last executing test programs:

6.800901259s ago: executing program 1 (id=79):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x27)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0xc0d6, &(0x7f0000000140)={[{@noload}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@errors_remount}, {@lazytime}, {@minixdf}, {@noquota}, {@minixdf}]}, 0x1, 0x46f, &(0x7f0000000240)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r1, 0x6611, 0x0)
write$binfmt_aout(r1, &(0x7f0000000ac0)={{0x10b, 0x18, 0x9, 0x3c1, 0x1aa, 0x2, 0x1ba, 0xb00}, "", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x520)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
r2 = openat$cgroup_ro(r0, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/13, @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000480)='kmem_cache_free\x00', r3}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x206004a, &(0x7f00000009c0)={[{@errors_continue}, {@usrquota}, {@bh}, {@noinit_itable}, {@journal_checksum}, {@nodiscard}, {@noquota}, {@noinit_itable}]}, 0xfe, 0x47d, &(0x7f00000004c0)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x41009432, 0x0)
bind$netlink(r2, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x100000}, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

6.620763423s ago: executing program 1 (id=83):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f00000001c0)={0x7, 'veth0_to_hsr\x00', {0x4}, 0xeaa})
r1 = getpid()
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x80, &(0x7f0000000040), &(0x7f0000000180)=0x4)

5.649559651s ago: executing program 3 (id=103):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x45, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r2}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440), &(0x7f00000006c0), 0x1, r3}, 0x38)

5.592370182s ago: executing program 3 (id=104):
unshare(0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10)
lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400), 0x480480, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0, 0x89, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r4}, 0x18)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004c16, &(0x7f00000001c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@nobarrier}]}, 0xff, 0x257, &(0x7f0000000500)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8441, 0x141)
pwrite64(r6, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61)
ioctl$EXT4_IOC_MIGRATE(r6, 0x6609)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r8, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50)
ioctl$FIONCLEX(r7, 0x5450)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)

5.498325674s ago: executing program 3 (id=107):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r3, 0x0)
accept(r3, 0x0, 0x0)
shutdown(r3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r2, 0x0, 0x1}, 0x15)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000580)={0x8, 0x8, 0xde0})
r5 = syz_io_uring_setup(0x3d2f, &(0x7f0000000300)={0x0, 0xea9a, 0x200, 0x3, 0x220}, &(0x7f00000003c0), &(0x7f0000000400))
io_uring_setup(0x3da8, &(0x7f0000000480)={0x0, 0x4a8f, 0x10, 0x0, 0x2fc, 0x0, r5})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r6}, 0x20)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r7)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fedbdf250d000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2404c881}, 0x2000c800)

5.371889006s ago: executing program 3 (id=111):
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0)
ioctl$EVIOCGABS20(r0, 0x40044591, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x1, 0x5, 0x3, 0x0, 0xff, 0xea2b, 0x7, 0x2300000000000}, 0x0, &(0x7f00000001c0)={0x9, 0xbb18, 0x8002, 0xc, 0x0, 0x6, 0x0, 0x4}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x10)
msgsnd(0x0, 0x0, 0x8, 0x0)
socket$unix(0x1, 0x5, 0x0)

5.250059119s ago: executing program 3 (id=113):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x18)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', <r5=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01005ee1fadefcdbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004"], 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840)

1.890848934s ago: executing program 4 (id=149):
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
bind$tipc(r0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
close(r0)

1.838413415s ago: executing program 4 (id=150):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[], 0x0)
memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
socket(0x10, 0x2, 0x0)
pipe(&(0x7f0000000080))
socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$l2tp6(0xa, 0x2, 0x73)
socket$l2tp6(0xa, 0x2, 0x73)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x801, 0x84)
socket$igmp(0x2, 0x3, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x6)
socket$inet6_udplite(0xa, 0x2, 0x88)
pipe(&(0x7f0000000080))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc0000000800110007000000", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1.53394126s ago: executing program 1 (id=153):
unshare(0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10)
lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400), 0x480480, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0, 0x89, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r4}, 0x18)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004c16, &(0x7f00000001c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@nobarrier}]}, 0xff, 0x257, &(0x7f0000000500)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8441, 0x141)
pwrite64(r6, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61)
ioctl$EXT4_IOC_MIGRATE(r6, 0x6609)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r8, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50)
ioctl$FIONCLEX(r7, 0x5450)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)

1.494452091s ago: executing program 1 (id=155):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getpid()
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9f4a01001800000000000000800000008000000007000000100000000000000c020000001000000d00000012010000000c00000005000006040000000a000000940f000009000000090000000b0000000200000005000000070000000900000000000093040000000b00000049e1000009000000080000000000000c020000000d000000000000110400000003000000003061616161000000000000000000"], &(0x7f00000002c0)=""/22, 0x9f, 0x16, 0x0, 0xfffffffb}, 0x28)
mmap(&(0x7f00001bc000/0x1000)=nil, 0x1000, 0x0, 0x80010, r2, 0xe0930000)
sched_setaffinity(r0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x6, 0x5004)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0x8, 0xd215)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00'}, 0xe)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)

1.277933765s ago: executing program 2 (id=159):
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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")
creat(&(0x7f0000000100)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r3 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x100)
preadv2(r3, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x2, 0x0, 0x0, 0x0)

1.134080928s ago: executing program 4 (id=160):
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040054)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
io_setup(0x202, &(0x7f0000000200)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x82, 0x1, 0x0, r2, 0x0, 0x0, 0x3000}])
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)
syslog(0x2, &(0x7f0000000000)=""/127, 0x7f)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = epoll_create1(0x0)
r7 = fcntl$dupfd(r5, 0x0, r6)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000040)={0x20000001})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10)
r9 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r9, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'})

1.104977339s ago: executing program 2 (id=161):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x45, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440), &(0x7f00000006c0), 0x1, r2}, 0x38)

1.03806268s ago: executing program 0 (id=162):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffd}, 0x18)
r1 = syz_io_uring_setup(0x1104, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xfffffffe, 0x21e}, &(0x7f00000003c0)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1fc, 0x0, 0x1})
io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0)

958.936992ms ago: executing program 2 (id=163):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
socket$packet(0x11, 0x3, 0x300)
r0 = socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x4, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x7, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0x2007, &(0x7f0000000980))
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="390200000000000000001407000018"], 0x2c}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r3, 0x0, r5, 0x0, 0x8000f28, 0x0)
splice(r4, 0x0, r3, 0x0, 0x7f, 0xe)
write(r2, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000734000/0x4000)=nil, 0x4000, 0x0, 0xbc32038f2d035af6, 0xffffffffffffffff, 0x2882c000)
r6 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00')
lseek(r6, 0x2004, 0x0)
sendto$packet(r0, 0x0, 0x0, 0x4081, 0x0, 0x0)

942.373692ms ago: executing program 0 (id=164):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11)
syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0xaa042, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0)
close(r5)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x8, 0xb}, {0xd, 0xfff1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x4}}]}, 0x38}}, 0x4008000)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
signalfd4(0xffffffffffffffff, &(0x7f0000000d00)={[0x8]}, 0x8, 0x80000) (fail_nth: 4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={&(0x7f0000000000)="1323fd592e72e646a7e4c208ae3962536e655c8295172e9863a0382b65bc86231213744bfc4b2f49462e62b6460b0752d4883ece9e11cc76cc27d42ff1662ec0328d7813000d242505ecb9a540dad03464af8f5732cb35cd7f84125bad0938b97647f15474ced07d60d1e0474cee1b12815db943896e77050d63a40f58f4e54ef65ed5d9930ade6eba87", &(0x7f00000002c0)=""/138, &(0x7f0000000380)="345945dcbd5bd59d02149a6824240d7370b89617d85ff9a3fe09cd6cc066d0263c5fc49b2ccc8f1cedf5af2b2503e8d6306410b33e946e50cc2001ea0e767f59f7c3ff88e6e328cb0087ebe0a05dcad16ae318546d16e8c38677983e6f05462c438e2fd265eaf76c028e88647398557feea3f7520b4be1417cc261897e57472936f9fce15c0d5fad79b625047bfe1a9aec0027de068bff75ead5831917e7ba9806cba02d0e", &(0x7f0000000440)="b50cdd9bb3fce8571fa85112b0b873e1464b9054eb031bcde0569116b64bb8ea2d497b9f4941219686e87388406f25d88c091aa64e3680aed4c3de8d976644af8ab3459cc056a2f33e8fb261d5100fc8adfc4a06947ad64f0eb676228b56aaedecf98c18a5cbe8d6c8a97741e1ce0d79b27ad86dbc9df783a3e8dfcc83fe37723253343e0b216942a195", 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38)
socket$key(0xf, 0x3, 0x2)
socket$nl_route(0x10, 0x3, 0x0)

894.252643ms ago: executing program 4 (id=165):
mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x20132, 0xffffffffffffffff, 0x391e1000)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x3)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2})
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000380)=ANY=[@ANYRESDEC])

589.870689ms ago: executing program 0 (id=166):
unshare(0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10)
lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400), 0x480480, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0, 0x89, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r4}, 0x18)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004c16, &(0x7f00000001c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@nobarrier}]}, 0xff, 0x257, &(0x7f0000000500)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000140))
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8441, 0x141)
pwrite64(r6, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61)
ioctl$EXT4_IOC_MIGRATE(r6, 0x6609)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r8, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50)
ioctl$FIONCLEX(r7, 0x5450)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)

