last executing test programs:

17m9.062751186s ago: executing program 0 (id=22):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000000203030000000000000800000000000008000100010000000dc470e6a039fdbb20ad28a40d7dec60d1b5e9821658655163be8cfed15f6a57d7c88bc2f3366124c6bfc84906b5bfd724eb8a1abcc0dbf29cb4cbdbb3a2b37b573b7acbb672ebbc692c"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000000203030000000000fb000000000000100800010001000000ff6d552dd76afb350b58f0170a29a11eab6f60f431cfaef4c6a9259c3efcbd229fd84edac40b6bcfd99a57d2f552a10d256e46540362bc2926369db9f75920e00adf571a987fb0b8ead2ff1d48"], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000010301010000020000000000000000000c0002"], 0x20}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000002000010026bd7000ffffffff0a140000030000070000000014000100"], 0x30}, 0x1, 0x0, 0x0, 0x40814}, 0x4000004)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)

16m58.925448719s ago: executing program 0 (id=23):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)
quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0xffffffffffffffff, 0x0)

16m30.725464311s ago: executing program 0 (id=26):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000060a010400000000000000000a0000040900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000001408000140000000090900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c)
listen(r1, 0x5)
accept4(r1, &(0x7f0000000240)=@x25, 0x0, 0x80800)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c)
sendto$inet6(r2, &(0x7f00000002c0)='f', 0xffffffffffffff1a, 0x8884, 0x0, 0x31)

15m54.289647014s ago: executing program 0 (id=28):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x458081, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180}, {&(0x7f0000000280)=""/122}, {&(0x7f0000000400)=""/165}, {&(0x7f00000004c0)=""/142}, {&(0x7f0000000640)=""/70}, {&(0x7f00000006c0)=""/179}], 0x0, &(0x7f0000000580)=""/70, 0x11}}], 0x40000000000029d, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x2, 0x4)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
socket$xdp(0x2c, 0x3, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x1ff, 0xf, 0x8, 0x80, 0x2, 0x3, 0x4, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xff7fff01, 0x6, 0xfffffffc, 0xefed, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x400, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8e, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2b, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f35, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x5, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x4, 0xfffffffe, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1, 0x5, 0x8, 0x401, 0x3, 0xa, 0x3e7, 0xb, 0x5, 0x2, 0x7, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x10, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x5, 0x5, 0x1c, 0x120000, 0x7, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0x5, 0x7, 0xb, 0x5, 0x938, 0x6, 0x2, 0xfffffffe, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x1, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0xffff8000, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000200, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x27e, 0x100, 0x9622, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343f, 0xfff]}, 0x45c)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

15m39.248160049s ago: executing program 0 (id=30):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_clone(0x1144280, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x24004045)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

15m24.518735234s ago: executing program 0 (id=32):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r1, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000140), 0x4)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r4 = accept(r0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)

14m35.695634106s ago: executing program 32 (id=32):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r1, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000140), 0x4)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r4 = accept(r0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)

40.138468288s ago: executing program 2 (id=153):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x80)

37.293662648s ago: executing program 1 (id=154):
accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000100))
munmap(&(0x7f000045e000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.kill\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8013, r0, 0x0)
mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil)
munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000)
munmap(&(0x7f000060f000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000694000/0x3000)=nil, 0x3000)
mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil)
madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)

34.294855958s ago: executing program 2 (id=155):
accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000100))
munmap(&(0x7f000045e000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.kill\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8013, r0, 0x0)
mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil)
munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000)
munmap(&(0x7f000060f000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000694000/0x3000)=nil, 0x3000)
mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil)
madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)

30.226808073s ago: executing program 1 (id=156):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700)
symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00')
r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x1, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200)

