ T3481]  <TASK>
[   32.421355][ T3481]  __dump_stack+0x1d/0x30
[   32.421382][ T3481]  dump_stack_lvl+0xe8/0x140
[   32.421405][ T3481]  dump_stack+0x15/0x1b
[   32.421421][ T3481]  should_fail_ex+0x265/0x280
[   32.421528][ T3481]  should_failslab+0x8c/0xb0
[   32.421616][ T3481]  __kmalloc_node_noprof+0xa9/0x410
[   32.421658][ T3481]  ? allocate_slab+0x144/0x3a0
[   32.421700][ T3481]  allocate_slab+0x144/0x3a0
[   32.421750][ T3481]  ___slab_alloc+0x3ce/0x900
[   32.421779][ T3481]  ? should_failslab+0x8c/0xb0
[   32.421832][ T3481]  ? __d_alloc+0x3d/0x350
[   32.421863][ T3481]  ? should_fail_ex+0xdb/0x280
[   32.421896][ T3481]  kmem_cache_alloc_lru_noprof+0x1f6/0x310
[   32.421985][ T3481]  ? __d_alloc+0x3d/0x350
[   32.422018][ T3481]  __d_alloc+0x3d/0x350
[   32.422049][ T3481]  ? mpol_shared_policy_init+0xbd/0x4c0
[   32.422145][ T3481]  d_alloc_pseudo+0x1e/0x80
[   32.422172][ T3481]  alloc_file_pseudo+0x71/0x160
[   32.422204][ T3481]  ? __se_sys_memfd_create+0x1cc/0x590
[   32.422369][ T3481]  __shmem_file_setup+0x1de/0x210
[   32.422404][ T3481]  shmem_file_setup+0x3b/0x50
[   32.422432][ T3481]  __se_sys_memfd_create+0x2c3/0x590
[   32.422544][ T3481]  __x64_sys_memfd_create+0x31/0x40
[   32.422584][ T3481]  x64_sys_call+0x122f/0x2fb0
[   32.422612][ T3481]  do_syscall_64+0xd2/0x200
[   32.422649][ T3481]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   32.422674][ T3481]  ? clear_bhb_loop+0x40/0x90
[   32.422694][ T3481]  ? clear_bhb_loop+0x40/0x90
[   32.422758][ T3481]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   32.422779][ T3481] RIP: 0033:0x7fc1d0bbe929
[   32.422800][ T3481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   32.422817][ T3481] RSP: 002b:00007fc1cf226e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[   32.422844][ T3481] RAX: ffffffffffffffda RBX: 000000000000048d RCX: 00007fc1d0bbe929
[   32.422885][ T3481] RDX: 00007fc1cf226ef0 RSI: 0000000000000000 RDI: 00007fc1d0c414cc
[   32.422896][ T3481] RBP: 0000200000002480 R08: 00007fc1cf226bb7 R09: 00007fc1cf226e40
[   32.422909][ T3481] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000480
[   32.422924][ T3481] R13: 00007fc1cf226ef0 R14: 00007fc1cf226eb0 R15: 00002000000039c0
[   32.422949][ T3481]  </TASK>
[   32.425447][ T3315] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.431251][   T29] audit: type=1326 audit(1749893658.092:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3477 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07cd30e929 code=0x7ffc0000
[   32.437747][ T3315] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.458745][ T3481] loop1: detected capacity change from 0 to 512
[   32.463117][ T3315] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.463154][ T3315] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.737770][ T3481] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[   32.757218][ T3481] EXT4-fs: error: could not find journal device path
[   32.866172][ T3490] Zero length message leads to an empty skb
[   32.873202][ T3485] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4'.
[   32.884023][ T3488] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   32.886039][ T3492] loop4: detected capacity change from 0 to 512
[   32.912981][ T3485] syz.3.4 (3485) used greatest stack depth: 10016 bytes left
[   32.927205][ T3492] =======================================================
[   32.927205][ T3492] WARNING: The mand mount option has been deprecated and
[   32.927205][ T3492]          and is ignored by this kernel. Remove the mand
[   32.927205][ T3492]          option from the mount to silence this warning.