551.911549ms ago: executing program 1 (id=167):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0)
getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
gettid()
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r3}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10)
bpf$MAP_CREATE(0x600000000000000, &(0x7f00000004c0)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r2, &(0x7f0000000c00)="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"}, 0x20)
r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401)
ioctl$BLKTRACESETUP(r6, 0xc0481273, 0x0)
ioctl$SG_BLKTRACETEARDOWN(r6, 0x1276, 0x0)

529.5505ms ago: executing program 4 (id=168):
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000fe000000ff000000850000000e000000c500000001f0ffdfb433686fff95"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x298b, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
setreuid(0xffffffffffffffff, 0xee00)
r2 = semget$private(0x0, 0x6, 0x3b1)
semtimedop(r2, &(0x7f0000000040)=[{0x0, 0x1}], 0x1, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='sys_enter\x00', r3}, 0x10)
lseek(r3, 0xfffffffffffffffb, 0x1)
semop(r2, &(0x7f00000000c0)=[{}], 0x1)
semtimedop(r2, &(0x7f0000000000)=[{0x0, 0xffff, 0x1800}], 0x1, 0x0)
sendmmsg$inet6(r0, &(0x7f0000001c00)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
recvfrom(r0, 0x0, 0x0, 0x40012020, 0x0, 0xfffffffffffffe08)

515.32587ms ago: executing program 0 (id=169):
r0 = add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000800018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000c80)={0x24, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x24}}, 0x0)
add_key(0x0, 0x0, &(0x7f0000000300)="300e30", 0x3, r0)
r6 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0x1d, r6, 0x0, 0x0)

418.713612ms ago: executing program 1 (id=170):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0)
write$binfmt_script(r1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f00000002c0), 0x10)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4)
readv(r2, &(0x7f00000006c0)=[{&(0x7f0000001b80)=""/4064, 0xfe0}], 0x1)
sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRESDEC=r0, @ANYRES64=r2], 0x80}}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x2c4643, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
syz_open_dev$hidraw(&(0x7f0000000b40), 0x9, 0x4b442)
r4 = open(&(0x7f00009e1000)='./file0\x00', 0x64840, 0x4)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0, r5}, 0x18)
prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00')
ioctl$SIOCGETVIFCNT(r4, 0x89e0, &(0x7f0000000180)={0x1})
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000300)={[{@usrquota}, {@noblock_validity}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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")

418.347642ms ago: executing program 4 (id=171):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[], 0x0)
memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
socket(0x10, 0x2, 0x0)
pipe(&(0x7f0000000080))
socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$l2tp6(0xa, 0x2, 0x73)
socket$l2tp6(0xa, 0x2, 0x73)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x801, 0x84)
socket$igmp(0x2, 0x3, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x6)
socket$inet6_udplite(0xa, 0x2, 0x88)
pipe(&(0x7f0000000080))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc0000000800110007000000", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

416.814002ms ago: executing program 0 (id=172):
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$eJzs3d9rW2UfAPDvSX93e9/2hRd0XhUELYyldtZNwYuJFyI4GOi1W0mzMps2o0nHWgpuiOCNoOKFoDe79se889Yft/pfeCEbU7vhxAupnDRZszXpkq1J5vb5wGme5zwnfZ5vnnOe8yTnkATwyJpI/2QiDkTEB0nEWHV9EhEDlVR/xLGt7W5urOfSJYnNzdd/Syrb3NhYz0Xdc1L7qpnHI+L7dyMOZnbWW1pdW5gtFPLL1fxUefHsVGl17dCZxdn5/Hx+6cj0zMzho88dPbJ3sf7x09r+qx++8vRXx/5657HL7/+QxLHYXy2rj2OvTMRE9TUZSF/C27y815X1WLJ7cYM9gAdB2jF9W0d5HIix6KukmhjpZssAgE55OyI2m+lrWgIA/Kslzc//AMBDqfY5wI2N9Vxt6e0nEt117aWIGN6Kv3Z9c6ukv3rNbrhyHXT0RnLblZEkIsb3oP6JiPjsmze/SJfo0HVIgEYuXIyIU+MTO8f/ZMc9C+16poVtJu7IG/+ge75N5z/PN5r/ZW7Nf6LB/GeowbF7L+5+/Geu7EE1TaXzvxfr7m27WRd/1XhfNfefypxvIDl9ppBPx7b/RsRkDAyl+eld6pi8/vf1ZmX187/fP3rr87T+9HF7i8yV/qHbnzM3W569n5jrXbsY8UR/o/iTW/2fNJn/nmixjldfeO/TZmVp/Gm8tWVn/J21eSniqYb9v31HW7Lr/YlTld1hqrZTNPD1z5+MNqu/vv/TJa2/9l6gG9L+H909/vGk/n7NUvt1/Hhp7LtmZXePv/H+P5i8UUkPVtedny2Xl6cjBpPXdq4/vP3cWr62fRr/5JONj//d9v/0PeGpFuPvv/rrl/cef2el8c+11f/tJy7fXOhrVn9r/T9TSU1W17Qy/rXawPt57QAAAAAAAAAAAAAAAAAAAAAAAACgVZmI2B9JJnsrnclks1u/4f3/GM0UiqXywdPFlaW5qPxW9ngMZGpfdTlW932o09Xvw6/lD9+RfzYi/hcRHw+NVPLZXLEw1+vgAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBqX5Pf/0/9MtTr1gEAHTPc1+sWAADdNtzf6xYAAN023NbWIx1rBwDQPe2d/wGAh4HzPwA8epz/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6LATx4+ny+afG+u5ND93bnVloXju0Fy+tJBdXMllc8Xls9n5YnG+kM/miotN/9GFrYdCsXh2JpZWzk+V86XyVGl17eRicWWpfPLM4ux8/mR+oGuRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDrSqtrC7OFQn5ZQkKi7URc2DqOHpT27F0iBrdHiZGejU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD7p/AgAA//+mAybn")
creat(&(0x7f0000000100)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r3 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x100)
preadv2(r3, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x2, 0x0, 0x0, 0x0)

291.072345ms ago: executing program 2 (id=173):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0)
socket$key(0xf, 0x3, 0x2)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
connect$802154_dgram(r1, &(0x7f0000000080)={0x24, @short={0x2, 0xffff, 0xaaa3}}, 0x14)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r2, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r8}, 0x10)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r9}, 0x18)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r10, 0x0)
listen(r5, 0x4)
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00')
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r12}, 0x10)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r4}, 0x10)
sync()

140.033617ms ago: executing program 0 (id=174):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffd}, 0x18)
r1 = syz_io_uring_setup(0x1104, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xfffffffe, 0x21e}, &(0x7f00000003c0)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1fc, 0x0, 0x1})
io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0)

75.341689ms ago: executing program 3 (id=175):
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040054)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
io_setup(0x202, &(0x7f0000000200)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x82, 0x1, 0x0, r2, 0x0, 0x0, 0x3000}])
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)
syslog(0x2, &(0x7f0000000000)=""/127, 0x7f)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = epoll_create1(0x0)
r7 = fcntl$dupfd(r5, 0x0, r6)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000040)={0x20000001})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10)
r9 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r9, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'})

46.942559ms ago: executing program 2 (id=176):
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r0 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x2, 0x196})
r1 = open(&(0x7f0000000180)='./file0\x00', 0x20000, 0x20)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24)
listen(r2, 0x4)
r3 = socket$unix(0x1, 0x5, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x40000100, 0x0)
preadv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/184, 0xb8}], 0x1, 0x80, 0x6)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYRES16=r2, @ANYRESHEX=r3, @ANYRESOCT, @ANYRESOCT=r0], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r5, 0x0, 0x1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]})
lremovexattr(0x0, 0x0)
close_range(r0, r2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1700000002000000000000000080000000000000", @ANYRES32=r1, @ANYBLOB="00000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000dfe6e6347f35f303b4f15b6500"/40], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xf, &(0x7f0000000840)=ANY=[@ANYBLOB="c5890000bb0209001a2c113a5c4e9407e50c0000e2425b4cc036037de2140b87363e00000000000000", @ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r6}, 0x10)
r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_IO(r7, 0x2285, 0x0)
lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x2)
r8 = fcntl$dupfd(r7, 0x0, r7)
write$sndseq(r8, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38)
write$sndseq(r8, &(0x7f0000000200)=[{0x0, 0x2, 0x0, 0x0, @tick, {}, {}, @control={0x0, 0x2, 0x800}}, {0x0, 0x0, 0x1, 0x0, @time={0xffffffff}, {0x4, 0x3}, {0x0, 0x4}, @time=@tick=0x5}, {0xff, 0x0, 0x0, 0x0, @time={0x7, 0x7}, {0x0, 0x3}, {}, @control={0x0, 0x0, 0x800}}, {0x0, 0x0, 0x0, 0x7, @time={0x9, 0x7}, {}, {0x0, 0x4}, @raw32={[0x0, 0xffffffff, 0x5dd]}}, {0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0x3}, {0xa, 0x20}, @note={0x9, 0x1e, 0xf, 0x8, 0x7}}, {0x7, 0x0, 0x0, 0x5, @time, {0x2}, {0x0, 0x49}, @addr={0x1, 0x7f}}, {0x0, 0x1, 0x1, 0x0, @tick=0x401, {}, {}, @quote={{0x2, 0x2}, 0x9}}], 0xc4)
read$snapshot(r8, 0x0, 0xffffffbf)
read$char_usb(r8, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r8)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x70203, 0x0)
syz_init_net_socket$llc(0x1a, 0x801, 0x0)