26.403623087s ago: executing program 2 (id=157):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x40, 0x1, 0x0, 0x1, 0x7, 0x3, 0x1ba5, 0x6, 0x9, 0x8001, 0x3, 0xe6c4, 0x10000, 0x3, 0x3, 0xa971, 0x7f, 0x5, 0x2, 0x8, 0x1, 0x5, 0x8, 0x9, 0xa4, 0x5, 0x5, 0x6, 0xe72, 0x1, 0x0, 0x4, 0x3, 0x5, 0x3, 0x7fff, 0x3, 0xd, 0x113, 0x8, 0xd, 0x9, 0x401, 0xffff, 0x6, 0x4, 0x2a9a, 0xfffffff9, 0x5, 0x1, 0x7, 0x0, 0x5, 0x1, 0x100, 0x9, 0x3fc000, 0x5, 0x8, 0x7, 0x40, 0x6, 0xfffff81c, 0x4, 0x2, 0xb9c7, 0x40, 0x400, 0x3, 0x2, 0x6c85, 0x88a, 0x3, 0xffff, 0x7, 0xb4c5, 0x4, 0x4, 0x4, 0x4, 0x2, 0xbe42, 0x5, 0x6, 0x7, 0x71, 0x4, 0x2, 0x6, 0xbd, 0x7, 0xfffffdc4, 0x2, 0xc, 0x0, 0x4, 0x2, 0xd0, 0x10, 0x0, 0x19, 0x5, 0x9, 0x8, 0xfffffffa, 0xfffffffc, 0x9c3b, 0x81, 0x7, 0x5, 0xffff, 0xfffffff9, 0x9, 0x6b, 0x7, 0x1, 0x9, 0xff, 0x9, 0x7, 0xfff, 0x6, 0x1, 0x3, 0x5, 0x7, 0xc, 0x2, 0x4, 0x5bb, 0x7, 0x3, 0x679, 0x7, 0x2, 0x5, 0x0, 0xd, 0x10000, 0x7fffffff, 0x5, 0x81, 0x342, 0x2, 0x6, 0x10, 0x6a, 0xd7, 0x10001, 0xcf5, 0xfffffffc, 0x9, 0x2, 0x3, 0x2bd621da, 0xe8, 0x9, 0x6, 0x8, 0x8, 0x5, 0x4, 0x629, 0x0, 0x7a409af, 0xff, 0x8, 0x4, 0x9, 0xe, 0x73b052b9, 0x6, 0x10, 0x3, 0xa, 0x0, 0x1, 0x5a, 0xfff, 0x0, 0x1c, 0xe7a7, 0xfffffffa, 0x6, 0x3, 0xa, 0xfff, 0x2, 0x2, 0x29e, 0x5, 0x47f, 0x0, 0x8, 0x4, 0x9b8, 0x7fff, 0x8, 0xffff, 0x10000, 0x400, 0x0, 0x0, 0xffffff39, 0x5, 0x6a80, 0x10001, 0x4, 0x3, 0x8000, 0x1, 0x2, 0x8, 0xd, 0xce2, 0xffffffe1, 0x3, 0x7, 0x2, 0x4, 0x0, 0x4, 0x4931, 0x80, 0x9, 0x6, 0xd, 0x0, 0x6, 0x2, 0x0, 0xafd7, 0xe, 0x0, 0x9, 0x3c115f2c, 0x2, 0x5, 0x3, 0x1, 0x419, 0x2, 0x9, 0xfffffffd, 0x0, 0x9, 0x2, 0x3, 0x1, 0x101, 0x1, 0x1, 0x3fffc, 0x2626, 0x6]}, @TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xffffffff, 0x3, 0x9, 0x1, 0x800, 0x9c3, 0x4, 0x0, 0x8, 0xffffffff, 0x3, 0x8, 0x8, 0xfffffffd, 0x8, 0x8001, 0x100, 0x3, 0x0, 0x588e, 0x1, 0x1e00, 0x101, 0x7, 0x80000000, 0xf8f1, 0x0, 0x401, 0x10, 0x1, 0xc00000, 0xfffffff7, 0x400, 0x7f, 0x80000000, 0x3, 0x6ade, 0x0, 0x4, 0x401, 0x1, 0x5, 0x8, 0x1, 0x7, 0x3, 0x80, 0x7fffffff, 0x2, 0x9, 0x3, 0x80, 0x8, 0xe, 0x1c9, 0x0, 0x2, 0x4, 0xfffffffa, 0x4, 0x1, 0x4, 0x3, 0x1, 0x8, 0x2, 0xe757, 0xfffffff7, 0x8001, 0x45f, 0x1ff, 0xe, 0xd, 0x7d3, 0x4, 0xb, 0x58c4637b, 0x5, 0x0, 0x1, 0x2, 0x6, 0xb90, 0x203, 0x6, 0x200, 0x7, 0x10000, 0x4, 0xffffff25, 0xa04, 0x78da, 0x0, 0x0, 0xffffffff, 0x80000001, 0x0, 0x5, 0x465, 0x6, 0xcd17, 0x9, 0x6, 0x2, 0xfffffffc, 0xfffffff7, 0x7f, 0x2, 0x6, 0x1, 0x40000, 0x6, 0x6, 0x0, 0x40, 0x8, 0x3, 0x23, 0x0, 0x6, 0x1, 0x2fe, 0x96, 0x0, 0x2, 0x5, 0x2, 0x9, 0x8, 0x0, 0x0, 0x7, 0x6, 0x80, 0x100, 0x7, 0x7f, 0x2, 0x200, 0x8, 0xe330fdc7, 0x9, 0x5, 0x7e, 0x2, 0x0, 0x5, 0xffff0000, 0x2, 0x81, 0x401, 0x7, 0x8, 0xffff669d, 0xffffff94, 0x7, 0x5, 0x10001, 0x7, 0x7, 0x4, 0x5, 0xb2fb, 0x1, 0x7ff, 0x85, 0xffffffff, 0x4ac, 0xfc9, 0x80000000, 0x1, 0xfb, 0x6, 0xb, 0x3, 0x40, 0x3, 0x2, 0x83, 0x6, 0x56a, 0x0, 0x9, 0x9, 0x1, 0x7, 0x9, 0x4, 0xe, 0x6, 0x6, 0x8, 0x0, 0xfffffffe, 0x5, 0x44, 0x4, 0x2, 0x1, 0xfffffff1, 0x6, 0x80000000, 0x4, 0x100, 0xfffffff7, 0x2a8, 0x2, 0x9, 0x7f, 0x4, 0x8, 0xffffffff, 0x6ed916d9, 0xfffffff8, 0x38, 0x3, 0x2, 0xd0, 0x36a0, 0xc, 0x3, 0x2, 0x1, 0x7df0, 0x9, 0x9, 0x5, 0xfff, 0xc, 0x87, 0x8, 0x8, 0x80000000, 0x5, 0x3, 0x800, 0x1c43, 0x7, 0xa66, 0x6, 0x18000, 0x6, 0x4, 0x86f9, 0x6, 0x80, 0x200, 0x28000, 0x401, 0xffff, 0x4d, 0x2, 0xfc, 0x7, 0x2]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r6, &(0x7f00000005c0)="24785466124cebc6c88735f544a9", 0xe, 0x440040c4, &(0x7f00000001c0)={0x11, 0xf8, r5, 0x1, 0xd8, 0x6, @remote}, 0x14)