[   32.927205][ T3492] =======================================================
[   32.982864][ T3496] program syz.3.9 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   32.992180][ T3496] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   33.072522][ T3492] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.075940][ T3508] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   33.103386][ T3492] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   33.117354][ T3506] loop2: detected capacity change from 0 to 1024
[   33.144311][ T3506] EXT4-fs: inline encryption not supported
[   33.151947][ T3506] journal_path: Non-blockdev passed as './file1'
[   33.158548][ T3506] EXT4-fs: error: could not find journal device path
[   33.230193][ T3518] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14'.
[   33.253396][ T3518] loop8: detected capacity change from 0 to 16384
[   33.374052][ T3524] netdevsim netdevsim1: Direct firmware load for ÈöníñÆgkNšÄq>ä*x(Oˆ@ failed with error -2
[   33.386783][ T3525] netlink: 3 bytes leftover after parsing attributes in process `syz.3.14'.
[   33.401989][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.455740][ T3529] 9pnet_fd: Insufficient options for proto=fd
[   33.465911][ T3525] 0ªX¹¦À: renamed from caif0
[   33.518087][ T3525] 0ªX¹¦À: entered allmulticast mode
[   33.523483][ T3525] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[   33.550593][ T3522] loop8: detected capacity change from 16384 to 0
[   33.570967][    C0] I/O error, dev loop8, sector 13056 op 0x0:(READ) flags 0x80700 phys_seg 5 prio class 0
[   33.746470][ T3539] SELinux: ebitmap: truncated map
[   33.775791][ T3539] SELinux: failed to load policy
[   33.864186][ T3547] netlink: 43 bytes leftover after parsing attributes in process `syz.4.22'.
[   33.891312][ T3551] FAULT_INJECTION: forcing a failure.
[   33.891312][ T3551] name failslab, interval 1, probability 0, space 0, times 0
[   33.904056][ T3551] CPU: 0 UID: 0 PID: 3551 Comm: syz.3.24 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(voluntary) 
[   33.904103][ T3551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   33.904118][ T3551] Call Trace:
[   33.904125][ T3551]  <TASK>
[   33.904133][ T3551]  __dump_stack+0x1d/0x30
[   33.904154][ T3551]  dump_stack_lvl+0xe8/0x140
[   33.904279][ T3551]  dump_stack+0x15/0x1b
[   33.904295][ T3551]  should_fail_ex+0x265/0x280
[   33.904344][ T3551]  ? audit_log_d_path+0x8d/0x150
[   33.904376][ T3551]  should_failslab+0x8c/0xb0
[   33.904403][ T3551]  __kmalloc_cache_noprof+0x4c/0x320
[   33.904436][ T3551]  audit_log_d_path+0x8d/0x150
[   33.904528][ T3551]  audit_log_d_path_exe+0x42/0x70
[   33.904570][ T3551]  audit_log_task+0x1e9/0x250
[   33.904601][ T3551]  audit_seccomp+0x61/0x100
[   33.904716][ T3551]  ? __seccomp_filter+0x68c/0x10d0
[   33.904830][ T3551]  __seccomp_filter+0x69d/0x10d0
[   33.904860][ T3551]  ? __rcu_read_unlock+0x34/0x70
[   33.904884][ T3551]  ? bpf_get_current_ancestor_cgroup_id+0xd5/0xf0
[   33.904934][ T3551]  ? __rcu_read_unlock+0x4f/0x70
[   33.904961][ T3551]  ? bpf_trace_run2+0x124/0x1c0
[   33.904994][ T3551]  __secure_computing+0x82/0x150
[   33.905023][ T3551]  syscall_trace_enter+0xcf/0x1e0
[   33.905130][ T3551]  do_syscall_64+0xac/0x200
[   33.905151][ T3551]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   33.905175][ T3551]  ? clear_bhb_loop+0x40/0x90
[   33.905226][ T3551]  ? clear_bhb_loop+0x40/0x90
[   33.905254][ T3551]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   33.905280][ T3551] RIP: 0033:0x7f46ae5fd33c
[   33.905303][ T3551] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   33.905320][ T3551] RSP: 002b:00007f46acc67030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   33.905360][ T3551] RAX: ffffffffffffffda RBX: 00007f46ae825fa0 RCX: 00007f46ae5fd33c