0s ago: executing program 2 (id=177):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000800}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r5, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x400}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008094}, 0x24000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$tipc(r6, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="34cbf9c55466da0eadc249236ab3cbf316717306be4c08c8c7da1f1ee04ab4b4eac14995ebdf620ff778a4e3452587e42a3c6aa1bd35dfd99f23b525893bc3b5f9f3bed1986bf8d0dddd7c5cdada611f9bf641e421ed71a842d84fa289a542f941d6e06b2b14e2a706ce30acf7d82f224f3e30cadd9d15f3dddbb29dbeb9f68fb68bedb91e0b1ef48832778fe36699c7ebf101659a8f476c4a065eac71d6d1e7fafc6f25ec2c9a8f431fe347a2d30e912c5b2397613ce784637ec71e37566eb0548b461f71028459c6f137c18737d58b56949d022bf1eaf486692bb76836a233c7879d740ad0beaf5159d3380442824f536a41bb22d08fe53952b9c6fed2605d53311c71b455655f96ea6a87e41e9211e90170b0a2b1a2098175ebcd33d517085d224122264cddadd82a3d11bc4a33ce66108b22b1abc6243d306d8f6b8a2ddb5373c190d8f859a3174a200936b079f85edcac7fc03fb993ec0ff8b83f1fd3f1b888d192d99c7ede5d381784d25410cccf1b0bf26a54f065e1e3ec59cc5704fb658fc980a0ac4287ef884ee82007554be3f1e163c81468d0c26c95e3e12393776e32800bb4f086f19080c4fca3d72e8569a5627ce98f2ae0bdb3ec42c23847d47e10b1c58da7e9cea990da842d96e3a51ed7d892f7b28a10486424a69a9109ebd4d7d5a3768400ac000a6d7556ca192e5cd45efb82001ac7b53e03036b6019a07ffb545cd3853e077f08a015f6232488c1139a9409c95ed005261e36b307406ba5714ef395129345866109341feb6c7c458ce08c147a983b46375ddb3621cee0312ba1a434bcd6081e1a8ae8b6d518988b9965faf9aff86df8173b93342cceaec357a100e59b4d66553633626b0b12e9622b8f8fdfe26545b87c57f8ce8609fb8e19b0f6d1cd64e8de85c7327f543b2f38cf3086b57f85e1aaa4add723e4bc4e3ea2c27acec1e545ae3fc870bd42422f6eaf17a1f82699c9cadf224ea1e5d1705b49118d91cc3731aeed60e41bf15a9613aeda8e63a29bc7a95b2d993d23269a310b91f69d16a71243c0f4080d3359f5ddd63c7032bef14ab25eb7df4b28b2132bcbf94a281c8f5de79885a6d679f145fca292b599bb09a1864726d86b65d4781408320b968e2224c23ce7a56d8892970043737ae47f071aaeb219716bc21e3304e301eb5cd32aea951a70621eb870214a72e6c474c3a20f5bd8e089ba16326cc9a80a1a4f5f0e8f58629e20b1c73eb8af330744b187a5cfdb410466378313700ca44eb6dcbc8f3d70f58e134202546f0b1a3b61a298f2a1184b1533bdad308fa2f960087e0f239d2ccbaee3889ddc1a2bea2183b98854d255a6f708909134fab83f42f13e7604f602e264f4a3b2b2a08c673c7ce2813218159b472d3b20ecbf26dd2f7b3ba5298a4ff7444ea0936e098c126f590b05e7697ed8a3d52ba1abc7285de2f160b9b081cb775a5ab77aad1bb98d47e3da53fc4c11d4db47de1e4e6f56ad671f5d8389b33260cc546e4f0bf34fec9b2abd209e6b89e6e381367774676ed6e6eaffe42b07241c276f3c84f17a0762de83eb769bdf28991ddbc23758f01c9ecfba4ab2ca2118fcedd7adde9ff47f643c13e3ad2f13b576985128f233e329fe269d5745cd2b30e5762452a4ff58fdec30623175f8d575ced1c43411e2869aadbe6f1e79a010bca334cb08d545bc2808f359b7777d1bb5675ee210574b9f72cdeb071e07eeaa0988086213a37a972647cf21d3a3bcbd7359da327bacad41b93c5e0e494669109dddcec781774f248f5663e4fac187d42ffccf68335de2adac4f8d3e1bf04b95a9464960186ed019773ffeda18f9827a61edc5fc4088eb0965cb1bd8af1185aa3972b8f73839b4611e303bcbc1f84a330f60fa0a7795ea3cffe0e338406533e12c7deef0b5906c513eab4619a8f02fdd65dcfb7297ef971c4601ad079f7ad38278ae3ff455b37d5492af546975535450693fd4593c8157b3fdb16fd3a106d2f1509d1c06dabb8933269d790a1c5e5f7bdd4a57e1e670d7043cfed88c365b5f8eefe530ef7da5322df981723332c088fce89c2ceee23b420f64332243b9c606d67d538810a94e0ffbd37a119d8fc4d6caec0def40e62613873c74feabde63e12cb2016c1d35cf1bb95bf59e01a63be8825cb3118b74b106f21eef5ee2f41e5fb39fdde058050f780d98ced247c66fc3a03ba04edaf14d698859ba303d511cf0845dc5e269aef2287770a247fd5ae1299b45819ff41725f9da3e4dab7770eb83992b53ae9a9de69e764f6e3aee3e27cfb1bacf531a91605894ae209da6d25872fb54bf36b2ed450b51aa8ee4875b9bc7e55753f61e12a323d301faceb2ecff0686b1359343a94774a6a098dc2df440725cd8331f527d4e22f8090d8879ef4765849705b99465d7ebdf661b81c303d13b87270dc1f227d5954fcbc93bbce6fde2a1f8d573d9cd8130c173a14706f1e9dabc4d16a5b003dd3239faf91769e25cf007b0623141e4e57f11746cd62f20d73956fa84c6a12e1756b6671a64bd7a474ba425907e1a61ba6d2ffa1149165a713a141bfec0f1af51afebdb84d5f14eb51acc284403627d6ce48fd028dc04e00ed963de37f85d155c33e2b4ceb09044c4f1c7791348216b674a8831a232a638f8bfb396fabbe1f880944bc5dcac55df8abc78f804306c88617acfd4adfbb5a055d3d3e91abb763ad84e701cc5679498e04600570f4b2e57c70542043dc590ab363215e6ab3f0bd89383748783d01c9227229edac723d4e2eaa061a44f2630691f25ca6093775183fdf432e01322203dd654b336670116a6a52a27ff2032b1103a4e4be0cc2fb05b24352d72e374e90cc3db2a5a691c7f6b8d1058d7730433c742d8ce52074318b1bce9bb104cf90c8b7f65293c2b74434661444f38d94d977e03433440517f6155a3cad2621c5502dd6148b867a40e6a40be4c8265ec2164b5257f06da1784e98991f42003ced4ba67c23b8c654b542d2d31168fd853cf56cc2c464d7a8a9fbcd2715968788f8527c597ab5f917753c1f1708d2c19972373c5a22af71847de22b9f1e9d38a04ea4dd291da3099cb836a696350bf1263c3c275c27b8b82f604625451a24490b0b5367c2fd05e699546ddf17709d2e2c2710f4361d9dd6e2de2b4353b7f4f8141f6f989dc1a798a974565978e4f9ec0c59a7dbc04bcab072c8513b9ca782c22cdd31fb116c10081740fd8f7d0cbd5c54f1069297f20b45d79bb9ace8e851a655fedf47b2dc76fd30b9ba9f09c9b50d6910ffcdec7078c36fe1e9b19dbb110197496349560a43c0ab42b4ce286643e73a92246ecb71e95ce0d54114772f8477c7d5604c1a52d2f680c5868cf08a2688dd9fef492a01836112cec824483e77da93d104a9e18d06bddf9a4007740a0537ac1a5e09900acc65d52680212a15b68b0ef887228e06f533c1ca95b8f9d81b9fc6608cb5bacf4b867922999c69d46048ec3f408866789f49fcb176fc99ed9d3e6c357ed2e3ce2665925773e5d86c2ceaf8f18519a00d9d2e19e9a6b16af0a53fd7df6974f5db00494460e7f3de6ff6b642859335e020513bb525adddabf0d7d6ae85e7e56e32ca8acc07fe86b7b445358966ba3914c1dfa7b814d9e846ff02a6a8c8f5713a0f727024b5d1ea7e4ce7c64f9b24dd3337a3df33714c5404403b0304b25a66fe3ac85083965877117b3d721e7922f0ac7e278feeb8dc09f58cbcfbb81b11d4699737f37ac240a24b9c4b2b587e68974f7ca5561856f32e389d32056f7d58e4de24c11bd5c5afaa441120370d0c48341e1b8146a6bbca8c15f23c155d2533e97a8e6496bc00533ec83be8488d020708d97385a03bcbf57cadc2c1e575e1ac134cdb5047f3f88eae0230751626cea1c85da9b74ddace668afebb2dc66d302ddf3c5f8f21ac0c0535d00839457e7cac9282a8e49d018b077e38ea512cf28eacff5d98e880abfb5af2e7c039d2e1f1edaad2642963ef29d715f754e2715caa6af046a298b285e3582d903be726b608619332e1a82be48b0f5adf6838f41ff776e5290de8269794bce8fb971267d036bd6bd30e42df918125d573ced78263251bcae2b7b40f1ba855b4f2472312ea8752c4a0e09468bd25615a6c00a9b44c484c5507b8400537f20890e9499ec94ed2b6aeff21e57c6e8a93d80097f85ac9316b03a5f768721bf7d041bb9a6a03eabd615e3c4d74f56c429d53b8fec4b5e86c5b311a6cd4a86f03e04dab25ad65b68a8b8d9053993fd2440ff2b81768213084c831d31a0f8c646aff9090b5463cbee452abd6318340ec41b50f1deba7ffb60b326751de3f6dbf9b17714299233d5c43071367ece2e53212e7f4e084fea60850d4d16908d9bbbb531fbf72143fdb62d1b40afde3d0b2ac2c94c32e456bbef62f8d677e332aec8ccc8eedbac61e7b89b32d57157a39ad5c456258d9c36db0edc82c2baead990ee78007ed89c8f450e92d5e209cc25f7c13f5909ca404fddbdbeff89cc42350c91e9f1fdf9753c6e95f71257f8cbb97838684461cd1244c938b9939a4e9c7727902b6f1a5434e0a06d3fc221771dd87572ae801c5ce6886122f0c91dae57440ffc7ace4e8e0041a1d245103aaadbfc2ecff622228daed2b0cd30f7f59b2617f6f0571ee4403d84e652d78b8e64d5450b6483ef70582dcda9351f2dddd3a4ac84f514f708d3af6242501bd041beae78e6b29b517b534148ea91ef85653fec824d6ddb0c0fa2555ab2564ba29227b1046b48a11ee0e6aafda9d0b80b0f05a8d057cbeb16264cb579aea3ba2b2000052d03c77844ab7c81be3110a36a27aeffe0ad5a8a7385a1913a64fb2db630e8fc8017828cea60f327c3a510b441d94d32584e55f7c2320d89b2ba3d44d832b8e7c5f45442de9ef37d057e6d0c6664e8d74e23f18336d41a3e38c2cda49050cb32ca7040a388c75741ac07d3befc714df35dc92ff70ad041cf17b70a971c142bb89ecfe25290750e989c8666560a61b62fdc4fadef7f30b6269a669ef99be7e7ba7ddddf99949fedc0c331796988c6eedb5c66cbe2870a2affce0b550c3411a2aaf302481ee93398c0fbc0c815cfe1e78bf8fed7f19f2c2dae17a4533aa85f6b787f8072adda379118d76dbba3cebfc4c8aacbb1f79a28ec3a0ec99816e3c8721ddcde1ce73b0704063474", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0)
sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x40000)
r7 = socket$netlink(0x10, 0x3, 0x4)
writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
r8 = getpid()
pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r10}, 0x10)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r11}, 0x10)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x490, &(0x7f0000000580)="$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")
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
r12 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6)
fallocate(r12, 0x0, 0x0, 0x1001f0)
fallocate(r12, 0x8, 0x0, 0x10000)
write$P9_RLERRORu(r9, &(0x7f0000000540)={0x10, 0x7, 0x2, {{0x3, '%(*'}, 0x81}}, 0x10)
r13 = syz_pidfd_open(r8, 0x0)
setns(r13, 0x24020000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.190' (ED25519) to the list of known hosts.
[   24.456985][   T29] audit: type=1400 audit(1758739010.870:62): avc:  denied  { mounton } for  pid=3292 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   24.457831][ T3292] cgroup: Unknown subsys name 'net'
[   24.479693][   T29] audit: type=1400 audit(1758739010.870:63): avc:  denied  { mount } for  pid=3292 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   24.507009][   T29] audit: type=1400 audit(1758739010.900:64): avc:  denied  { unmount } for  pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   24.699978][ T3292] cgroup: Unknown subsys name 'cpuset'
[   24.706044][ T3292] cgroup: Unknown subsys name 'rlimit'
[   24.835944][   T29] audit: type=1400 audit(1758739011.250:65): avc:  denied  { setattr } for  pid=3292 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   24.861216][   T29] audit: type=1400 audit(1758739011.250:66): avc:  denied  { create } for  pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   24.881662][   T29] audit: type=1400 audit(1758739011.250:67): avc:  denied  { write } for  pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   24.902011][   T29] audit: type=1400 audit(1758739011.250:68): avc:  denied  { read } for  pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   24.908715][ T3295] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   24.922346][   T29] audit: type=1400 audit(1758739011.260:69): avc:  denied  { mounton } for  pid=3292 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   24.955596][   T29] audit: type=1400 audit(1758739011.260:70): avc:  denied  { mount } for  pid=3292 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   24.978920][   T29] audit: type=1400 audit(1758739011.350:71): avc:  denied  { relabelto } for  pid=3295 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   25.008155][ T3292] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   27.095484][ T3302] chnl_net:caif_netlink_parms(): no params data found
[   27.124141][ T3314] chnl_net:caif_netlink_parms(): no params data found
[   27.133619][ T3303] chnl_net:caif_netlink_parms(): no params data found
[   27.154906][ T3307] chnl_net:caif_netlink_parms(): no params data found
[   27.204180][ T3310] chnl_net:caif_netlink_parms(): no params data found
[   27.247718][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.255144][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.262320][ T3302] bridge_slave_0: entered allmulticast mode