22.620888906s ago: executing program 1 (id=158):
openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "3d8b00", "eb8e7ba12faf3700", "8000", "c16cb41f00bd22fc"}, 0x38)
sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28)
writev(r1, &(0x7f0000000740)=[{&(0x7f00000002c0)="589224d2c334c1f63d8a621843f389412830dbab71374ae05f97e6e70c4963661dfdab277efd0f190d8751d9d425965e353e53940b202700ca7397ce47d12c2f1442b0af79f7afbc60261390920f78d8f8798aa12e3305b6400000020000000077148704b6cbfbb42d3228e32f061093a3e22906aed35e4407f6f2384f03957aa93423e7c21735d372423f3f1cc868b904373f127f13c5d68b907c74fdcc8d105e2e2538000000", 0xfeb7}], 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

19.923888347s ago: executing program 2 (id=159):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socket$inet(0x2, 0xa, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$nl_route(r0, 0x0, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xd}, 0x18)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0)
write$rfkill(r1, 0x0, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r3=>0x0})
connect$can_bcm(r2, &(0x7f0000000140)={0x1d, r3}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xb, 0x6}, {0x3, 0xfff9}, {0x2, 0x3}}}, 0x24}}, 0x0)
sendmsg$can_bcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x1, 0x6, 0x2, {}, {0x0, 0x2710}, {0x3, 0x0, 0x1}, 0x1, @can={{0x0, 0x1, 0x1}, 0x2, 0x3}}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x40490)

13.42270819s ago: executing program 1 (id=160):
accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000100))
munmap(&(0x7f000045e000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.kill\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8013, r0, 0x0)
mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil)
munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000)
munmap(&(0x7f000060f000/0x4000)=nil, 0x4000)
mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil)
mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil)
madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)

6.16265527s ago: executing program 2 (id=161):
accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000100))
munmap(&(0x7f000045e000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.kill\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8013, r0, 0x0)
mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil)
munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000)
munmap(&(0x7f000060f000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000694000/0x3000)=nil, 0x3000)
mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil)
madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)