[   33.905375][ T3551] RDX: 000000000000000f RSI: 00007f46acc670a0 RDI: 0000000000000006
[   33.905390][ T3551] RBP: 00007f46acc67090 R08: 0000000000000000 R09: 0000000000000000
[   33.905405][ T3551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   33.905419][ T3551] R13: 0000000000000000 R14: 00007f46ae825fa0 R15: 00007ffc244fdbb8
[   33.905495][ T3551]  </TASK>
[   34.202759][ T3558] loop0: detected capacity change from 0 to 512
[   34.222216][ T3558] journal_path: Lookup failure for './file0/../file0'
[   34.229097][ T3558] EXT4-fs: error: could not find journal device path
[   34.244981][ T3558] SELinux: syz.0.26 (3558) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   34.343006][ T3564] xt_CT: You must specify a L4 protocol and not use inversions on it
[   34.367590][ T3567] loop4: detected capacity change from 0 to 8192
[   34.396284][ T3575] FAULT_INJECTION: forcing a failure.
[   34.396284][ T3575] name failslab, interval 1, probability 0, space 0, times 0
[   34.409047][ T3575] CPU: 0 UID: 0 PID: 3575 Comm: syz.1.30 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(voluntary) 
[   34.409080][ T3575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   34.409094][ T3575] Call Trace:
[   34.409102][ T3575]  <TASK>
[   34.409112][ T3575]  __dump_stack+0x1d/0x30
[   34.409200][ T3575]  dump_stack_lvl+0xe8/0x140
[   34.409219][ T3575]  dump_stack+0x15/0x1b
[   34.409236][ T3575]  should_fail_ex+0x265/0x280
[   34.409275][ T3575]  should_failslab+0x8c/0xb0
[   34.409330][ T3575]  kmem_cache_alloc_noprof+0x50/0x310
[   34.409361][ T3575]  ? radix_tree_node_alloc+0x8a/0x1f0
[   34.409414][ T3575]  radix_tree_node_alloc+0x8a/0x1f0
[   34.409458][ T3575]  idr_get_free+0x1fa/0x550
[   34.409502][ T3575]  idr_alloc_u32+0xca/0x180
[   34.409576][ T3575]  u32_change+0xa84/0x14c0
[   34.409613][ T3575]  ? u32_init+0x25d/0x3d0
[   34.409645][ T3575]  ? __kmalloc_cache_noprof+0x299/0x320
[   34.409841][ T3575]  ? __pfx_u32_change+0x10/0x10
[   34.409876][ T3575]  tc_new_tfilter+0xde1/0x10a0
[   34.409937][ T3575]  ? __pfx_tc_new_tfilter+0x10/0x10
[   34.409973][ T3575]  rtnetlink_rcv_msg+0x5fb/0x6d0
[   34.410014][ T3575]  netlink_rcv_skb+0x123/0x220
[   34.410042][ T3575]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   34.410100][ T3575]  rtnetlink_rcv+0x1c/0x30
[   34.410162][ T3575]  netlink_unicast+0x5a1/0x670
[   34.410205][ T3575]  netlink_sendmsg+0x58b/0x6b0
[   34.410229][ T3575]  ? __pfx_netlink_sendmsg+0x10/0x10
[   34.410255][ T3575]  __sock_sendmsg+0x145/0x180
[   34.410318][ T3575]  ____sys_sendmsg+0x31e/0x4e0
[   34.410348][ T3575]  ___sys_sendmsg+0x17b/0x1d0
[   34.410386][ T3575]  __x64_sys_sendmsg+0xd4/0x160
[   34.410418][ T3575]  x64_sys_call+0x2999/0x2fb0
[   34.410443][ T3575]  do_syscall_64+0xd2/0x200
[   34.410493][ T3575]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   34.410567][ T3575]  ? clear_bhb_loop+0x40/0x90
[   34.410595][ T3575]  ? clear_bhb_loop+0x40/0x90
[   34.410617][ T3575]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   34.410767][ T3575] RIP: 0033:0x7fc1d0bbe929
[   34.410782][ T3575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   34.410799][ T3575] RSP: 002b:00007fc1cf227038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   34.410817][ T3575] RAX: ffffffffffffffda RBX: 00007fc1d0de5fa0 RCX: 00007fc1d0bbe929
[   34.410831][ T3575] RDX: 0000000000000040 RSI: 0000200000000300 RDI: 0000000000000003
[   34.410846][ T3575] RBP: 00007fc1cf227090 R08: 0000000000000000 R09: 0000000000000000
[   34.410862][ T3575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   34.410877][ T3575] R13: 0000000000000000 R14: 00007fc1d0de5fa0 R15: 00007ffcd0fe8e08