[   27.268596][ T3302] bridge_slave_0: entered promiscuous mode
[   27.289413][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.296524][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.304509][ T3302] bridge_slave_1: entered allmulticast mode
[   27.310749][ T3302] bridge_slave_1: entered promiscuous mode
[   27.326642][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.333704][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.340786][ T3307] bridge_slave_0: entered allmulticast mode
[   27.346979][ T3307] bridge_slave_0: entered promiscuous mode
[   27.353376][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.360474][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.367627][ T3314] bridge_slave_0: entered allmulticast mode
[   27.374670][ T3314] bridge_slave_0: entered promiscuous mode
[   27.390908][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.397943][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.405123][ T3307] bridge_slave_1: entered allmulticast mode
[   27.411368][ T3307] bridge_slave_1: entered promiscuous mode
[   27.417621][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.424702][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.431967][ T3314] bridge_slave_1: entered allmulticast mode
[   27.438401][ T3314] bridge_slave_1: entered promiscuous mode
[   27.445875][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   27.459851][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.466906][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.474123][ T3303] bridge_slave_0: entered allmulticast mode
[   27.480412][ T3303] bridge_slave_0: entered promiscuous mode
[   27.494131][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   27.512040][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.519089][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.526194][ T3303] bridge_slave_1: entered allmulticast mode
[   27.532527][ T3303] bridge_slave_1: entered promiscuous mode
[   27.548435][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   27.558512][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   27.568654][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   27.591867][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   27.601531][ T3302] team0: Port device team_slave_0 added
[   27.615959][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.623021][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.630232][ T3310] bridge_slave_0: entered allmulticast mode
[   27.636484][ T3310] bridge_slave_0: entered promiscuous mode
[   27.648095][ T3302] team0: Port device team_slave_1 added
[   27.659864][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   27.669032][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.676149][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.683275][ T3310] bridge_slave_1: entered allmulticast mode
[   27.689529][ T3310] bridge_slave_1: entered promiscuous mode
[   27.705860][ T3307] team0: Port device team_slave_0 added
[   27.712427][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   27.721906][ T3307] team0: Port device team_slave_1 added
[   27.737772][ T3314] team0: Port device team_slave_0 added
[   27.760946][ T3314] team0: Port device team_slave_1 added
[   27.767495][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   27.776911][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0
[   27.783900][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   27.809808][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   27.825017][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0
[   27.832007][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   27.857917][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   27.869839][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   27.883533][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1
[   27.890504][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   27.916403][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   27.927698][ T3303] team0: Port device team_slave_0 added
[   27.933718][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1
[   27.940680][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   27.966719][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   27.990042][ T3303] team0: Port device team_slave_1 added
[   28.002170][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0
[   28.009105][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.035014][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   28.046369][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1
[   28.053320][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.079189][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   28.094696][ T3310] team0: Port device team_slave_0 added
[   28.101568][ T3310] team0: Port device team_slave_1 added
[   28.133059][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0
[   28.140089][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.166105][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   28.194135][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0
[   28.201157][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.227130][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   28.239460][ T3307] hsr_slave_0: entered promiscuous mode
[   28.245378][ T3307] hsr_slave_1: entered promiscuous mode
[   28.251569][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1
[   28.258497][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.284447][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   28.299648][ T3302] hsr_slave_0: entered promiscuous mode
[   28.305501][ T3302] hsr_slave_1: entered promiscuous mode
[   28.311367][ T3302] debugfs: 'hsr0' already exists in 'hsr'
[   28.317094][ T3302] Cannot create hsr debugfs directory
[   28.327300][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1
[   28.334297][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.360262][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   28.394426][ T3314] hsr_slave_0: entered promiscuous mode
[   28.400631][ T3314] hsr_slave_1: entered promiscuous mode
[   28.406345][ T3314] debugfs: 'hsr0' already exists in 'hsr'
[   28.412071][ T3314] Cannot create hsr debugfs directory
[   28.437651][ T3310] hsr_slave_0: entered promiscuous mode
[   28.443645][ T3310] hsr_slave_1: entered promiscuous mode
[   28.449835][ T3310] debugfs: 'hsr0' already exists in 'hsr'
[   28.455554][ T3310] Cannot create hsr debugfs directory
[   28.467029][ T3303] hsr_slave_0: entered promiscuous mode
[   28.473119][ T3303] hsr_slave_1: entered promiscuous mode
[   28.478882][ T3303] debugfs: 'hsr0' already exists in 'hsr'
[   28.484647][ T3303] Cannot create hsr debugfs directory
[   28.663337][ T3307] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   28.672251][ T3307] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   28.682789][ T3307] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   28.691142][ T3307] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   28.711913][ T3302] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   28.720675][ T3302] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   28.730753][ T3302] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   28.745671][ T3302] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   28.764978][ T3314] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   28.780135][ T3314] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   28.796203][ T3314] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   28.810461][ T3314] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   28.827376][ T3303] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   28.841501][ T3303] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   28.853158][ T3303] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   28.861586][ T3303] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   28.887695][ T3310] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   28.896849][ T3310] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   28.906688][ T3310] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   28.915261][ T3310] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   28.944321][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0
[   28.958594][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0
[   28.980874][ T3302] 8021q: adding VLAN 0 to HW filter on device team0
[   28.988689][ T3307] 8021q: adding VLAN 0 to HW filter on device team0
[   29.004127][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.011190][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   29.020356][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.027449][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   29.045441][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.052554][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   29.066095][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.073174][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   29.107840][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0
[   29.126821][ T3302] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   29.137274][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   29.159424][ T3314] 8021q: adding VLAN 0 to HW filter on device team0
[   29.171231][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0
[   29.188797][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0
[   29.197423][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.204559][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   29.221811][ T3303] 8021q: adding VLAN 0 to HW filter on device team0
[   29.237021][ T3314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   29.247393][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   29.261316][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.268351][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   29.300982][  T377] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.308050][  T377] bridge0: port 1(bridge_slave_0) entered forwarding state
[   29.319120][  T377] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.326245][  T377] bridge0: port 2(bridge_slave_1) entered forwarding state
[   29.345671][ T3310] 8021q: adding VLAN 0 to HW filter on device team0
[   29.363541][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.370616][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   29.381340][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0
[   29.402878][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.409975][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[   29.422162][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0
[   29.436099][ T3310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   29.446475][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   29.477700][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0
[   29.501226][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0
[   29.532416][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0