4.140702076s ago: executing program 1 (id=162):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700)
symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00')
r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x1, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200)

618.794192ms ago: executing program 1 (id=163):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x14, &(0x7f0000002240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffc01}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xb5111132c32e4187}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x101}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_udp(0x2, 0x2, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)

0s ago: executing program 2 (id=164):
unshare(0x20000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file2/file3\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1/file2/file3/file4\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1/file2/file3/file5\x00', 0x81c0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file6\x00', 0x1c0)
mount$bind(&(0x7f0000000280)='./file0/file1/file2/file3\x00', &(0x7f00000002c0)='./file0/file1/file2/file3\x00', 0x0, 0x1000, 0x0)
mount$bind(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340)='./file0/file6\x00', 0x0, 0x5000, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file6/file2\x00', 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000440)={0x2004}, 0x18, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file2/file3/file4\x00', 0x0, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000004c0)={0x4, r2}, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
landlock_restrict_self(r1, 0x0)
openat(r0, &(0x7f0000000500)='file3/file5\x00', 0x0, 0x0)
renameat2(r0, &(0x7f0000000540)='file3/file5\x00', r0, &(0x7f0000000580)='file3/file4/file5\x00', 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:62014' (ED25519) to the list of known hosts.
syzkaller login: [  421.953107][ T3193] cgroup: Unknown subsys name 'net'
[  422.607004][ T3193] cgroup: Unknown subsys name 'cpuset'
[  422.748015][ T3193] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[  491.812175][ T3193] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  599.693837][ T3200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  599.866982][ T3200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  602.100242][ T3201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  602.216623][ T3201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  611.546144][ T3200] hsr_slave_0: entered promiscuous mode
[  611.611013][ T3200] hsr_slave_1: entered promiscuous mode
[  615.665949][ T3201] hsr_slave_0: entered promiscuous mode
[  615.717233][ T3201] hsr_slave_1: entered promiscuous mode
[  615.743493][ T3201] debugfs: 'hsr0' already exists in 'hsr'
[  615.746654][ T3201] Cannot create hsr debugfs directory
[  623.745205][ T3200] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  623.967588][ T3200] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  624.155209][ T3200] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  624.530888][ T3200] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  626.547232][ T3201] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  626.794711][ T3201] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  627.068098][ T3201] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  627.686998][ T3201] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  638.584353][ T3200] 8021q: adding VLAN 0 to HW filter on device bond0
[  639.695616][ T3201] 8021q: adding VLAN 0 to HW filter on device bond0
[  690.469744][ T3200] veth0_vlan: entered promiscuous mode
[  690.941938][ T3200] veth1_vlan: entered promiscuous mode
[  693.712563][ T3200] veth0_macvtap: entered promiscuous mode
[  694.088087][ T3201] veth0_vlan: entered promiscuous mode
[  694.395696][ T3200] veth1_macvtap: entered promiscuous mode
[  695.161844][ T3201] veth1_vlan: entered promiscuous mode
[  697.776883][   T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  697.796840][   T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  698.021086][   T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  698.030845][   T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  698.228128][ T3201] veth0_macvtap: entered promiscuous mode
[  698.466871][ T3201] veth1_macvtap: entered promiscuous mode