[   34.410908][ T3575]  </TASK>
[   34.807840][ T3604] netlink: 'syz.1.36': attribute type 3 has an invalid length.
[   34.815517][ T3604] netlink: 'syz.1.36': attribute type 1 has an invalid length.
[   34.823156][ T3604] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.36'.
[   34.848376][ T3604] netlink: 'syz.1.36': attribute type 10 has an invalid length.
[   34.904164][ T3604] team0: Port device dummy0 added
[   34.914160][ T3604] netlink: 'syz.1.36': attribute type 10 has an invalid length.
[   34.946282][ T3609] FAULT_INJECTION: forcing a failure.
[   34.946282][ T3609] name failslab, interval 1, probability 0, space 0, times 0
[   34.959162][ T3609] CPU: 0 UID: 0 PID: 3609 Comm: syz.2.38 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(voluntary) 
[   34.959193][ T3609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   34.959266][ T3609] Call Trace:
[   34.959273][ T3609]  <TASK>
[   34.959282][ T3609]  __dump_stack+0x1d/0x30
[   34.959305][ T3609]  dump_stack_lvl+0xe8/0x140
[   34.959380][ T3609]  dump_stack+0x15/0x1b
[   34.959418][ T3609]  should_fail_ex+0x265/0x280
[   34.959493][ T3609]  should_failslab+0x8c/0xb0
[   34.959588][ T3609]  kmem_cache_alloc_noprof+0x50/0x310
[   34.959619][ T3609]  ? sk_prot_alloc+0x3f/0x190
[   34.959646][ T3609]  sk_prot_alloc+0x3f/0x190
[   34.959720][ T3609]  sk_alloc+0x34/0x360
[   34.959759][ T3609]  unix_create1+0xa5/0x430
[   34.959864][ T3609]  ? inode_init_always_gfp+0x4cd/0x500
[   34.959950][ T3609]  unix_create+0xff/0x130
[   34.959982][ T3609]  __sock_create+0x2e9/0x5b0
[   34.960022][ T3609]  __sys_socketpair+0x1bc/0x430
[   34.960068][ T3609]  __x64_sys_socketpair+0x52/0x60
[   34.960106][ T3609]  x64_sys_call+0x23f2/0x2fb0
[   34.960131][ T3609]  do_syscall_64+0xd2/0x200
[   34.960151][ T3609]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   34.960236][ T3609]  ? clear_bhb_loop+0x40/0x90
[   34.960284][ T3609]  ? clear_bhb_loop+0x40/0x90
[   34.960374][ T3609]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   34.960479][ T3609] RIP: 0033:0x7fb3c9a1087a
[   34.960603][ T3609] Code: 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   34.960652][ T3609] RSP: 002b:00007fb3c8076f78 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[   34.960677][ T3609] RAX: ffffffffffffffda RBX: 00007fb3c9c35f00 RCX: 00007fb3c9a1087a
[   34.960692][ T3609] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
[   34.960707][ T3609] RBP: 00007fb3c8077090 R08: 0000000000000000 R09: 0000000000000000
[   34.960718][ T3609] R10: 00007fb3c8076f98 R11: 0000000000000246 R12: 0000000000000001
[   34.960729][ T3609] R13: 0000000000000000 R14: 00007fb3c9c35fa0 R15: 00007ffd60e89198
[   34.960748][ T3609]  </TASK>
[   35.003089][ T3604] team0: Port device dummy0 removed
[   35.175828][ T3604] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   35.271698][ T3622] 9pnet_fd: Insufficient options for proto=fd
[   35.368032][ T3630] loop4: detected capacity change from 0 to 512
[   35.379609][ T3630] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   35.391611][ T3630] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002]
[   35.399933][ T3630] System zones: 0-2, 18-18, 34-34
[   35.408979][ T3630] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.423379][ T3630] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   35.455472][ T3630] vhci_hcd: invalid port number 23
[   35.460057][ T3632] syzkaller0: entered promiscuous mode
[   35.466258][ T3632] syzkaller0: entered allmulticast mode
[   35.541913][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.628515][ T3645] loop2: detected capacity change from 0 to 512
[   35.650115][ T3645] journal_path: Lookup failure for './file0/../file0'