[   29.596787][ T3307] veth0_vlan: entered promiscuous mode
[   29.627561][ T3307] veth1_vlan: entered promiscuous mode
[   29.650360][ T3302] veth0_vlan: entered promiscuous mode
[   29.672751][ T3303] veth0_vlan: entered promiscuous mode
[   29.695070][ T3303] veth1_vlan: entered promiscuous mode
[   29.707413][ T3310] veth0_vlan: entered promiscuous mode
[   29.714573][ T3302] veth1_vlan: entered promiscuous mode
[   29.731906][ T3310] veth1_vlan: entered promiscuous mode
[   29.750161][ T3307] veth0_macvtap: entered promiscuous mode
[   29.758184][ T3307] veth1_macvtap: entered promiscuous mode
[   29.768744][ T3314] veth0_vlan: entered promiscuous mode
[   29.776058][ T3303] veth0_macvtap: entered promiscuous mode
[   29.786645][ T3303] veth1_macvtap: entered promiscuous mode
[   29.795263][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0
[   29.802750][ T3302] veth0_macvtap: entered promiscuous mode
[   29.813228][ T3302] veth1_macvtap: entered promiscuous mode
[   29.820571][ T3314] veth1_vlan: entered promiscuous mode
[   29.832185][ T3310] veth0_macvtap: entered promiscuous mode
[   29.839898][ T3310] veth1_macvtap: entered promiscuous mode
[   29.847244][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0
[   29.861343][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1
[   29.877305][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0
[   29.887392][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1
[   29.897003][ T1389] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   29.908750][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1
[   29.918913][ T1389] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   29.927669][ T1389] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   29.936584][ T3314] veth0_macvtap: entered promiscuous mode
[   29.945552][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0
[   29.956044][ T1389] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   29.967047][ T3314] veth1_macvtap: entered promiscuous mode
[   29.977022][  T377] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   29.985944][  T377] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   29.994999][  T377] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   30.009992][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1
[   30.017309][  T377] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   30.026250][  T377] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   30.035897][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0
[   30.050714][   T29] kauditd_printk_skb: 9 callbacks suppressed
[   30.050726][   T29] audit: type=1400 audit(1758739016.470:81): avc:  denied  { mounton } for  pid=3307 comm="syz-executor" path="/root/syzkaller.4ZPZCz/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   30.082399][   T29] audit: type=1400 audit(1758739016.470:82): avc:  denied  { mount } for  pid=3307 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   30.104397][   T29] audit: type=1400 audit(1758739016.470:83): avc:  denied  { mounton } for  pid=3307 comm="syz-executor" path="/root/syzkaller.4ZPZCz/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   30.129681][   T29] audit: type=1400 audit(1758739016.470:84): avc:  denied  { mount } for  pid=3307 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   30.151461][   T29] audit: type=1400 audit(1758739016.470:85): avc:  denied  { mounton } for  pid=3307 comm="syz-executor" path="/root/syzkaller.4ZPZCz/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   30.178030][   T29] audit: type=1400 audit(1758739016.470:86): avc:  denied  { mounton } for  pid=3307 comm="syz-executor" path="/root/syzkaller.4ZPZCz/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   30.205458][   T29] audit: type=1400 audit(1758739016.470:87): avc:  denied  { unmount } for  pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   30.225015][   T29] audit: type=1400 audit(1758739016.500:88): avc:  denied  { mounton } for  pid=3307 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   30.247720][   T29] audit: type=1400 audit(1758739016.500:89): avc:  denied  { mount } for  pid=3307 comm="syz-executor" name="/" dev="gadgetfs" ino=3918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   30.271510][  T377] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   30.281286][  T377] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   30.291521][ T3307] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   30.314279][  T377] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   30.323604][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1
[   30.330884][  T377] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   30.346688][   T29] audit: type=1400 audit(1758739016.760:90): avc:  denied  { read write } for  pid=3307 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   30.380671][  T377] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   30.403496][ T3472] loop1: detected capacity change from 0 to 512
[   30.437115][  T377] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   30.446688][ T3472] =======================================================
[   30.446688][ T3472] WARNING: The mand mount option has been deprecated and
[   30.446688][ T3472]          and is ignored by this kernel. Remove the mand
[   30.446688][ T3472]          option from the mount to silence this warning.
[   30.446688][ T3472] =======================================================
[   30.450104][  T377] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   30.498357][  T377] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   30.518111][ T3481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   30.533145][ T3481] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   30.561477][  T377] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   30.577173][ T3489] FAULT_INJECTION: forcing a failure.
[   30.577173][ T3489] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   30.578040][ T3481] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   30.590280][ T3489] CPU: 0 UID: 0 PID: 3489 Comm: syz.2.7 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   30.590305][ T3489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   30.590316][ T3489] Call Trace:
[   30.590354][ T3489]  <TASK>
[   30.590361][ T3489]  __dump_stack+0x1d/0x30
[   30.590408][ T3489]  dump_stack_lvl+0xe8/0x140
[   30.590428][ T3489]  dump_stack+0x15/0x1b
[   30.590443][ T3489]  should_fail_ex+0x265/0x280
[   30.590544][ T3489]  should_fail+0xb/0x20
[   30.590563][ T3489]  should_fail_usercopy+0x1a/0x20
[   30.590720][ T3489]  _copy_from_user+0x1c/0xb0
[   30.590753][ T3489]  ____sys_sendmsg+0x1c5/0x4e0
[   30.590781][ T3489]  ___sys_sendmsg+0x17b/0x1d0
[   30.590874][ T3489]  __x64_sys_sendmsg+0xd4/0x160
[   30.590902][ T3489]  x64_sys_call+0x191e/0x2ff0
[   30.590922][ T3489]  do_syscall_64+0xd2/0x200
[   30.590951][ T3489]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   30.591022][ T3489]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   30.591049][ T3489]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   30.591074][ T3489] RIP: 0033:0x7f054989eec9
[   30.591089][ T3489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   30.591175][ T3489] RSP: 002b:00007f0548307038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   30.591197][ T3489] RAX: ffffffffffffffda RBX: 00007f0549af5fa0 RCX: 00007f054989eec9
[   30.591210][ T3489] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006
[   30.591222][ T3489] RBP: 00007f0548307090 R08: 0000000000000000 R09: 0000000000000000
[   30.591233][ T3489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   30.591245][ T3489] R13: 00007f0549af6038 R14: 00007f0549af5fa0 R15: 00007ffc09a55eb8
[   30.591274][ T3489]  </TASK>
[   30.593425][ T3472] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   30.607966][ T3481] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1'.
[   30.611608][ T3472] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   30.620161][ T1389] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   30.634655][ T3472] EXT4-fs (loop1): 1 truncate cleaned up
[   30.652562][ T1389] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   30.674682][ T3472] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   30.856503][ T3472] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2: bg 0: block 256: padding at end of block bitmap is not set
[   30.872011][ T3472] EXT4-fs (loop1): Remounting filesystem read-only
[   30.899141][ T3500] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   30.901672][ T3472] syz.1.2 (3472) used greatest stack depth: 10608 bytes left
[   30.917844][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   30.972538][ T3511] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   30.997154][ T3511] Zero length message leads to an empty skb
[   31.146956][ T3526] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13'.
[   31.320000][ T3532] loop1: detected capacity change from 0 to 512
[   31.389445][ T3532] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   31.402126][ T3532] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   31.421242][ T3538] capability: warning: `syz.0.21' uses 32-bit capabilities (legacy support in use)
[   31.608350][    C1] hrtimer: interrupt took 27533 ns
[   31.748928][ T3540] loop4: detected capacity change from 0 to 512
[   31.774573][ T3540] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   31.893110][ T3540] EXT4-fs (loop4): 1 truncate cleaned up
[   31.909513][ T3540] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   31.981042][ T3540] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.22: bg 0: block 256: padding at end of block bitmap is not set
[   31.996573][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.010556][ T3543] loop3: detected capacity change from 0 to 512
[   32.017078][ T3540] EXT4-fs (loop4): Remounting filesystem read-only
[   32.049807][ T3543] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   32.108589][ T3543] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   32.127708][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.191111][ T3554] SELinux:  policydb string Se Linux does not match my string SE Linux
[   32.216001][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.229876][ T3554] SELinux: failed to load policy
[   32.270750][ T3557] 9pnet_fd: Insufficient options for proto=fd
[   32.283809][ T3500] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   32.311525][ T3555] mmap: syz.1.25 (3555) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   32.338616][ T3559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   32.353792][ T3563] netlink: 14 bytes leftover after parsing attributes in process `syz.4.28'.
[   32.357621][ T3559] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   32.370344][ T3563] hsr_slave_0: left promiscuous mode
[   32.375641][ T3559] netlink: 40 bytes leftover after parsing attributes in process `syz.3.30'.
[   32.386782][ T3563] hsr_slave_1: left promiscuous mode