[  701.413407][ T3284] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  701.416355][ T3284] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  701.418571][ T3284] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  701.482920][ T3284] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  703.868465][ T3200] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  717.817299][ T3816] syz_tun: entered allmulticast mode
[  718.747495][ T3816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'.
[  720.228605][ T3816] syz_tun (unregistering): left allmulticast mode
[  757.780097][ T3838] veth0_to_team: entered promiscuous mode
[  774.078590][ T3851] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  777.978354][ T3851] xt_TCPMSS: Only works on TCP SYN packets
[  814.960736][ T3862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11'.
[  820.902087][ T3863] process 'syz.1.12' launched './file1' with NULL argv: empty string added
[  851.597241][ T3878] lo speed is unknown, defaulting to 1000
[  851.617346][ T3878] lo speed is unknown, defaulting to 1000
[  851.742789][ T3878] lo speed is unknown, defaulting to 1000
[  852.354777][ T3878] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  852.781816][ T3878] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  856.897925][ T3878] lo speed is unknown, defaulting to 1000
[  857.123944][ T3878] lo speed is unknown, defaulting to 1000
[  897.113443][ T3912] netlink: 44 bytes leftover after parsing attributes in process `syz.0.22'.
[  986.343737][ T3946] netlink: 20 bytes leftover after parsing attributes in process `syz.1.31'.
[ 1081.637874][ T3748] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1083.543374][ T3748] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1084.964319][ T3748] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1086.154019][ T3748] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1105.104315][ T3748] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1105.483815][ T3748] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1105.693008][ T3748] bond0 (unregistering): Released all slaves
[ 1107.535325][ T3748] hsr_slave_0: left promiscuous mode
[ 1107.603292][ T3748] hsr_slave_1: left promiscuous mode
[ 1108.356915][ T3748] veth1_macvtap: left promiscuous mode
[ 1108.375930][ T3748] veth0_macvtap: left promiscuous mode
[ 1108.454143][ T3748] veth1_vlan: left promiscuous mode
[ 1108.482253][ T3748] veth0_vlan: left promiscuous mode
[ 1153.260982][ T4013] lo speed is unknown, defaulting to 1000
[ 1153.263805][ T4013] lo speed is unknown, defaulting to 1000
[ 1153.464134][ T4013] lo speed is unknown, defaulting to 1000
[ 1154.982410][ T4013] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[ 1157.377435][ T4013] lo speed is unknown, defaulting to 1000
[ 1165.615167][ T3975] lo speed is unknown, defaulting to 1000
[ 1218.893762][ T3975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1219.166721][ T3975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1259.474500][ T3975] hsr_slave_0: entered promiscuous mode
[ 1259.514230][ T3975] hsr_slave_1: entered promiscuous mode
[ 1273.513298][ T3975] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1273.913917][ T3975] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1274.485826][ T3975] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1274.793557][ T3975] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1286.162568][ T4338] syzkaller0: entered promiscuous mode
[ 1286.164720][ T4338] syzkaller0: entered allmulticast mode
[ 1305.145417][ T3975] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1378.790122][ T3975] veth0_vlan: entered promiscuous mode
[ 1379.845448][ T3975] veth1_vlan: entered promiscuous mode
[ 1382.440151][ T3975] veth0_macvtap: entered promiscuous mode
[ 1383.126757][ T3975] veth1_macvtap: entered promiscuous mode
[ 1386.612038][ T3748] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1386.671667][ T3208] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1386.674836][ T3208] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1386.677321][ T3208] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1401.465024][ T4418] netlink: 'syz.2.35': attribute type 1 has an invalid length.
[ 1414.178589][ T4431] binder_alloc: 4427: binder_alloc_buf, no vma
[ 1427.581089][ T4436] Zero length message leads to an empty skb
[ 1435.033208][ T4440] input: syz0 as /devices/virtual/input/input0
[ 1457.432192][ T4462] mmap: syz.1.60 (4462) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[ 1510.912045][ T4490] netlink: 'syz.2.69': attribute type 4 has an invalid length.