[   35.657004][ T3645] EXT4-fs: error: could not find journal device path
[   35.694772][ T3645] SELinux: syz.2.49 (3645) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   35.816248][ T3658] lo speed is unknown, defaulting to 1000
[   35.822086][ T3658] lo speed is unknown, defaulting to 1000
[   35.828371][ T3658] lo speed is unknown, defaulting to 1000
[   35.835921][ T3658] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   35.854651][ T3658] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   35.860882][ T3660] FAULT_INJECTION: forcing a failure.
[   35.860882][ T3660] name failslab, interval 1, probability 0, space 0, times 0
[   35.874623][ T3660] CPU: 0 UID: 0 PID: 3660 Comm: syz.3.55 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(voluntary) 
[   35.874651][ T3660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   35.874665][ T3660] Call Trace:
[   35.874674][ T3660]  <TASK>
[   35.874683][ T3660]  __dump_stack+0x1d/0x30
[   35.874709][ T3660]  dump_stack_lvl+0xe8/0x140
[   35.874733][ T3660]  dump_stack+0x15/0x1b
[   35.874853][ T3660]  should_fail_ex+0x265/0x280
[   35.874929][ T3660]  should_failslab+0x8c/0xb0
[   35.874959][ T3660]  __kmalloc_noprof+0xa5/0x3e0
[   35.875029][ T3660]  ? nft_match_large_init+0x5d/0xe0
[   35.875067][ T3660]  ? nft_parse_register_store+0x229/0x260
[   35.875110][ T3660]  nft_match_large_init+0x5d/0xe0
[   35.875148][ T3660]  nf_tables_newrule+0xfaa/0x17a0
[   35.875222][ T3660]  ? __nla_parse+0x40/0x60
[   35.875250][ T3660]  nfnetlink_rcv+0xb99/0x1690
[   35.875323][ T3660]  netlink_unicast+0x5a1/0x670
[   35.875434][ T3660]  netlink_sendmsg+0x58b/0x6b0
[   35.875466][ T3660]  ? __pfx_netlink_sendmsg+0x10/0x10
[   35.875531][ T3660]  __sock_sendmsg+0x145/0x180
[   35.875561][ T3660]  ____sys_sendmsg+0x31e/0x4e0
[   35.875590][ T3660]  ___sys_sendmsg+0x17b/0x1d0
[   35.875652][ T3660]  __x64_sys_sendmsg+0xd4/0x160
[   35.875685][ T3660]  x64_sys_call+0x2999/0x2fb0
[   35.875713][ T3660]  do_syscall_64+0xd2/0x200
[   35.875740][ T3660]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   35.875769][ T3660]  ? clear_bhb_loop+0x40/0x90
[   35.875858][ T3660]  ? clear_bhb_loop+0x40/0x90
[   35.875945][ T3660]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   35.875971][ T3660] RIP: 0033:0x7f46ae5fe929
[   35.875988][ T3660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   35.876005][ T3660] RSP: 002b:00007f46acc67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   35.876024][ T3660] RAX: ffffffffffffffda RBX: 00007f46ae825fa0 RCX: 00007f46ae5fe929
[   35.876039][ T3660] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[   35.876076][ T3660] RBP: 00007f46acc67090 R08: 0000000000000000 R09: 0000000000000000
[   35.876088][ T3660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   35.876099][ T3660] R13: 0000000000000000 R14: 00007f46ae825fa0 R15: 00007ffc244fdbb8
[   35.876050][ T3658] lo speed is unknown, defaulting to 1000
[   35.876121][ T3660]  </TASK>
[   35.886992][ T3664] netlink: 'syz.4.56': attribute type 3 has an invalid length.
[   35.898288][ T3658] lo speed is unknown, defaulting to 1000
[   35.898696][ T3664] netlink: 'syz.4.56': attribute type 1 has an invalid length.
[   35.904944][ T3658] lo speed is unknown, defaulting to 1000
[   35.905027][ T3664] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.56'.
[   35.909710][ T3658] lo speed is unknown, defaulting to 1000
[   35.956281][ T3664] netlink: 'syz.4.56': attribute type 10 has an invalid length.
[   35.992237][ T3658] lo speed is unknown, defaulting to 1000
[   35.998123][ T3664] team0: Port device dummy0 added
[   36.190897][ T3678] netlink: 'syz.4.56': attribute type 10 has an invalid length.
[   36.216681][ T3678] team0: Port device dummy0 removed