[   32.424471][ T3570] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[   32.439015][ T3570] loop0: detected capacity change from 0 to 128
[   32.451759][ T3570] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   32.464722][ T3570] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   32.488903][ T3573] loop1: detected capacity change from 0 to 2048
[   32.502064][ T3573] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   32.527829][ T3302] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   32.548472][ T3307] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set
[   32.563157][ T3307] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem
[   32.583654][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.726789][ T3585] loop0: detected capacity change from 0 to 2048
[   32.751794][ T3585] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   32.823151][ T3588] loop1: detected capacity change from 0 to 512
[   32.842460][ T3588] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   32.855131][ T3588] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   32.957203][ T3302] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set
[   33.027368][ T3592] SELinux:  policydb string Se Linux does not match my string SE Linux
[   33.063399][ T3302] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem
[   33.086004][ T3592] SELinux: failed to load policy
[   33.125887][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.439660][ T3610] loop3: detected capacity change from 0 to 128
[   33.454776][ T3610] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   33.467832][ T3610] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   33.496198][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.519721][ T3614] loop1: detected capacity change from 0 to 512
[   33.528811][ T3614] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   33.549480][ T3614] EXT4-fs (loop1): failed to initialize system zone (-117)
[   33.556734][ T3614] EXT4-fs (loop1): mount failed
[   33.580160][ T3614] $Hÿ: renamed from bond0 (while UP)
[   33.590829][ T3303] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   33.599952][ T3614] $Hÿ: entered promiscuous mode
[   33.604963][ T3614] bond_slave_0: entered promiscuous mode
[   33.610704][ T3614] bond_slave_1: entered promiscuous mode
[   33.695754][ T3622] netlink: 44 bytes leftover after parsing attributes in process `syz.1.48'.
[   33.705271][ T3622] netlink: 16 bytes leftover after parsing attributes in process `syz.1.48'.
[   33.734267][ T3624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   33.743881][ T3624] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   33.754649][ T3624] netlink: 40 bytes leftover after parsing attributes in process `syz.4.49'.
[   33.910528][ T3629] loop3: detected capacity change from 0 to 512
[   33.923397][ T3629] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.936141][ T3629] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   33.975198][ T3633] SELinux:  policydb string Se Linux does not match my string SE Linux
[   33.983677][ T3633] SELinux: failed to load policy
[   34.077571][ T3635] unsupported nla_type 52263
[   34.242269][ T3500] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   34.293828][ T3500] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   34.388992][  T377] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   34.401021][  T377] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   34.413642][  T377] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   34.433666][   T41] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   34.487728][ T3649] gre1: entered allmulticast mode
[   34.697598][ T3652] loop0: detected capacity change from 0 to 128
[   34.729905][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.762902][ T3652] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   34.785265][ T3652] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   34.903693][ T3302] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   34.943636][ T3661] SELinux:  policydb string Se Linux does not match my string SE Linux
[   34.952640][ T3661] SELinux: failed to load policy
[   34.972348][ T3665] pim6reg: entered allmulticast mode
[   34.978327][ T3665] pim6reg: left allmulticast mode
[   34.983544][ T3663] loop3: detected capacity change from 0 to 2048
[   35.041649][ T3663] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   35.059522][   T29] kauditd_printk_skb: 420 callbacks suppressed
[   35.059573][   T29] audit: type=1326 audit(1758739021.470:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3669 comm="syz.1.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb3f97eec9 code=0x7ffc0000
[   35.089630][   T29] audit: type=1326 audit(1758739021.470:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3669 comm="syz.1.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb3f97eec9 code=0x7ffc0000
[   35.112879][   T29] audit: type=1326 audit(1758739021.480:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3669 comm="syz.1.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbb3f980de7 code=0x7ffc0000
[   35.136013][   T29] audit: type=1326 audit(1758739021.480:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3669 comm="syz.1.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fbb3f980d5c code=0x7ffc0000
[   35.159172][   T29] audit: type=1326 audit(1758739021.480:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3669 comm="syz.1.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fbb3f980c94 code=0x7ffc0000
[   35.182401][   T29] audit: type=1326 audit(1758739021.480:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3669 comm="syz.1.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fbb3f980c94 code=0x7ffc0000
[   35.205686][   T29] audit: type=1326 audit(1758739021.480:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3669 comm="syz.1.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbb3f97db2a code=0x7ffc0000
[   35.228650][   T29] audit: type=1326 audit(1758739021.480:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3669 comm="syz.1.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb3f97eec9 code=0x7ffc0000
[   35.252432][   T29] audit: type=1326 audit(1758739021.480:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3669 comm="syz.1.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbb3f97eec9 code=0x7ffc0000
[   35.276356][   T29] audit: type=1326 audit(1758739021.560:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3662 comm="syz.3.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ce48deec9 code=0x7ffc0000
[   35.315426][ T3676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   35.325258][ T3676] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   35.335010][ T3670] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   35.351025][ T3679] 9pnet_fd: Insufficient options for proto=fd
[   35.358347][ T3303] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set
[   35.379677][ T3676] netlink: 24 bytes leftover after parsing attributes in process `syz.0.65'.
[   35.392712][ T3303] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem
[   35.403530][ T3670] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   35.417353][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.467327][ T3684] loop3: detected capacity change from 0 to 512
[   35.482184][ T3670] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   35.495322][ T3684] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   35.504981][ T3684] EXT4-fs (loop3): orphan cleanup on readonly fs
[   35.512730][ T3684] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.67: corrupted inode contents
[   35.525342][ T3684] EXT4-fs (loop3): Remounting filesystem read-only
[   35.525844][ T3693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.69'.
[   35.531977][ T3684] EXT4-fs (loop3): 1 truncate cleaned up
[   35.540617][ T3693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.69'.
[   35.555112][   T58] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   35.555853][ T3694] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   35.565722][   T58] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   35.565764][   T58] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started
[   35.568079][ T3684] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   35.611488][ T3670] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   35.641007][ T3694] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   35.659035][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.678212][ T3697] loop3: detected capacity change from 0 to 128
[   35.694767][  T377] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   35.706873][ T3697] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   35.719403][ T3697] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   35.731328][ T3694] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   35.741297][  T377] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   35.751252][ T1389] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   35.760442][ T1389] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   35.802599][ T3694] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   35.822921][ T3303] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   35.889475][ T3706] loop1: detected capacity change from 0 to 512
[   35.985852][ T3718] IPVS: Error connecting to the multicast addr
[   36.063058][ T3728] 9pnet_fd: Insufficient options for proto=fd
[   36.069313][ T3730] loop1: detected capacity change from 0 to 512
[   36.081455][ T3730] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   36.107085][ T3730] EXT4-fs (loop1): 1 truncate cleaned up
[   36.118811][ T3730] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.142595][ T3730] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.79: bg 0: block 256: padding at end of block bitmap is not set
[   36.158312][ T3739] loop3: detected capacity change from 0 to 512
[   36.159763][ T3730] EXT4-fs (loop1): Remounting filesystem read-only
[   36.182196][ T3739] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.201796][ T3739] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   36.232761][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.253075][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.304276][ T3757] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   36.382849][ T3769] SELinux:  policydb string Se Linux does not match my string SE Linux
[   36.391302][ T3769] SELinux: failed to load policy
[   36.401403][ T3757] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   36.459499][ T3757] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   36.499547][ T3773] FAULT_INJECTION: forcing a failure.
[   36.499547][ T3773] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   36.512799][ T3773] CPU: 1 UID: 0 PID: 3773 Comm: syz.4.89 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   36.512902][ T3773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   36.512969][ T3773] Call Trace:
[   36.512973][ T3773]  <TASK>