[ 1545.354268][ T4506] vlan2: entered promiscuous mode
[ 1545.397131][ T4506] vlan2: entered allmulticast mode
[ 1545.398357][ T4506] veth1_vlan: entered allmulticast mode
[ 1546.141583][ T4510] nftables ruleset with unbound chain
[ 1628.076423][ T4557] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[ 1643.892341][ T4567] syz.1.99 uses obsolete (PF_INET,SOCK_PACKET)
[ 1645.337606][ T4567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.99'.
[ 1682.239918][ T4586] Process accounting resumed
[ 1715.238699][ T3195] lo speed is unknown, defaulting to 1000
[ 1741.748089][ T4629] syzkaller0: entered promiscuous mode
[ 1741.752071][ T4629] syzkaller0: entered allmulticast mode
[ 1755.208748][ T4642] syzkaller0: entered promiscuous mode
[ 1755.211125][ T4642] syzkaller0: entered allmulticast mode
[ 1784.116411][ T4668] syzkaller0: entered promiscuous mode
[ 1784.118339][ T4668] syzkaller0: entered allmulticast mode
[ 1804.498112][ T4685] syzkaller0: entered promiscuous mode
[ 1804.581780][ T4685] syzkaller0: entered allmulticast mode
[ 1833.513516][ T4706] syzkaller0: entered promiscuous mode
[ 1833.515036][ T4706] syzkaller0: entered allmulticast mode
[ 1860.924969][ T4728] syzkaller0: entered promiscuous mode
[ 1860.926992][ T4728] syzkaller0: entered allmulticast mode
[ 1878.384940][ T4747] syzkaller0: entered promiscuous mode
[ 1878.386101][ T4747] syzkaller0: entered allmulticast mode
[ 1899.973440][ T4768] syzkaller0: entered promiscuous mode
[ 1899.975005][ T4768] syzkaller0: entered allmulticast mode
[ 1906.516325][ T4776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.159'.
[ 1926.307962][ T4795] BUG: sleeping function called from invalid context at fs/inode.c:1928
[ 1926.313706][ T4795] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 4795, name: syz.2.164
[ 1926.315728][ T4795] preempt_count: 1, expected: 0
[ 1926.317359][ T4795] RCU nest depth: 0, expected: 0
[ 1926.320393][ T4795] 2 locks held by syz.2.164/4795:
[ 1926.321833][ T4795]  #0: ffffaf80311ea0e0 (&type->s_umount_key#55){+.+.}-{4:4}, at: deactivate_super+0x7e/0x98
[ 1926.332017][ T4795]  #1: ffffaf80311ea998 (&s->s_inode_list_lock){+.+.}-{3:3}, at: hook_sb_delete+0x12e/0xbde
[ 1926.336819][ T4795] Preemption disabled at:
[ 1926.337369][ T4795] [<ffffffff81452ee0>] hook_sb_delete+0x12e/0xbde
[ 1926.342338][ T4795] CPU: 1 UID: 0 PID: 4795 Comm: syz.2.164 Not tainted syzkaller #0 PREEMPT 
[ 1926.343372][ T4795] Hardware name: riscv-virtio,qemu (DT)
[ 1926.343958][ T4795] Call Trace:
[ 1926.344415][ T4795] [<ffffffff8007a1a2>] dump_backtrace+0x2e/0x3c
[ 1926.345081][ T4795] [<ffffffff8000329c>] show_stack+0x30/0x3c
[ 1926.345512][ T4795] [<ffffffff800609c8>] dump_stack_lvl+0x12a/0x1a2
[ 1926.346170][ T4795] [<ffffffff80060a5c>] dump_stack+0x1c/0x24
[ 1926.346853][ T4795] [<ffffffff802181a8>] __might_resched+0x59c/0x5f8
[ 1926.347483][ T4795] [<ffffffff8021828a>] __might_sleep+0x86/0xca
[ 1926.348075][ T4795] [<ffffffff80cd0f14>] iput+0x3c/0xb22
[ 1926.348704][ T4795] [<ffffffff81453620>] hook_sb_delete+0x86e/0xbde
[ 1926.349347][ T4795] [<ffffffff81367ace>] security_sb_delete+0xac/0x184
[ 1926.349992][ T4795] [<ffffffff80c59c9c>] generic_shutdown_super+0xba/0x37c
[ 1926.350686][ T4795] [<ffffffff80c5b578>] kill_litter_super+0x74/0xb0
[ 1926.351349][ T4795] [<ffffffff80c5d118>] deactivate_locked_super+0xd8/0x19c
[ 1926.352042][ T4795] [<ffffffff80c5d260>] deactivate_super+0x84/0x98
[ 1926.352705][ T4795] [<ffffffff80ceec2a>] cleanup_mnt+0x1dc/0x3e6
[ 1926.353287][ T4795] [<ffffffff80ceeee0>] __cleanup_mnt+0x1c/0x26
[ 1926.353826][ T4795] [<ffffffff801e2864>] task_work_run+0x16a/0x25e
[ 1926.354284][ T4795] [<ffffffff8015eed8>] do_exit+0x84c/0x28e4
[ 1926.354841][ T4795] [<ffffffff801614d0>] do_group_exit+0xd4/0x26c
[ 1926.355438][ T4795] [<ffffffff8019a8d0>] get_signal+0x2076/0x22f8
[ 1926.356074][ T4795] [<ffffffff80071cd0>] arch_do_signal_or_restart+0x738/0x1c4e
[ 1926.356646][ T4795] [<ffffffff803c2f24>] exit_to_user_mode_loop+0x8a/0x142
[ 1926.357145][ T4795] [<ffffffff8653a590>] do_trap_ecall_u+0x3f8/0x53a
[ 1926.357758][ T4795] [<ffffffff86563eae>] handle_exception+0x15e/0x16a
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1950.915435][ T3968] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1953.323725][ T3968] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1954.824712][ T3968] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1956.036307][ T3968] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0