[   36.266055][ T3678] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   36.371480][ T3703] 9pnet_fd: Insufficient options for proto=fd
[   36.430145][ T3710] mmap: syz.2.63 (3710) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   36.505757][ T3703] lo speed is unknown, defaulting to 1000
[   36.519579][ T3718] loop2: detected capacity change from 0 to 1024
[   36.565871][ T3723] vlan2: entered promiscuous mode
[   36.565890][ T3723] hsr0: entered promiscuous mode
[   36.566034][ T3723] vlan2: entered allmulticast mode
[   36.581277][ T3723] hsr0: entered allmulticast mode
[   36.586361][ T3723] hsr_slave_0: entered allmulticast mode
[   36.592081][ T3723] hsr_slave_1: entered allmulticast mode
[   36.599286][ T3718] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   36.609713][ T3718] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   36.642581][ T3718] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000]
[   36.653297][ T3718] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.63: lblock 2 mapped to illegal pblock 2 (length 1)
[   36.683680][ T3718] EXT4-fs (loop2): Remounting filesystem read-only
[   36.723741][ T3718] EXT4-fs (loop2): 1 orphan inode deleted
[   36.757604][ T3718] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.779448][ T3718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.086713][ T3757] lo speed is unknown, defaulting to 1000
[   37.176867][ T3757] Cannot find add_set index 4 as target
[   37.476445][   T29] kauditd_printk_skb: 936 callbacks suppressed
[   37.476460][   T29] audit: type=1326 audit(1749893663.292:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3753 comm="syz.0.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07cd30e929 code=0x7ffc0000
[   37.531110][   T29] audit: type=1326 audit(1749893663.332:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3753 comm="syz.0.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07cd30e929 code=0x7ffc0000
[   37.563921][ T3764] 9pnet_fd: Insufficient options for proto=fd
[   37.570519][   T29] audit: type=1326 audit(1749893663.382:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3760 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d0bbe929 code=0x7ffc0000
[   37.585156][ T3762] loop1: detected capacity change from 0 to 2048
[   37.595371][   T29] audit: type=1326 audit(1749893663.382:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3760 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fc1d0bbe929 code=0x7ffc0000
[   37.624145][   T29] audit: type=1326 audit(1749893663.392:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3760 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d0bbe929 code=0x7ffc0000
[   37.647397][   T29] audit: type=1326 audit(1749893663.392:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3760 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d0bbe929 code=0x7ffc0000
[   37.670850][   T29] audit: type=1326 audit(1749893663.392:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3760 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1d0bbe929 code=0x7ffc0000
[   37.694289][   T29] audit: type=1326 audit(1749893663.392:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3760 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d0bbe929 code=0x7ffc0000
[   37.717601][   T29] audit: type=1326 audit(1749893663.392:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3760 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc1d0bbe929 code=0x7ffc0000
[   37.740889][   T29] audit: type=1326 audit(1749893663.392:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3760 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d0bbe929 code=0x7ffc0000
[   37.846542][ T3771] netlink: 'syz.4.86': attribute type 3 has an invalid length.