[   36.512977][ T3773]  __dump_stack+0x1d/0x30
[   36.512991][ T3773]  dump_stack_lvl+0xe8/0x140
[   36.513001][ T3773]  dump_stack+0x15/0x1b
[   36.513068][ T3773]  should_fail_ex+0x265/0x280
[   36.513082][ T3773]  should_fail_alloc_page+0xf2/0x100
[   36.513144][ T3773]  __alloc_frozen_pages_noprof+0xff/0x360
[   36.513164][ T3773]  alloc_pages_mpol+0xb3/0x250
[   36.513182][ T3773]  vma_alloc_folio_noprof+0x1aa/0x300
[   36.513200][ T3773]  handle_mm_fault+0xec2/0x2c20
[   36.513272][ T3773]  do_user_addr_fault+0x636/0x1090
[   36.513292][ T3773]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   36.513306][ T3773]  exc_page_fault+0x62/0xa0
[   36.513322][ T3773]  asm_exc_page_fault+0x26/0x30
[   36.513333][ T3773] RIP: 0033:0x7f62dba6c3ab
[   36.513390][ T3773] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01
[   36.513478][ T3773] RSP: 002b:00007f62da51ce10 EFLAGS: 00010246
[   36.513488][ T3773] RAX: 00007f62da51ef30 RBX: 00007f62dbce7640 RCX: 0000000000000000
[   36.513495][ T3773] RDX: 00007f62da51ef78 RSI: 00007f62dbb1edf8 RDI: 00007f62da51ce30
[   36.513502][ T3773] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000
[   36.513585][ T3773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   36.513591][ T3773] R13: 00007f62dbd16038 R14: 00007f62dbd15fa0 R15: 00007ffd8f472328
[   36.513659][ T3773]  </TASK>
[   36.513672][ T3773] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[   36.688166][ T3757] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   36.906948][ T3797] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   36.942947][ T3797] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   36.992604][ T3797] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   37.018677][ T3801] SELinux:  policydb string Se Linux does not match my string SE Linux
[   37.027230][ T3801] SELinux: failed to load policy
[   37.043582][ T3797] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   37.099354][   T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   37.119893][   T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   37.131371][   T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   37.141916][   T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   37.189066][ T3811] loop0: detected capacity change from 0 to 1024
[   37.205692][ T3811] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   37.216673][ T3811] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   37.228038][ T3811] JBD2: no valid journal superblock found
[   37.233861][ T3811] EXT4-fs (loop0): Could not load journal inode
[   37.251581][ T3811] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[   37.265610][ T3817] loop3: detected capacity change from 0 to 128
[   37.280929][ T3819] loop0: detected capacity change from 0 to 164
[   37.296895][ T3817] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   37.309136][ T3817] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   37.334422][ T3824] 9pnet_fd: Insufficient options for proto=fd
[   37.357057][ T3303] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   37.483849][ T3832] loop0: detected capacity change from 0 to 2048
[   37.501989][ T3832] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.516115][ T3832] netlink: 'syz.0.110': attribute type 12 has an invalid length.
[   37.534118][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.570283][ T3843] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   37.587000][ T3841] loop0: detected capacity change from 0 to 1024
[   37.645760][ T3843] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   37.648441][ T3850] loop0: detected capacity change from 0 to 1024
[   37.663739][ T3850] EXT4-fs: Ignoring removed nomblk_io_submit option
[   37.670429][ T3850] EXT4-fs: Ignoring removed bh option
[   37.675991][ T3850] EXT4-fs (loop0): unable to read superblock
[   37.687133][ T3850] netlink: 'syz.0.116': attribute type 3 has an invalid length.
[   37.694802][ T3850] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.116'.
[   37.720952][ T3843] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   37.737913][ T3854] FAULT_INJECTION: forcing a failure.
[   37.737913][ T3854] name failslab, interval 1, probability 0, space 0, times 0
[   37.750643][ T3854] CPU: 0 UID: 0 PID: 3854 Comm: syz.4.118 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   37.750660][ T3854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   37.750667][ T3854] Call Trace:
[   37.750671][ T3854]  <TASK>
[   37.750675][ T3854]  __dump_stack+0x1d/0x30
[   37.750688][ T3854]  dump_stack_lvl+0xe8/0x140
[   37.750705][ T3854]  dump_stack+0x15/0x1b
[   37.750714][ T3854]  should_fail_ex+0x265/0x280
[   37.750728][ T3854]  should_failslab+0x8c/0xb0
[   37.750742][ T3854]  __kmalloc_noprof+0xa5/0x3e0
[   37.750835][ T3854]  ? genl_family_rcv_msg_attrs_parse+0x75/0x190
[   37.750856][ T3854]  genl_family_rcv_msg_attrs_parse+0x75/0x190
[   37.750910][ T3854]  genl_family_rcv_msg_doit+0x48/0x1b0
[   37.750927][ T3854]  ? selinux_capable+0x31/0x40
[   37.750944][ T3854]  ? security_capable+0x83/0x90
[   37.751030][ T3854]  ? ns_capable+0x7d/0xb0
[   37.751041][ T3854]  genl_rcv_msg+0x422/0x460
[   37.751058][ T3854]  ? __pfx_ip_vs_genl_set_daemon+0x10/0x10
[   37.751150][ T3854]  netlink_rcv_skb+0x120/0x220
[   37.751163][ T3854]  ? __pfx_genl_rcv_msg+0x10/0x10
[   37.751182][ T3854]  genl_rcv+0x28/0x40
[   37.751197][ T3854]  netlink_unicast+0x5c0/0x690
[   37.751215][ T3854]  netlink_sendmsg+0x58b/0x6b0
[   37.751230][ T3854]  ? __pfx_netlink_sendmsg+0x10/0x10
[   37.751244][ T3854]  __sock_sendmsg+0x145/0x180
[   37.751321][ T3854]  ____sys_sendmsg+0x31e/0x4e0
[   37.751402][ T3854]  ___sys_sendmsg+0x17b/0x1d0
[   37.751423][ T3854]  __x64_sys_sendmsg+0xd4/0x160
[   37.751439][ T3854]  x64_sys_call+0x191e/0x2ff0
[   37.751490][ T3854]  do_syscall_64+0xd2/0x200
[   37.751507][ T3854]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   37.751520][ T3854]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   37.751613][ T3854]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   37.751625][ T3854] RIP: 0033:0x7f62dbabeec9
[   37.751634][ T3854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   37.751678][ T3854] RSP: 002b:00007f62da51f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   37.751690][ T3854] RAX: ffffffffffffffda RBX: 00007f62dbd15fa0 RCX: 00007f62dbabeec9
[   37.751706][ T3854] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006
[   37.751713][ T3854] RBP: 00007f62da51f090 R08: 0000000000000000 R09: 0000000000000000
[   37.751719][ T3854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   37.751726][ T3854] R13: 00007f62dbd16038 R14: 00007f62dbd15fa0 R15: 00007ffd8f472328
[   37.751736][ T3854]  </TASK>
[   38.012174][ T3843] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.040562][ T3861] loop4: detected capacity change from 0 to 128
[   38.048490][ T3861] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   38.061970][ T3861] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   38.096327][ T3314] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   38.432423][ T3872] loop0: detected capacity change from 0 to 1024
[   38.444561][ T3872] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   38.455480][ T3872] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   38.466743][ T3872] JBD2: no valid journal superblock found
[   38.472510][ T3872] EXT4-fs (loop0): Could not load journal inode
[   38.485285][ T3872] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[   39.122516][ T3888] SELinux:  policydb string Se Linux does not match my string SE Linux
[   39.130830][ T3888] SELinux: failed to load policy
[   39.155556][   T41] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.166251][   T41] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.177068][ T1389] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.188057][ T1389] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.271700][ T3900] loop0: detected capacity change from 0 to 1024
[   39.278705][ T3900] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   39.289619][ T3900] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   39.300936][ T3900] JBD2: no valid journal superblock found
[   39.306666][ T3900] EXT4-fs (loop0): Could not load journal inode
[   39.349070][ T3900] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[   39.451821][ T3911] loop2: detected capacity change from 0 to 128
[   39.463598][ T3911] lo speed is unknown, defaulting to 1000
[   39.470150][ T3911] lo speed is unknown, defaulting to 1000
[   39.476118][ T3911] lo speed is unknown, defaulting to 1000
[   39.527076][ T3911] infiniband s
z1: set active
[   39.531790][ T3911] infiniband s
z1: added lo
[   39.559136][   T36] lo speed is unknown, defaulting to 1000
[   39.637678][ T3911] RDS/IB: s
z1: added
[   39.641710][ T3911] smc: adding ib device s
z1 with port count 1
[   39.647889][ T3911] smc:    ib device s
z1 port 1 has pnetid 
[   39.654436][ T3911] lo speed is unknown, defaulting to 1000
[   39.707008][ T3911] lo speed is unknown, defaulting to 1000
[   39.757950][ T3911] lo speed is unknown, defaulting to 1000
[   39.805005][ T3911] lo speed is unknown, defaulting to 1000
[   39.824192][   T36] lo speed is unknown, defaulting to 1000
[   39.935219][ T3924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.141'.
[   39.944074][ T3924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.141'.
[   39.950665][ T3911] lo speed is unknown, defaulting to 1000
[   40.034486][ T3925] loop4: detected capacity change from 0 to 512
[   40.051912][ T3925] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.064722][ T3925] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   40.075961][   T29] kauditd_printk_skb: 387 callbacks suppressed
[   40.075972][   T29] audit: type=1400 audit(1758739026.480:902): avc:  denied  { mount } for  pid=3913 comm="syz.4.140" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   40.103697][   T29] audit: type=1400 audit(1758739026.490:903): avc:  denied  { add_name } for  pid=3913 comm="syz.4.140" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   40.124469][   T29] audit: type=1400 audit(1758739026.490:904): avc:  denied  { create } for  pid=3913 comm="syz.4.140" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   40.153429][   T29] audit: type=1400 audit(1758739026.560:905): avc:  denied  { read append open } for  pid=3913 comm="syz.4.140" path="/29/bus/cpu.stat" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   40.256290][ T3911] lo speed is unknown, defaulting to 1000
[   40.379297][   T29] audit: type=1400 audit(1758739026.790:906): avc:  denied  { mac_admin } for  pid=3928 comm="syz.2.142" capability=33  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   40.400366][ T3929] loop2: detected capacity change from 0 to 128