[   37.854294][ T3771] netlink: 'syz.4.86': attribute type 1 has an invalid length.
[   37.861968][ T3771] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.86'.
[   37.886016][ T3764] lo speed is unknown, defaulting to 1000
[   37.917973][ T3775] bond0: (slave dummy0): Releasing backup interface
[   37.933924][ T3775] team0: Port device dummy0 added
[   37.969648][ T3771] team0: Port device dummy0 removed
[   37.977787][ T3771] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   38.015567][ T3787] loop3: detected capacity change from 0 to 512
[   38.033606][ T3787] EXT4-fs: Ignoring removed nobh option
[   38.044034][ T3787] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   38.057189][ T3787] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   38.073614][ T3792] netlink: 28 bytes leftover after parsing attributes in process `syz.4.93'.
[   38.082543][ T3792] netlink: 28 bytes leftover after parsing attributes in process `syz.4.93'.
[   38.091451][ T3792] netlink: 28 bytes leftover after parsing attributes in process `syz.4.93'.
[   38.104740][ T3787] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:169: inode #15: comm syz.3.91: inline data xattr refers to an external xattr inode
[   38.120449][ T3787] EXT4-fs (loop3): Remounting filesystem read-only
[   38.130890][ T3787] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.160712][ T3792] netlink: 28 bytes leftover after parsing attributes in process `syz.4.93'.
[   38.169644][ T3792] netlink: 28 bytes leftover after parsing attributes in process `syz.4.93'.
[   38.178543][ T3792] netlink: 28 bytes leftover after parsing attributes in process `syz.4.93'.
[   38.198079][ T3787] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[   38.227713][ T3792] netlink: 28 bytes leftover after parsing attributes in process `syz.4.93'.
[   38.236955][ T3792] netlink: 28 bytes leftover after parsing attributes in process `syz.4.93'.
[   38.245795][ T3792] netlink: 28 bytes leftover after parsing attributes in process `syz.4.93'.
[   38.411185][ T3814] loop4: detected capacity change from 0 to 512
[   38.421428][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.441337][ T3814] journal_path: Lookup failure for './file0/../file0'
[   38.448199][ T3814] EXT4-fs: error: could not find journal device path
[   38.551859][ T3814] SELinux: syz.4.100 (3814) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   38.682785][ T3833] lo speed is unknown, defaulting to 1000
[   38.729861][ T3833] Cannot find add_set index 4 as target
[   38.967201][ T3845] xt_CT: You must specify a L4 protocol and not use inversions on it
[   39.040891][ T3847] netlink: 24 bytes leftover after parsing attributes in process `syz.1.112'.
[   39.084808][ T3849] loop3: detected capacity change from 0 to 512
[   39.124906][ T3849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.143482][ T3847] hsr_slave_0 (unregistering): left promiscuous mode
[   39.154191][ T3849] ext4 filesystem being mounted at /bus supports timestamps until 2038-01-19 (0x7fffffff)
[   39.166460][ T3849] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.221612][ T3858] SELinux: syz.0.116 (3858) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   39.313107][ T3867] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[   39.367269][ T3876] loop2: detected capacity change from 0 to 512
[   39.375069][ T3876] journal_path: Lookup failure for './file0/../file0'
[   39.381951][ T3876] EXT4-fs: error: could not find journal device path
[   39.443182][ T3876] SELinux: syz.2.124 (3876) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   39.566716][ T3893] loop3: detected capacity change from 0 to 512
[   39.592889][ T3893] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   39.608695][ T3893] EXT4-fs (loop3): orphan cleanup on readonly fs
[   39.616029][ T3893] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   39.631311][ T3893] EXT4-fs (loop3): Cannot turn on quotas: error -117
[   39.638557][ T3900] lo speed is unknown, defaulting to 1000
[   39.639410][ T3893] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.130: bg 0: block 40: padding at end of block bitmap is not set
[   39.659356][ T3893] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem
[   39.669176][    C0] hrtimer: interrupt took 38294 ns
[   39.671170][ T3893] EXT4-fs (loop3): 1 truncate cleaned up
[   39.767578][ T3913] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3913 comm=syz.0.133
[   39.784073][ T3910] loop2: detected capacity change from 0 to 512
[   39.790896][ T3910] journal_path: Lookup failure for './file0/../file0'
[   39.797794][ T3910] EXT4-fs: error: could not find journal device path
[   39.811078][ T3893] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   39.812151][ T3910] SELinux: syz.2.134 (3910) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   39.862357][ T3568] ==================================================================
[   39.870516][ T3568] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_unlink
[   39.877577][ T3568] 
[   39.879912][ T3568] write to 0xffff88810427e0ec of 4 bytes by task 3569 on cpu 0:
[   39.887571][ T3568]  shmem_unlink+0x13c/0x170
[   39.892100][ T3568]  shmem_rename2+0x1a1/0x290
[   39.896704][ T3568]  vfs_rename+0x7d6/0xa20
[   39.901049][ T3568]  do_renameat2+0x764/0xab0
[   39.905568][ T3568]  __x64_sys_rename+0x58/0x70
[   39.910266][ T3568]  x64_sys_call+0x2aee/0x2fb0
[   39.914959][ T3568]  do_syscall_64+0xd2/0x200
[   39.919481][ T3568]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   39.925394][ T3568] 
[   39.927729][ T3568] read to 0xffff88810427e0ec of 4 bytes by task 3568 on cpu 1:
[   39.935287][ T3568]  fill_mg_cmtime+0x5b/0x260
[   39.939899][ T3568]  generic_fillattr+0x24a/0x340
[   39.944801][ T3568]  shmem_getattr+0x181/0x200
[   39.949410][ T3568]  vfs_getattr_nosec+0x143/0x1e0
[   39.954364][ T3568]  vfs_statx+0x113/0x390
[   39.958640][ T3568]  vfs_fstatat+0x115/0x170
[   39.963093][ T3568]  __se_sys_newfstatat+0x55/0x260
[   39.968143][ T3568]  __x64_sys_newfstatat+0x55/0x70
[   39.973196][ T3568]  x64_sys_call+0x2c22/0x2fb0
[   39.977891][ T3568]  do_syscall_64+0xd2/0x200
[   39.982413][ T3568]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   39.988326][ T3568] 
[   39.990655][ T3568] value changed: 0x291bd6d0 -> 0x291fee8a
[   39.996386][ T3568] 
[   39.998718][ T3568] Reported by Kernel Concurrency Sanitizer on:
[   40.004881][ T3568] CPU: 1 UID: 0 PID: 3568 Comm: udevd Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(voluntary) 
[   40.016877][ T3568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   40.026950][ T3568] ==================================================================
[   40.035258][ T3893] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   40.070289][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.