[   40.401463][   T29] audit: type=1400 audit(1758739026.790:907): avc:  denied  { relabelto } for  pid=3928 comm="syz.2.142" name="10" dev="tmpfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[   40.415240][ T3929] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   40.432445][   T29] audit: type=1400 audit(1758739026.800:908): avc:  denied  { associate } for  pid=3928 comm="syz.2.142" name="10" dev="tmpfs" ino=66 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0"
[   40.445114][ T3929] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   40.471281][   T29] audit: type=1400 audit(1758739026.800:909): avc:  denied  { prog_run } for  pid=3928 comm="syz.2.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   40.501374][   T29] audit: type=1400 audit(1758739026.820:910): avc:  denied  { add_name } for  pid=3928 comm="syz.2.142" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[   40.525846][   T29] audit: type=1400 audit(1758739026.820:911): avc:  denied  { create } for  pid=3928 comm="syz.2.142" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   40.582116][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.582559][ T3310] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   40.723352][ T3941] loop0: detected capacity change from 0 to 2048
[   40.740880][ T3941] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.834639][ T3945] lo speed is unknown, defaulting to 1000
[   40.934096][ T3302] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set
[   41.003189][ T3302] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem
[   41.039531][ T3951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   41.058532][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.110067][ T3951] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   41.129357][ T3951] netlink: 16 bytes leftover after parsing attributes in process `syz.4.150'.
[   41.146282][ T3953] loop0: detected capacity change from 0 to 1024
[   41.156315][ T3953] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   41.167256][ T3953] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   41.177496][ T3953] JBD2: no valid journal superblock found
[   41.183246][ T3953] EXT4-fs (loop0): Could not load journal inode
[   41.192179][ T3953] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[   41.221017][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.232882][  T377] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   41.250665][  T377] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   41.266027][  T377] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.283692][ T3959] loop1: detected capacity change from 0 to 128
[   41.294838][ T3959] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   41.307908][ T3959] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   41.350948][ T3962] netlink: 'syz.0.154': attribute type 21 has an invalid length.
[   41.360016][ T3307] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   41.546825][ T3974] loop2: detected capacity change from 0 to 2048
[   41.607183][ T3976] loop1: detected capacity change from 0 to 512
[   41.622389][ T3976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.634939][ T3976] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   41.691292][ T3974] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.749131][ T3310] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set
[   41.777569][ T3310] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem
[   41.807712][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.923236][ T3990] tipc: Started in network mode
[   41.928145][ T3990] tipc: Node identity bad700b46d38, cluster identity 4711
[   41.935510][ T3990] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   41.953186][ T3990] tipc: Resetting bearer <eth:syzkaller0>
[   41.962566][ T3990] FAULT_INJECTION: forcing a failure.
[   41.962566][ T3990] name failslab, interval 1, probability 0, space 0, times 0
[   41.975218][ T3990] CPU: 0 UID: 0 PID: 3990 Comm: syz.0.164 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   41.975259][ T3990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   41.975329][ T3990] Call Trace:
[   41.975335][ T3990]  <TASK>
[   41.975343][ T3990]  __dump_stack+0x1d/0x30
[   41.975364][ T3990]  dump_stack_lvl+0xe8/0x140
[   41.975384][ T3990]  dump_stack+0x15/0x1b
[   41.975401][ T3990]  should_fail_ex+0x265/0x280
[   41.975422][ T3990]  should_failslab+0x8c/0xb0
[   41.975491][ T3990]  kmem_cache_alloc_noprof+0x50/0x310
[   41.975523][ T3990]  ? alloc_empty_file+0x76/0x200
[   41.975551][ T3990]  alloc_empty_file+0x76/0x200
[   41.975574][ T3990]  alloc_file_pseudo+0xc6/0x160
[   41.975601][ T3990]  anon_inode_getfile_fmode+0xa5/0x140
[   41.975677][ T3990]  do_signalfd4+0x162/0x2b0
[   41.975708][ T3990]  __x64_sys_signalfd4+0xce/0x100
[   41.975842][ T3990]  x64_sys_call+0x259c/0x2ff0
[   41.975864][ T3990]  do_syscall_64+0xd2/0x200
[   41.975892][ T3990]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   41.975960][ T3990]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   41.976052][ T3990]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   41.976074][ T3990] RIP: 0033:0x7f3377caeec9
[   41.976089][ T3990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   41.976103][ T3990] RSP: 002b:00007f337670f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000121
[   41.976119][ T3990] RAX: ffffffffffffffda RBX: 00007f3377f05fa0 RCX: 00007f3377caeec9
[   41.976157][ T3990] RDX: 0000000000000008 RSI: 0000200000000d00 RDI: ffffffffffffffff
[   41.976170][ T3990] RBP: 00007f337670f090 R08: 0000000000000000 R09: 0000000000000000
[   41.976183][ T3990] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000001
[   41.976196][ T3990] R13: 00007f3377f06038 R14: 00007f3377f05fa0 R15: 00007ffe7bb91698
[   41.976215][ T3990]  </TASK>
[   42.170091][ T3989] tipc: Disabling bearer <eth:syzkaller0>
[   42.227631][ T3996] loop0: detected capacity change from 0 to 128
[   42.242096][ T3996] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   42.257467][ T3996] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   42.302576][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.355883][ T3302] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   42.408025][ T4010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   42.416972][ T4010] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   42.427150][ T4010] netlink: 16 bytes leftover after parsing attributes in process `syz.4.171'.
[   42.445910][ T4012] syz.1.170 uses obsolete (PF_INET,SOCK_PACKET)
[   42.458440][ T4012] loop1: detected capacity change from 0 to 1024
[   42.465152][ T4012] EXT4-fs: inline encryption not supported
[   42.476473][ T4012] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   42.488723][ T4012] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[   42.499832][ T4012] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm gtp: lblock 2 mapped to illegal pblock 2 (length 1)
[   42.514178][ T4012] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm gtp: lblock 0 mapped to illegal pblock 48 (length 1)
[   42.529056][ T4012] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm gtp: Failed to acquire dquot type 0
[   42.541162][ T4012] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem
[   42.550629][ T4012] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm gtp: mark_inode_dirty error
[   42.562093][ T4012] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[   42.573925][ T4013] loop0: detected capacity change from 0 to 2048
[   42.577929][ T4012] EXT4-fs (loop1): 1 orphan inode deleted
[   42.590603][   T41] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1)
[   42.597762][ T4012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.618566][   T41] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:2: Failed to release dquot type 0
[   42.631119][ T4013] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.641832][ T4016] lo speed is unknown, defaulting to 1000
[   42.645405][ T4012] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.666250][   T41] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   42.683175][   T41] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   42.690185][ T4012] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm gtp: Invalid inode table block 1 in block_group 0
[   42.703405][   T41] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   42.710786][ T4012] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem
[   42.722571][   T41] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   42.730577][ T4012] EXT4-fs error (device loop1): ext4_quota_off:7221: inode #3: comm gtp: mark_inode_dirty error
[   42.730781][ T3302] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set
[   42.767401][ T3302] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem
[   42.793845][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.870275][ T4029] loop2: detected capacity change from 0 to 512
[   42.877043][ T3296] ==================================================================
[   42.885119][ T3296] BUG: KCSAN: data-race in set_nlink / set_nlink
[   42.891439][ T3296] 
[   42.893748][ T3296] read to 0xffff88810745ac50 of 4 bytes by task 2993 on cpu 0:
[   42.901269][ T3296]  set_nlink+0x29/0xb0
[   42.905328][ T3296]  kernfs_iop_permission+0x1e2/0x220
[   42.910595][ T3296]  inode_permission+0x1ca/0x310
[   42.915431][ T3296]  link_path_walk+0x162/0x900
[   42.920090][ T3296]  path_lookupat+0x63/0x2a0
[   42.924579][ T3296]  filename_lookup+0x147/0x340
[   42.929329][ T3296]  vfs_statx+0x9d/0x390
[   42.933470][ T3296]  vfs_fstatat+0x115/0x170
[   42.937873][ T3296]  __se_sys_newfstatat+0x55/0x260
[   42.942888][ T3296]  __x64_sys_newfstatat+0x55/0x70
[   42.947903][ T3296]  x64_sys_call+0x135a/0x2ff0
[   42.952572][ T3296]  do_syscall_64+0xd2/0x200
[   42.957064][ T3296]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   42.962961][ T3296] 
[   42.965286][ T3296] write to 0xffff88810745ac50 of 4 bytes by task 3296 on cpu 1:
[   42.972897][ T3296]  set_nlink+0x99/0xb0
[   42.977392][ T3296]  kernfs_iop_permission+0x1e2/0x220
[   42.982666][ T3296]  inode_permission+0x1ca/0x310
[   42.987512][ T3296]  link_path_walk+0x162/0x900
[   42.992175][ T3296]  path_openat+0x1de/0x2170
[   42.996656][ T3296]  do_filp_open+0x109/0x230
[   43.001146][ T3296]  do_sys_openat2+0xa6/0x110
[   43.005727][ T3296]  __x64_sys_openat+0xf2/0x120
[   43.010482][ T3296]  x64_sys_call+0x2e9c/0x2ff0
[   43.015144][ T3296]  do_syscall_64+0xd2/0x200
[   43.019636][ T3296]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   43.025513][ T3296] 
[   43.027816][ T3296] value changed: 0x00000008 -> 0x00000009
[   43.033510][ T3296] 
[   43.035810][ T3296] Reported by Kernel Concurrency Sanitizer on:
[   43.041939][ T3296] CPU: 1 UID: 0 PID: 3296 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) 
[   43.051207][ T3296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   43.061242][ T3296] ==================================================================
[   43.092981][ T4029] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.105557][ T4029] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   43.135192][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.